| 161 | |
| 162 | _IRQL_requires_max_(APC_LEVEL) |
| 163 | BOOLEAN CheckProcessMemoryReadable(PEPROCESS Process, __in_data_source(USER_MODE) PVOID UserAddress, SIZE_T Size) |
| 164 | { |
| 165 | KAPC_STATE ApcState; |
| 166 | KeStackAttachProcess(Process, &ApcState); |
| 167 | |
| 168 | BOOLEAN Status = CheckUserMemoryReadable(UserAddress, Size); |
| 169 | |
| 170 | KeUnstackDetachProcess(&ApcState); |
| 171 | return Status; |
| 172 | } |
| 173 | |
| 174 | _IRQL_requires_max_(APC_LEVEL) |
| 175 | BOOLEAN CheckUserMemoryWriteable(__in_data_source(USER_MODE) PVOID UserAddress, SIZE_T Size) |
nothing calls this directly
no test coverage detected