3 ms·
With a hex editor, debugger, and skills that most developers these days seem to lack. I patched the kernel in memory first, using a kernel debugger, to verify
by userbinator 3y ago
With a hex editor, debugger, and skills that most developers these days seem to lack.
I patched the kernel in memory first, using a kernel debugger, to verify my fix worked before editing the file on disk.
- mangamadaiyan 3y agoWindbg or SoftICE? :)
- userbinator 3y agoWindbg; it's free and doesn't require any setup to do this: https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/performing-local-kernel-debugging https://learn.microsoft.com/en-us/windows-hardware/drivers/d... (Working out how to patch such that I wouldn't crash the system if a process happens to call that API while it was in a half-modified state was also a fun problem...) I dug out the details on the bug I patched, and it isn't the same as this one; it's a race condition with timeouts on waiting for keyed events, which I believe isn't applicable in this situation as there are no timeouts.
- Iwan-Zotow 3y agoAren't kernel modules signed?
- runaum 3y agonot in xp, iirc, vista was the first release requiring it