HoShiMin / HookLib

The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support
MIT License
727 stars 152 forks source link

windows 10 1809 page_fault_in_nonpaged_area #2

Closed YangKi1902 closed 4 years ago

YangKi1902 commented 5 years ago

hello, this library is very useful, thank you for that. Today im try to test with windows 10 1809(x64) and got page_fault_in_nonpaged_area bugcheck error, anyways to fix it? sorry i just begining in kernel development.

HoShiMin commented 5 years ago

What exactly are you doing to get this BSOD?

YangKi1902 commented 5 years ago

RtlInitUnicodeString(&SymbolName, L"NtMapViewOfSection"); Target = MmGetSystemRoutineAddress(&SymbolName); SetHook(NtMapViewOfSectionTarget, NtMapViewOfSection_Hook, &OriginalNtMapViewOfSection);// BSOD page_fault_in_nonpaged_area in my NtMapViewOfSection_Hook function i just simply return OriginalNtMapViewOfSection(...) it's working good with all 32bit/64bit w7,w8,w8.1 and windows 10 32 bit, only except windows 10 17763 64bit.

HoShiMin commented 5 years ago

Hm, well, I'll check it, thanks for reporting

HoShiMin commented 4 years ago

Fixed