googleprojectzero / sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.
Apache License 2.0
2.05k stars 428 forks source link

Fixed memory corruption bug when obtaining 64bit thread context #56

Closed CCob closed 2 years ago

CCob commented 2 years ago

The floating point register state is held within a union inside the native struct within winnt.h. This union is 512 bytes in size. This commit adds an additional 96 bytes of padding after the floating point state to ensure that the complete structure is the correct size of 1232 bytes and to ensure the vector registers and additional amd64 debug control registers are now populated correctly.

tyranid commented 2 years ago

Thanks for the PR.