googleprojectzero / sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.
Apache License 2.0
2.07k stars 433 forks source link

Fix for ParseEnvironmentBlock - switching to ordinal search for end_index #69

Closed lowleveldesign closed 1 year ago

lowleveldesign commented 1 year ago

The IndexOf(\0\0) call in the ParseEnvironmentBlock function does not work as expected starting from .NET 5, because of changes in the globalization API. This PR fixes the problem by forcing the ordinal search for the \0\0 token.

tyranid commented 1 year ago

Thanks.