search

kevoreilly / capemon

capemon: CAPE's monitor
GNU General Public License v3.0
102 stars 49 forks source link

BUG: Functions parsing InLoadOrderModuleList have wrong ending condition #13

Closed ladislav-zezula closed 3 years ago

ladislav-zezula commented 3 years ago

1) The structure LDR_MODULE should be renamed to LDR_DATA_TABLE_ENTRY. This is the name under which the structure is publicky known

2) These functions, parsing the InLoadOrderModuleList have their ending condition wrong and are touching random data via mod->BaseAddress.

I'll prepare pull request for this.

kevoreilly commented 3 years ago

Thank you :heart: