nektra / Deviare-InProc

Deviare In Process Instrumentation Engine
http://nektra.com/products/deviare-api-hook-windows/deviare-in-process/
Other
330 stars 84 forks source link

STATUS_STACK_BUFFER_OVERRUN was raised #30

Open 9844201 opened 2 years ago

9844201 commented 2 years ago

I inject the process using NKTHOOKLIB_DisallowReentrancy

hook function NtClose NtOpenFile NtCreateSection NtQueryAttributesFile

STATUS_STACK_BUFFER_OVERRUN was raised But without using NKTHOOKLIB_DisallowReentrancy everything works fine Below is the dmp file

Test platform windows 11 x64 22h2 computer Alienware x17 R2

CrashDump_2a50_2022-10-07_21-48-57-595_3248.zip

The problem might be http://forum.madshi.net/viewtopic.php?f=7&t=28896

madCodeHook 4.2.1 comes with the following changes (compared to 4.1.3): · rewrite of many assembler stubs to make Intel CET happy

After testing Visual Studio (2019-2022) open /CETCOMPAT the problem will reproduce, the hardware must support CET