* Usermode reads should use https://github.com/mandiant/STrace/blob/7e2d56c23ec89566fd82667b7f220037480a4e6b/C/STrace/DynamicTrace.cpp#L5 or at least ProbeForRead to restrict addresses we read to UM and catch with __try __except if they're invalid addresses. * Guard against PEB / Module lists stomping. Cycles can be created not including the list head/end causing infinite loops in the module walks
Usermode reads should use
STrace/C/STrace/DynamicTrace.cpp
Line 5 in 7e2d56c
Guard against PEB / Module lists stomping. Cycles can be created not including the list head/end causing infinite loops in the module walks