Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Bug fixes 3 #161

Merged
merged 11 commits into from
Jan 21, 2019
Merged

Bug fixes 3 #161

merged 11 commits into from
Jan 21, 2019

Conversation

hfiref0x
Copy link
Contributor

@hfiref0x hfiref0x commented Jan 20, 2019

Remove double call of SetDebugPrivileges in CreateRemoteThread_Injection
Fix multiple bugs in SetPrivilege routine
Fix unexpected behavior in SetHandleInformatiom_ProtectedHandle
Fix null pointer dereference in get_system_firmware routine
Fix multiple bugs in Services.cpp
Fix null pointer derefence in vmware_firmware_ACPI routine
Fix null pointer dereference in vbox_firmware_ACPI routine
Fix null pointer dereference in qemu_firmware_ACPI routine
Fix resource leak in ScanForModules_ToolHelp32 routine
Fix multiple bugs in ProcessJob routine

Fix invalid handle value passed to CloseHandle, number of null pointer dereferences. Fix typo in main exec_check(&ProcessJob ...).
Fix snapshot handle never get closed after use.
The result of malloc call is not checked against failure.
The result of malloc call is not checked against failure.
The result of malloc call is not checked against failure.
Fix multiple bugs in VMDriverServices and actually make it work. However I don't know the purpose of checking these services because most of them are _host_ drivers and does not present in VM unless manually installed for some (none) reason. Fixed null pointer dereference in get_services - malloc result wasn't checked against failure.
The result of malloc call is not checked against failure.
Expression filter illegal constant. Probably copy-paste misprint. Result of CreateMutex is not checked.
Fixed CloseHandle call with invalid handle, token handle leak.
SetDebugPrivileges is not a flag, but a function. If it called once there is no point in calling it again.
@ayoubfaouzi ayoubfaouzi merged commit 5eea3ff into ayoubfaouzi:master Jan 21, 2019
@hfiref0x hfiref0x deleted the patch-3 branch January 22, 2019 13:47
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants