Update file_flt.c
This commit is contained in:
parent
3d9aba990a
commit
7d55ce934a
|
@ -481,7 +481,7 @@ check:
|
||||||
// check if there are any protected root folders and restict the access to
|
// check if there are any protected root folders and restict the access to
|
||||||
//
|
//
|
||||||
|
|
||||||
if (Iopb->MajorFunction == IRP_MJ_CREATE && File_ProtectedRoots.count != 0) {
|
if (Iopb->MajorFunction == IRP_MJ_CREATE && File_ProtectedRoots.count != 0 && Data->Iopb->TargetFileObject) {
|
||||||
|
|
||||||
OBJECT_NAME_INFORMATION *Name;
|
OBJECT_NAME_INFORMATION *Name;
|
||||||
ULONG NameLength;
|
ULONG NameLength;
|
||||||
|
@ -599,7 +599,7 @@ check:
|
||||||
}
|
}
|
||||||
else if (Iopb->MajorFunction == IRP_MJ_ACQUIRE_FOR_SECTION_SYNCHRONIZATION) {
|
else if (Iopb->MajorFunction == IRP_MJ_ACQUIRE_FOR_SECTION_SYNCHRONIZATION) {
|
||||||
|
|
||||||
if (!proc->image_from_box && proc->protect_host_images) {
|
if (!proc->image_from_box && proc->protect_host_images && Data->Iopb->TargetFileObject) {
|
||||||
|
|
||||||
//
|
//
|
||||||
// If host image protection is enabled, check if we are in process of creating a new process
|
// If host image protection is enabled, check if we are in process of creating a new process
|
||||||
|
|
Loading…
Reference in New Issue