admin/hakril-PythonForWindows
1
0
Fork 0
mirror of https://github.com/hakril/PythonForWindows synced 2026-06-08 14:31:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

Retrieving process ppid now use limited_handle, allowed more case of sucessful retrieval

Browse Source
This commit is contained in:
clement rouault
2021-03-05 16:37:48 +01:00
parent 758f418965
commit 3149961634
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
windows/winobject/process.py
+3 -3
View File
@@ -103,13 +103,13 @@ class Process(utils.AutoHandle):
xtype = windows.remotectypes.transform_type_to_remote64bits(PROCESS_BASIC_INFORMATION)
# Fuck-it <3
data = (ctypes.c_char * ctypes.sizeof(xtype))()
windows.syswow64.NtQueryInformationProcess_32_to_64(self.handle, ProcessInformation=data, ProcessInformationLength=ctypes.sizeof(xtype))
windows.syswow64.NtQueryInformationProcess_32_to_64(self.limited_handle, ProcessInformation=data, ProcessInformationLength=ctypes.sizeof(xtype))
# Map a remote64bits(PROCESS_BASIC_INFORMATION) at the address of 'data'
x = xtype(ctypes.addressof(data), windows.current_process)
else:
information_type = 0
x = PROCESS_BASIC_INFORMATION()
winproxy.NtQueryInformationProcess(self.handle, information_type, x)
winproxy.NtQueryInformationProcess(self.limited_handle, information_type, x)
return x.InheritedFromUniqueProcessId
@property
@@ -981,7 +981,7 @@ class WinProcess(Process):
:type: :class:`str`
"""
buffer = ctypes.c_buffer(0x1024)
rsize = winproxy.GetProcessImageFileNameA(self.limited_handle, buffer)
rsize = winproxy.GetProcessImageFileNameA(self.limited_handle, buffer) # Use a syscall and not some remote process reading
# GetProcessImageFileNameA returns the fullpath
return buffer[:rsize].decode().split("\\")[-1]