admin/loland-inlineExecute
1
0
Fork 0
mirror of https://github.com/loland/inlineExecute synced 2026-06-21 13:56:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

fixed crash

Browse Source 
fixed a strange crash that occurs when using a more comprehensive capture.

logman create trace "DotNetFullTrace" -p "{e13c0d23-ccbc-4e12-931b-d9cc2eee27e4}" 0xFFFFFFFFFFFFFFFF 5 -o "C:\Users\root\Desktop\full_trace.etl" -ets
This commit is contained in:
loland
2025-12-01 01:57:25 +08:00
parent 79b0a74d0f
commit b1f74b3a81
3 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
inlineExecute/inlineExecute.o
BIN
View File
Binary file not shown.
src/EtwBypass.cs
+1 -1
View File
@@ -121,7 +121,7 @@ namespace EtwBypass {
static void TurnOffETW(IntPtr DotNETRuntimeHandle_addr, out long DotNETRuntimeHandle_val) {
DotNETRuntimeHandle_val = Marshal.ReadInt64(DotNETRuntimeHandle_addr);
Marshal.WriteInt64(DotNETRuntimeHandle_addr, 0);
Marshal.WriteInt64(DotNETRuntimeHandle_addr, 1);
Console.WriteLine("DotNETRuntimeHandle: 0x" + DotNETRuntimeHandle_val.ToString("X"));
}
src/inlineExecute.c
+1 -1
View File
@@ -594,7 +594,7 @@ int* findDotNetRuntimeHandle() {
void turnOffEtw(int* handleAddr, int* handleVal) {
*handleVal = *handleAddr;
*handleAddr = 0;
*handleAddr = 1;
}
void turnOnEtw(int* handleAddr, int handleVal) {