x64dbg
/
GleeBug
mirror of https://github.com/x64dbg/GleeBug
1
0
Fork 0
Code Releases Activity

fix: ensure write-only breakpoints trigger on Copy-on-Write pages

This commit is contained in:
Rafael 2026-03-28 18:32:06 +00:00
parent 6b7803d9d9
commit b8737dcce8
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
GleeBug/Debugger.Process.Breakpoint.cpp
View File

@ -183,12 +183,12 @@ namespace GleeBug
#define PAGE_NOACCESS 0x01
#define PAGE_READONLY 0x02
#define PAGE_READWRITE 0x04
#define PAGE_WRITECOPY 0x08 <- not supported
#define PAGE_WRITECOPY 0x08
#define PAGE_EXECUTE 0x10
#define PAGE_EXECUTE_READ 0x20
#define PAGE_EXECUTE_READWRITE 0x40
#define PAGE_EXECUTE_WRITECOPY 0x80 <- not supported
#define PAGE_EXECUTE_WRITECOPY 0x80
#define PAGE_GUARD 0x100 <- not supported with PAGE_NOACCESS
#define PAGE_NOCACHE 0x200 <- not supported with PAGE_GUARD or PAGE_WRITECOMBINE
@ -215,12 +215,16 @@ namespace GleeBug
static DWORD RemoveWriteAccess(DWORD dwAccess)
{
//Removes write permissions and write-on-copy to trigger access violation.
DWORD dwBase = dwAccess & 0xFF;
switch(dwBase)
{
case PAGE_READWRITE:
case PAGE_WRITECOPY:
return (dwAccess & 0xFFFFFF00) | PAGE_READONLY;
case PAGE_EXECUTE_READWRITE:
return (dwAccess & 0xFFFFFF00) | (dwBase >> 1);
case PAGE_EXECUTE_WRITECOPY:
return (dwAccess & 0xFFFFFF00) | PAGE_EXECUTE_READ;
default:
return dwAccess;
}