nrubsig.kpaste.net RSS- #
- # msnfs41client_fsctl_query_volume_container_state_prototype001.diff
- # motivation see https://sector7.computest.nl/post/2024-06-cve-2024-20693-windows-cached-code-signature-manipulation/
- #
- diff --git a/sys/nfs41sys_fsctl.c b/sys/nfs41sys_fsctl.c
- index 204631e..c93f880 100644
- --- a/sys/nfs41sys_fsctl.c
- +++ b/sys/nfs41sys_fsctl.c
- @@ -1463,6 +1463,23 @@ NTSTATUS nfs41_FsCtl(
- */
- status = STATUS_INVALID_DEVICE_REQUEST;
- break;
- + case FSCTL_QUERY_VOLUME_CONTAINER_STATE:
- + const XXCTL_LOWIO_COMPONENT *FsCtl =
- + &RxContext->LowIoContext.ParamsFor.FsCtl;
- + DbgP("FSCTL_QUERY_VOLUME_CONTAINER_STATE: "
- + "InputBufferLength=0x%p, InputBufferLength=%ld, pOutputBuffer=0x%p OutputBufferLength=%ld\n",
- + FsCtl->pInputBuffer,
- + (long)FsCtl->InputBufferLength,
- + FsCtl->pOutputBuffer,
- + (long)FsCtl->OutputBufferLength);
- + if (FsCtl->OutputBufferLength >= sizeof(CONTAINER_VOLUME_STATE)) {
- + if (FsCtl->pOutputBuffer) {
- + ((PCONTAINER_VOLUME_STATE)FsCtl->pOutputBuffer)->Flags = 0x0;
- + RxContext->CurrentIrp->IoStatus.Status = status = STATUS_SUCCESS;
- + RxContext->InformationToReturn = sizeof(CONTAINER_VOLUME_STATE);
- + }
- + }
- + break;
- default:
- break;
- }
msnfs41client FSCTL_QUERY_VOLUME_CONTAINER_STATE prototype
Posted by Anonymous on Mon 15th Dec 2025 16:42
raw | new post
Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.