VfCheckPageProtection
VOID __stdcall VfCheckPageProtection(UINT64 Protection, PVOID CallerAddress){
unsigned int v3;
if( (MmVerifierData & 0x2000000) != 0 && (Protection & 0xF0) != 0 )
{
v3 = Protection;
ViCiPreprocessOptions(
&dword_140C12C84,
"The caller 0x%p specified an executable page protection 0x%x.",
0x2001ui64,
(UINT64)CallerAddress,
(unsigned int)Protection,
0i64);
VfReportIssueWithOptions(0xC4ui64, 0x2001ui64, (UINT64)CallerAddress, v3, 0i64, &dword_140C12C84);
if( (MmVerifierData & 0x1000) != 0 )
ViTargetIncrementCounter(CallerAddress, 0x114ui64);
_InterlockedIncrement(&dword_140C2A6B4);
}
}Referenced by:
VerifierMmAllocateContiguousNodeMemory
VerifierMmCreateSection
VerifierMmMapIoSpaceEx
VerifierMmMapViewOfSection
VerifierMmProtectMdlSystemAddress
VerifierNtCreateSection
VerifierNtMapViewOfSection
VfCheckNxPageProtection
VfZwAllocateVirtualMemory
VfZwCreateSection
VfZwMapViewOfSection
VfZwProtectVirtualMemory