[Kernel] KeGetImagePageTableEntry: Added bit 0 set

According to dashboards 14xxx and higher it is required that
return of this call will have that bit set.
This commit is contained in:
Gliniak
2026-05-13 20:07:46 +02:00
parent cdb88d0b36
commit 331ddf79bf

View File

@@ -747,6 +747,11 @@ dword_result_t KeGetImagePageTableEntry_entry(dword_t address,
if (image_heap->page_size() < 65536) {
returned_value |= 0x40000000;
// TODO(Gliniak): Verify if 1 is set when page is marked as read-only. For
// now there is not enough data, but dashboard 14xxx and above requires that
// return from this call will have bit 0 set.
returned_value |= 1;
}
return returned_value & 0x400FFFFF; // this is actually the mask it applies