JKornev/hidden

PsGetThreadProcessId in ProcessPreCallback

hsheep opened this issue · 1 comments

hsheep commented

hi, Is it correct to use PsGetThreadProcessId in ProcessPreCallback ?

`OB_PREOP_CALLBACK_STATUS ProcessPreCallback(PVOID RegistrationContext, POB_PRE_OPERATION_INFORMATION OperationInformation)
{
LogInfo("Allow protected process access from %d to %d", (ULONG)PsGetCurrentProcessId(), (ULONG)PsGetThreadProcessId(OperationInformation->Object));

}`

JKornev commented

Hi,

Yup seems like a bug. Fixed as part of 8e4dd95

Thanks!