tandasat/DdiMon

ShHandleEptViolation not strict enough

wonderzdh opened this issue · 1 comments

Use GVA in ShHandleEptViolation to find hookinfo, which should actually be found using GPA. For example, if you use the function of mdl to remap VA in the guest, you will not get the correct processing here.

const auto info = ShpFindPatchInfoByPage(shared_sh_data, fault_va); if (!info) { return; }

That's right. Thank you for reporting the issue.