Mixing
How to change permission of mapped and committed memory space?
1
I had tried to read and write data to memory space in any process.
I used VirtualProtect() and VirtualProtectEx() functions to change permission of memory area.
if(!VirtualProtect(dwAddr, dwSize, PAGE_EXECUTE_READWRITE, &dwOldProtect))
{
printf("VirtualProtect failed error %d", GetLastError());
}
CopyMemory(dwAddr, pBuffer, dwSize);
But I had error 5 (access denied) code, instead of good result.
So I checked memory information by using VirtualQuery() function.
MEMORY_BASIC_INFORMATION info;
VirtualQuery(dwAddr, &info, sizeof(info));
Result was following by:
info.Type = MEM_MAPPED;
info.State = MEM_COMMITED;
info.AllocationProtect = PAGE_WRITECOPY;
info.Protect = PAGE_READ;
Therefore I could not change permission of mapped and committed memory.
If there are another ways, please let me know it.
c++ winapi memory-management win32-process
edited Nov 22 '18 at 10:07
Jabberwocky
27.7k93773
asked Nov 22 '18 at 7:53
JinJin
9311322
add a comment |
1
I had tried to read and write data to memory space in any process.
I used VirtualProtect() and VirtualProtectEx() functions to change permission of memory area.
if(!VirtualProtect(dwAddr, dwSize, PAGE_EXECUTE_READWRITE, &dwOldProtect))
{
printf("VirtualProtect failed error %d", GetLastError());
}
CopyMemory(dwAddr, pBuffer, dwSize);
But I had error 5 (access denied) code, instead of good result.
So I checked memory information by using VirtualQuery() function.
MEMORY_BASIC_INFORMATION info;
VirtualQuery(dwAddr, &info, sizeof(info));
Result was following by:
info.Type = MEM_MAPPED;
info.State = MEM_COMMITED;
info.AllocationProtect = PAGE_WRITECOPY;
info.Protect = PAGE_READ;
Therefore I could not change permission of mapped and committed memory.
If there are another ways, please let me know it.
c++ winapi memory-management win32-process
edited Nov 22 '18 at 10:07
Jabberwocky
27.7k93773
asked Nov 22 '18 at 7:53
JinJin
9311322
2
Please show a complete program so that we can see the critical call toOpenProcess. However, there is no point in usingVirtualProtectsince that operates on the calling process, and there is also no point in usingVirtualProtectExsinceWriteProcessMemoryandReadProcessMemoryhandle protection already.
– David Heffernan
Nov 22 '18 at 8:41
from where you take this address ? this is address inside section. you create this section yourself ? or how ? what is section protection on create ? and insteadGetLastError()show result ofRtlGetLastNtStatus()
– RbMm
Nov 22 '18 at 12:25
1
by idea you must gotSTATUS_SECTION_PROTECTIONstatus which is mapped toERROR_INVALID_PARAMETERbecause initial section allocation protect isPAGE_WRITECOPY- incompatible with requestedPAGE_EXECUTE_READWRITE. in case this is not image section
– RbMm
Nov 22 '18 at 12:36
add a comment |
1
1
1
I had tried to read and write data to memory space in any process.
I used VirtualProtect() and VirtualProtectEx() functions to change permission of memory area.
if(!VirtualProtect(dwAddr, dwSize, PAGE_EXECUTE_READWRITE, &dwOldProtect))
{
printf("VirtualProtect failed error %d", GetLastError());
}
CopyMemory(dwAddr, pBuffer, dwSize);
But I had error 5 (access denied) code, instead of good result.
So I checked memory information by using VirtualQuery() function.
MEMORY_BASIC_INFORMATION info;
VirtualQuery(dwAddr, &info, sizeof(info));
Result was following by:
info.Type = MEM_MAPPED;
info.State = MEM_COMMITED;
info.AllocationProtect = PAGE_WRITECOPY;
info.Protect = PAGE_READ;
Therefore I could not change permission of mapped and committed memory.
If there are another ways, please let me know it.
c++ winapi memory-management win32-process
edited Nov 22 '18 at 10:07
Jabberwocky
27.7k93773
asked Nov 22 '18 at 7:53
JinJin
9311322
I had tried to read and write data to memory space in any process.
I used VirtualProtect() and VirtualProtectEx() functions to change permission of memory area.
if(!VirtualProtect(dwAddr, dwSize, PAGE_EXECUTE_READWRITE, &dwOldProtect))
{
printf("VirtualProtect failed error %d", GetLastError());
}
CopyMemory(dwAddr, pBuffer, dwSize);
But I had error 5 (access denied) code, instead of good result.
So I checked memory information by using VirtualQuery() function.
MEMORY_BASIC_INFORMATION info;
VirtualQuery(dwAddr, &info, sizeof(info));
Result was following by:
info.Type = MEM_MAPPED;
info.State = MEM_COMMITED;
info.AllocationProtect = PAGE_WRITECOPY;
info.Protect = PAGE_READ;
Therefore I could not change permission of mapped and committed memory.
If there are another ways, please let me know it.
c++ winapi memory-management win32-process
c++ winapi memory-management win32-process
edited Nov 22 '18 at 10:07
Jabberwocky
27.7k93773
asked Nov 22 '18 at 7:53
JinJin
9311322
edited Nov 22 '18 at 10:07
Jabberwocky
27.7k93773
asked Nov 22 '18 at 7:53
JinJin
9311322
edited Nov 22 '18 at 10:07
Jabberwocky
27.7k93773
edited Nov 22 '18 at 10:07
Jabberwocky
27.7k93773
edited Nov 22 '18 at 10:07
Jabberwocky
27.7k93773
27.7k93773
asked Nov 22 '18 at 7:53
JinJin
9311322
asked Nov 22 '18 at 7:53
JinJin
9311322
asked Nov 22 '18 at 7:53
JinJin
9311322
9311322
2
Please show a complete program so that we can see the critical call toOpenProcess. However, there is no point in usingVirtualProtectsince that operates on the calling process, and there is also no point in usingVirtualProtectExsinceWriteProcessMemoryandReadProcessMemoryhandle protection already.
– David Heffernan
Nov 22 '18 at 8:41
from where you take this address ? this is address inside section. you create this section yourself ? or how ? what is section protection on create ? and insteadGetLastError()show result ofRtlGetLastNtStatus()
– RbMm
Nov 22 '18 at 12:25
1
by idea you must gotSTATUS_SECTION_PROTECTIONstatus which is mapped toERROR_INVALID_PARAMETERbecause initial section allocation protect isPAGE_WRITECOPY- incompatible with requestedPAGE_EXECUTE_READWRITE. in case this is not image section
– RbMm
Nov 22 '18 at 12:36
add a comment |
2
Please show a complete program so that we can see the critical call toOpenProcess. However, there is no point in usingVirtualProtectsince that operates on the calling process, and there is also no point in usingVirtualProtectExsinceWriteProcessMemoryandReadProcessMemoryhandle protection already.
– David Heffernan
Nov 22 '18 at 8:41
from where you take this address ? this is address inside section. you create this section yourself ? or how ? what is section protection on create ? and insteadGetLastError()show result ofRtlGetLastNtStatus()
– RbMm
Nov 22 '18 at 12:25
1
by idea you must gotSTATUS_SECTION_PROTECTIONstatus which is mapped toERROR_INVALID_PARAMETERbecause initial section allocation protect isPAGE_WRITECOPY- incompatible with requestedPAGE_EXECUTE_READWRITE. in case this is not image section
– RbMm
Nov 22 '18 at 12:36
2
2
Please show a complete program so that we can see the critical call to
OpenProcess. However, there is no point in using VirtualProtect since that operates on the calling process, and there is also no point in using VirtualProtectEx since WriteProcessMemory and ReadProcessMemory handle protection already.– David Heffernan
Nov 22 '18 at 8:41
Please show a complete program so that we can see the critical call to
OpenProcess. However, there is no point in using VirtualProtect since that operates on the calling process, and there is also no point in using VirtualProtectEx since WriteProcessMemory and ReadProcessMemory handle protection already.– David Heffernan
Nov 22 '18 at 8:41
from where you take this address ? this is address inside section. you create this section yourself ? or how ? what is section protection on create ? and instead
GetLastError() show result of RtlGetLastNtStatus()– RbMm
Nov 22 '18 at 12:25
from where you take this address ? this is address inside section. you create this section yourself ? or how ? what is section protection on create ? and instead
GetLastError() show result of RtlGetLastNtStatus()– RbMm
Nov 22 '18 at 12:25
1
1
by idea you must got
STATUS_SECTION_PROTECTION status which is mapped to ERROR_INVALID_PARAMETER because initial section allocation protect is PAGE_WRITECOPY - incompatible with requested PAGE_EXECUTE_READWRITE. in case this is not image section– RbMm
Nov 22 '18 at 12:36
by idea you must got
STATUS_SECTION_PROTECTION status which is mapped to ERROR_INVALID_PARAMETER because initial section allocation protect is PAGE_WRITECOPY - incompatible with requested PAGE_EXECUTE_READWRITE. in case this is not image section– RbMm
Nov 22 '18 at 12:36
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53426186%2fhow-to-change-permission-of-mapped-and-committed-memory-space%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
draft saved
draft discarded
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53426186%2fhow-to-change-permission-of-mapped-and-committed-memory-space%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
2
Please show a complete program so that we can see the critical call to
OpenProcess. However, there is no point in usingVirtualProtectsince that operates on the calling process, and there is also no point in usingVirtualProtectExsinceWriteProcessMemoryandReadProcessMemoryhandle protection already.– David Heffernan
Nov 22 '18 at 8:41
from where you take this address ? this is address inside section. you create this section yourself ? or how ? what is section protection on create ? and instead
GetLastError()show result ofRtlGetLastNtStatus()– RbMm
Nov 22 '18 at 12:25
1
by idea you must got
STATUS_SECTION_PROTECTIONstatus which is mapped toERROR_INVALID_PARAMETERbecause initial section allocation protect isPAGE_WRITECOPY- incompatible with requestedPAGE_EXECUTE_READWRITE. in case this is not image section– RbMm
Nov 22 '18 at 12:36