Re: [PATCH 1/6] ntoskrnl.exe: Implement PsGetProcessSectionBaseAddress() function.

[Jacek Caban]

Hi Paul,

On 31.05.2020 16:41, Paul Gofman wrote:
> +    if (!(h = OpenProcess( PROCESS_ALL_ACCESS, FALSE, process->info.UniqueProcessId)))
> +    {
> +        WARN("Could not open process %#04lx.\n", process->info.UniqueProcessId);
> +        return NULL;
> +    }

This should work, but ObOpenObjectByPointer() is generally used when we 
need a handle from a kernel object pointer.


Thanks,

Jacek