23 May
2022
23 May
'22
12:38 p.m.
On Mon May 23 12:04:35 2022 +0000, Jinoh Kang wrote:
are you trying to debug an active process (or not)?
Yes, I'm trying to debug an active process.
is debuggee 32bit or 64bit?
32bit, Wow64 *proper*. (Of course, this means that the bug cannot be triggered without modification to upstream code.)
is dbghelp 32 or 64bit?
64bit.
ok, then we need to fix the lookup of the dbg_hdr (and/or its exposure in the PEB:s) (for the record, 32bit dbghelp is not ready to handle a 64bit module, and likely will never be... so your patch would open a large can of worms :-( )