On 8/19/20 15:55, Nikolay Sivov wrote:
if (inherit && handle_list)
{
attr->Attributes[pos].Attribute = PS_ATTRIBUTE_HANDLE_LIST;
attr->Attributes[pos].Size = handle_list->size;
attr->Attributes[pos].ValuePtr = handle_list->value;
attr->Attributes[pos].ReturnLength = NULL;
pos++;
}
Are you sure it should work this way? 'inherit' flag on process creation means that all handles are inherited. I was under impression that PS_ATTRIBUTE_HANDLE_LIST makes sense with inherit set to FALSE only. Can't recall if I ever tested that precisely though.