Re: [PATCH v3 0/2] MR5222: kernelbase: Allow WriteProcessMemory to succeed on PAGE_EXECUTE_READ.

[Marc-Aurel Zent (＠mzent)]

On Tue Mar  5 16:05:10 2024 +0000, Jinoh Kang wrote:
> > NtWriteVirtualMemory: returns 0.
>
> How is this possible?

No idea, I assume most of the initialized memory was 0 and some of the cache got invalidated when doing the syscall compared to the memcpy case.