Yuxuan Shui (@yshui) commented about dlls/kernel32/toolhelp.c:
else hProcess = GetCurrentProcess();
- if (hProcess != GetCurrentProcess() &&
RtlIsCurrentProcess( hProcess ) &&!NtQueryObject(hProcess, ObjectBasicInformation, &obi, sizeof(obi), NULL) &&
I think this access check is not needed, right? Since we just opened the process.