Re: [PATCH 0/1] MR4905: ntdll: Return dummy pointer from RtlQueryProcessDebugInformation stub.

[eric pouech (＠epo)]

this doesn't look well I'm afraid

I just tested from 64 bit Win10, and got some values for fields LockInformation, HeapInformation or ModuleInformation which don't look like pointers at all, yet being non zero

me thinks the structure is not correctly defined for 64 bit processes...
you need to fix that first (I may even believe this would sufficient for the process not to crash)

(note that native stores the extra information just after the DEBUG_BUFFER structure and updates the pointer accordingly)