Jinoh Kang (@iamahuman) commented about dlls/ntdll/unix/signal_x86_64.c:
/* send EXCEPTION_EXECUTE_FAULT only if data execution prevention is enabled */ if (!(flags & MEM_EXECUTE_OPTION_DISABLE)) rec.ExceptionInformation[0] = EXCEPTION_READ_FAULT; }
if (is_wow64() && (CS_sig(ucontext) == cs64_sel) && check_invalid_gs( ucontext, &context.c ))
```suggestion:-0+0 if (is_wow64() && CS_sig(ucontext) == cs64_sel && check_invalid_gs( ucontext, &context.c )) ```
Also, the cs64_sel check belongs to check_invalid_gs especially when we have to check the code for GS prefix (among other 64-bit-exclusive prefixes like rex.W).