forked from OSchip/llvm-project
22ea0cea59
To intercept the functions in Win11's ntdll.dll, we need to use the trampoline technique because there are bytes other than 0x90 or 0xcc in the gaps between exported functions. This patch adds more patterns that appear in ntdll's functions. Bug: https://bugs.llvm.org/show_bug.cgi?id=51721 Reviewed By: rnk Differential Revision: https://reviews.llvm.org/D109941 |
||
|---|---|---|
| .. | ||
| CMakeLists.txt | ||
| interception_linux_test.cpp | ||
| interception_test_main.cpp | ||
| interception_win_test.cpp | ||