From 62facb7a4976868f9356aaf03c224cfeac149a57 Mon Sep 17 00:00:00 2001 From: Pierre Schweitzer Date: Sat, 24 Feb 2018 22:06:18 +0100 Subject: [PATCH] [NTOSKRNL] Implement ThreadHideFromDebugger in NtSetInformationThread() --- ntoskrnl/ps/query.c | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/ntoskrnl/ps/query.c b/ntoskrnl/ps/query.c index ad281e63c00..40a365a2534 100644 --- a/ntoskrnl/ps/query.c +++ b/ntoskrnl/ps/query.c @@ -2420,6 +2420,19 @@ NtSetInformationThread(IN HANDLE ThreadHandle, } break; + case ThreadHideFromDebugger: + + /* Check buffer length */ + if (ThreadInformationLength != 0) + { + Status = STATUS_INFO_LENGTH_MISMATCH; + break; + } + + /* Set the flag */ + PspSetCrossThreadFlag(Thread, CT_HIDE_FROM_DEBUGGER_BIT); + break; + default: /* We don't implement it yet */ DPRINT1("Not implemented: %d\n", ThreadInformationClass);