From 98638cc2dfdde460ae49941c76dd51f1b796a001 Mon Sep 17 00:00:00 2001 From: Mark Jansen Date: Tue, 30 Apr 2019 19:03:17 +0200 Subject: [PATCH] [NTOS/MM] Recognize AMD64 image in PeFmtCreateSection failure case --- ntoskrnl/mm/section.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/ntoskrnl/mm/section.c b/ntoskrnl/mm/section.c index 56ffab8a2ad..a8d294578fe 100644 --- a/ntoskrnl/mm/section.c +++ b/ntoskrnl/mm/section.c @@ -364,6 +364,10 @@ l_ReadHeaderFromFile: #endif // _WIN64 break; +#ifndef _WIN64 + case IMAGE_NT_OPTIONAL_HDR64_MAGIC: + nStatus = STATUS_INVALID_IMAGE_WIN_64; +#endif default: DIE(("Unrecognized optional header, Magic is %X\n", piohOptHeader->Magic)); }