From bebcda0b0b57ab1c7fe092c5157c0f627e2b009b Mon Sep 17 00:00:00 2001 From: Timo Kreuzer Date: Mon, 29 Jan 2018 12:34:45 +0100 Subject: [PATCH] [NTOS:MM] In the x64 version of MmCreateProcessAddressSpace() zero out all page table PFNs --- ntoskrnl/mm/amd64/page.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/ntoskrnl/mm/amd64/page.c b/ntoskrnl/mm/amd64/page.c index c5f6158d813..fb00e41bb96 100644 --- a/ntoskrnl/mm/amd64/page.c +++ b/ntoskrnl/mm/amd64/page.c @@ -626,8 +626,11 @@ MmCreateProcessAddressSpace(IN ULONG MinWs, /* Release PFN lock */ MiReleasePfnLock(OldIrql); - /* Zero pages */ /// FIXME: + /* Zero pages */ + MiZeroPhysicalPage(TableBasePfn); MiZeroPhysicalPage(HyperPfn); + MiZeroPhysicalPage(HyperPdPfn); + MiZeroPhysicalPage(HyperPtPfn); MiZeroPhysicalPage(WorkingSetPfn); /* Set the base directory pointers */