内核模式下判断内存可读可写(下面两个函数是判断ring3的内存。我也搞不懂有啥用)
VOID ProbeForRead( IN CONST VOID *Address, IN SIZE_T Length, IN ULONG Alignment );
VOID ProbeForWrite( IN CONST VOID *Address, IN SIZE_T Length, IN ULONG Alignment );
不可读或者不可写产生异常
使用__try __except捕获
内核模式下判断内存可读可写(下面两个函数是判断ring3的内存。我也搞不懂有啥用)
VOID ProbeForRead( IN CONST VOID *Address, IN SIZE_T Length, IN ULONG Alignment );
VOID ProbeForWrite( IN CONST VOID *Address, IN SIZE_T Length, IN ULONG Alignment );
不可读或者不可写产生异常
使用__try __except捕获
转载于:https://www.cnblogs.com/kuangke/p/5500280.html