[AVRF] Suppress notifications for providers

learn-more · learn-more · commit 0b8acaac3165 · 2025-03-25T16:23:39.000+01:00
diff --git a/dll/ntdll/ldr/verifier.c b/dll/ntdll/ldr/verifier.c
@@ -333,7 +333,7 @@ AVrfDllUnloadNotification(IN PLDR_DATA_TABLE_ENTRY LdrEntry)
 {
     PLIST_ENTRY Entry;
 
-    if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER))
+    if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER) || !AVrfpInitialized)
         return;
 
     RtlEnterCriticalSection(&AVrfpVerifierLock);
@@ -365,7 +365,7 @@ AVrfInternalHeapFreeNotification(PVOID AllocationBase, SIZE_T AllocationSize)
 {
     PLIST_ENTRY Entry;
 
-    if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER))
+    if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER) || !AVrfpInitialized)
         return;
 
     RtlEnterCriticalSection(&AVrfpVerifierLock);

Original file line number	Diff line number	Diff line change
`@@ -333,7 +333,7 @@ AVrfDllUnloadNotification(IN PLDR_DATA_TABLE_ENTRY LdrEntry)`
`333`	`333`	`{`
`334`	`334`	`PLIST_ENTRY Entry;`
`335`	`335`
`336`		`- if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER))`
	`336`	`+ if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER) \|\| !AVrfpInitialized)`
`337`	`337`	`return;`
`338`	`338`
`339`	`339`	`RtlEnterCriticalSection(&AVrfpVerifierLock);`
`@@ -365,7 +365,7 @@ AVrfInternalHeapFreeNotification(PVOID AllocationBase, SIZE_T AllocationSize)`
`365`	`365`	`{`
`366`	`366`	`PLIST_ENTRY Entry;`
`367`	`367`
`368`		`- if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER))`
	`368`	`+ if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER) \|\| !AVrfpInitialized)`
`369`	`369`	`return;`
`370`	`370`
`371`	`371`	`RtlEnterCriticalSection(&AVrfpVerifierLock);`