Skip to content

Commit 462f68a

Browse files
committed
Add note to ZwRaiseException hook
1 parent 8f92c73 commit 462f68a

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

qiling/os/windows/dlls/ntdll.py

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -713,4 +713,9 @@ def __post_exception_filter(ql: Qiling):
713713
# Resume execution at the registered unhandled exception filter.
714714
# If a program is using a custom unhandled exception filter as an anti-debugging
715715
# trick, then the exception filter might not return.
716+
717+
# TODO: This relies on the hook being marked 'passthru' so that Qiling
718+
# doesn't rewind after it returns. However, this is not entirely intended
719+
# behavior of passthru, so this is a bit of a hack. Maybe find some
720+
# way to rewrite without passthru.
716721
ql.os.fcall.call_native(exception_filter, exception_filter_args, ret_addr)

0 commit comments

Comments
 (0)