Fixing Illegal Indirection bug in SECURE mode

hacksysteam · Sep 24, 2018 · b2382e2 · b2382e2
1 parent ade0578
commit b2382e2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Driver/WriteNULL.c b/Driver/WriteNULL.c
@@ -78,7 +78,7 @@ NTSTATUS TriggerWriteNULL(IN PVOID UserBuffer) {
         // UserBuffer and address pointed by *(UserBuffer) resides in User mode by calling
         // ProbeForRead()/ProbeForWrite() routine before performing the write operation
         ProbeForRead(UserBuffer, sizeof(PVOID), (ULONG)__alignof(PVOID));
-        ProbeForWrite(*(UserBuffer), sizeof(PVOID), (ULONG)__alignof(PVOID));
+        ProbeForWrite(*(PVOID *)UserBuffer, sizeof(PVOID), (ULONG)__alignof(PVOID));
 
         *(PVOID *)UserBuffer = NULL;
 #else