build/win32/crashinjectdll/crashinjectdll.cpp@6474c204b198 (annotated)
build/win32/crashinjectdll/crashinjectdll.cpp
Wed, 31 Dec 2014 06:09:35 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Wed, 31 Dec 2014 06:09:35 +0100
- changeset 0
- 6474c204b198
- permissions
- -rw-r--r--
Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.
| michael@0 | 1 | /* This Source Code Form is subject to the terms of the Mozilla Public |
| michael@0 | 2 | * License, v. 2.0. If a copy of the MPL was not distributed with this |
| michael@0 | 3 | * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ |
| michael@0 | 4 | |
| michael@0 | 5 | #include <stdio.h> |
| michael@0 | 6 | #include <windows.h> |
| michael@0 | 7 | |
| michael@0 | 8 | // make sure we only ever spawn one thread |
| michael@0 | 9 | DWORD tid = -1; |
| michael@0 | 10 | |
| michael@0 | 11 | DWORD WINAPI CrashingThread( |
| michael@0 | 12 | LPVOID lpParameter |
| michael@0 | 13 | ) |
| michael@0 | 14 | { |
| michael@0 | 15 | // not a very friendly DLL |
| michael@0 | 16 | volatile int* x = (int *)0x0; |
| michael@0 | 17 | *x = 1; |
| michael@0 | 18 | return 0; |
| michael@0 | 19 | } |
| michael@0 | 20 | |
| michael@0 | 21 | BOOL WINAPI DllMain( |
| michael@0 | 22 | HANDLE hinstDLL, |
| michael@0 | 23 | DWORD dwReason, |
| michael@0 | 24 | LPVOID lpvReserved |
| michael@0 | 25 | ) |
| michael@0 | 26 | { |
| michael@0 | 27 | if (tid == -1) |
| michael@0 | 28 | // we have to crash on another thread because LoadLibrary() will |
| michael@0 | 29 | // catch memory access errors and return failure to the calling process |
| michael@0 | 30 | CreateThread( |
| michael@0 | 31 | nullptr, // default security attributes |
| michael@0 | 32 | 0, // use default stack size |
| michael@0 | 33 | CrashingThread, // thread function name |
| michael@0 | 34 | nullptr, // argument to thread function |
| michael@0 | 35 | 0, // use default creation flags |
| michael@0 | 36 | &tid); // returns the thread identifier |
| michael@0 | 37 | return TRUE; |
| michael@0 | 38 | } |
