DdiMon

DdiMon copied to clipboard

Use GVA in ShHandleEptViolation to find hookinfo, which should actually be found using GPA. For example, if you use the function of mdl to remap VA in the guest, you will not get the correct processing here.

const auto info = ShpFindPatchInfoByPage(shared_sh_data, fault_va); if (!info) { return; }

That's right. Thank you for reporting the issue.