DynamoRIO / DynamoRIO/dynamorio

ASSERT incorrect syscall numbers on Windows 10.0.15063.1387 due to Crowdstrike Falcon

Open
#3,243 10 comments 0 reactions 0 assignees View on GitHub
OpSys-Windows Status-NeedInfo
Dominant language
C
Stars
3.2k
Forks
629
Avg merge
2d 15h
Merged PRs (30d)
31

Description

On this build version, no applications can be run under DynamoRIO.
No logs were generated.
```
$ DynamoRIO-Windows-7.0.17832-0\bin64\drrun.exe -debug -verbose -loglevel 3 -- notepad.exe
INFO: targeting application: "C:\WINDOWS\system32\notepad.exe"
INFO: app cmdline: "notepad.exe"
INFO: configuration directory is "C:\Users\felix/dynamorio"
INFO: created child with pid 11728 for C:\WINDOWS\system32\notepad.exe
INFO: waiting forever for app to exit...

```

With previous Windows build versions, DynamoRIO worked as expected.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.