From 40320e5efaa775ec096abafabeb79cc37c858213 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=9D=8E=E9=80=9A=E6=B4=B2?= Date: Tue, 23 Apr 2024 23:29:26 +0800 Subject: [PATCH] Swap (Windows): fix detection in i686 build --- src/detection/swap/swap_windows.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/detection/swap/swap_windows.c b/src/detection/swap/swap_windows.c index a5788a358..52d713c2b 100644 --- a/src/detection/swap/swap_windows.c +++ b/src/detection/swap/swap_windows.c @@ -7,7 +7,7 @@ const char* ffDetectSwap(FFSwapResult* swap) { - ULONG size = sizeof(SYSTEM_PAGEFILE_INFORMATION); + ULONG size = sizeof(SYSTEM_PAGEFILE_INFORMATION) * 2; SYSTEM_PAGEFILE_INFORMATION* FF_AUTO_FREE pstart = (SYSTEM_PAGEFILE_INFORMATION*)malloc(size); while(true) { @@ -16,6 +16,7 @@ const char* ffDetectSwap(FFSwapResult* swap) { if(!(pstart = (SYSTEM_PAGEFILE_INFORMATION*)realloc(pstart, size))) return "realloc(pstart, size) failed"; + continue; } else if(!NT_SUCCESS(status)) return "NtQuerySystemInformation(SystemPagefileInformation, size) failed";