Author: joakim
Subject: Discussion: HOWTO: Enumerate handles
Posted: 03 August 2013 at 3:36pm
I am wondering if it is possible to close (for instance type=file) handles from usermode by using the code in the reference thread? I have tried both NtClose and CloseHandle, but are getting ERROR_INVALID_HANDLE.
Subject: Discussion: HOWTO: Enumerate handles
Posted: 03 August 2013 at 3:36pm
I am wondering if it is possible to close (for instance type=file) handles from usermode by using the code in the reference thread? I have tried both NtClose and CloseHandle, but are getting ERROR_INVALID_HANDLE.
I am simply doing:
|
so it is basically the same handle as used with NtDuplicateObject further up in code.