From 8b5de3b25103ca54136f6a66f256288e6ebc2354 Mon Sep 17 00:00:00 2001 From: hasherezade Date: Sat, 7 Sep 2024 07:44:52 -0700 Subject: [PATCH] [FEATURE] Do not scan context of the running threads --- scanners/thread_scanner.cpp | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/scanners/thread_scanner.cpp b/scanners/thread_scanner.cpp index f50cd8301..126de1326 100644 --- a/scanners/thread_scanner.cpp +++ b/scanners/thread_scanner.cpp @@ -396,14 +396,11 @@ bool pesieve::ThreadScanner::reportSuspiciousAddr(ThreadScanReport* my_report, U // if extended info given, allow to filter out from the scan basing on the thread state and conditions bool should_scan_context(const util::thread_info& info) { - if (GetCurrentThreadId() == info.tid) { - return false; // don't scan the current thread - } if (!info.is_extended) { return true; } const KTHREAD_STATE state = (KTHREAD_STATE)info.ext.state; - if (state == Ready || state == Running) { + if (state == Ready) { return true; } if (state == Terminated) {