GetProcessDEPPolicy错误87

Question

当我尝试检查某个进程是否正在使用数据执行保护（DEP）时，出现错误87（INVALID_PARAMETER）。 我检查了我的代码，这似乎还可以，但是不幸的是我仍然遇到相同的错误。

码：

BOOL var = true;
DWORD dwPolicy;

HANDLE hProc = OpenProcess(PROCESS_QUERY_INFORMATION, false, 3624);
if (hProc == NULL) {
    cout << "Can't open Process because of the error " << GetLastError() << endl;
}

if (GetProcessDEPPolicy(hProc, &dwPolicy, 0) != FALSE) {
    if (dwPolicy == PROCESS_DEP_ENABLE) {
        cout << "For try.exe process data execution prevention is enabled" << endl;

    }
    else if (dwPolicy == NULL) {
        cout << "For try.exe process data execution prevention is disabled" << endl;
    }
    else {
        cout << "Data is thrunked and we can't change DEP value in future" << endl;
    }
}
else {
    cout << "There was an error with discovering DEP in try.exe process because of "<<GetLastError() << endl;
}

编译并执行后，我得到：

There was an error with discovering DEP in try.exe process because of 87

Answer 1

在文档中，定义了GetProcessDEPPolicy函数：

BOOL WINAPI GetProcessDEPPolicy(
  _In_  HANDLE  hProcess,
  _Out_ LPDWORD lpFlags,
  _Out_ PBOOL   lpPermanent
);

请注意，最后一个参数是out参数，它不是可选参数，但是您要传递0 aka NULL 。 该电话应为：

BOOL permanent = FALSE;
if (GetProcessDEPPolicy(hProc, &dwPolicy, &permanent) != FALSE) {