lirent 32440c7104 Drop the user-half top-level NX bit when deriving VR_X ...

Under KVA shadow (KPTI) the kernel CR3 marks user-half PML4Es NX as
hardening, so OR-ing that top-level NX down the walk made every user
region non-executable - even live code (ntdll .text read back r--u).
Ring 3 executes those pages via the user/shadow CR3, which reaches the
same shared lower tables through an NX-clear PML4E, so the kernel
table's user-half PML4E NX is not what enforces user execution. Ignore
it on the user half; sub-PML4E NX (shared between both CR3s) stays
authoritative.

2026-06-26 07:57:26 +03:00

.gitea/workflows

Install file(1) in the Debian CI job so shlibdeps can run

2026-06-22 16:32:47 +03:00

include

Drop the user-half top-level NX bit when deriving VR_X

2026-06-26 07:57:26 +03:00

src

Drop the user-half top-level NX bit when deriving VR_X

2026-06-26 07:57:26 +03:00

.gitignore

Add CI: release the Windows guest exe on v* tags

2026-06-17 18:30:38 +03:00

CMakeLists.txt

Install file(1) in the Debian CI job so shlibdeps can run

2026-06-22 16:32:47 +03:00

LICENSE

Add MIT license

2026-06-17 15:23:19 +03:00

S

Description

No description provided

MIT 394 KiB

Languages

C 97.5%

CMake 2.5%