[PATCH 1/3] ntdll: Implement ProcessImageFileNameWin32 in NtQueryInformationProcess.

[Austin English]

On Thu, Mar 1, 2018 at 4:08 PM, Zebediah Figura <z.figura12 at gmail.com> wrote:
> From: Michael Müller <michael at fds-team.de>
>
> This patch allows Process Hacker to show the filename, icon and description of an executable.
>
> Since ProcessImageFileName incorrectly returns a Win32 path, we can simply reuse the existing implementation.
>
> Signed-off-by: Zebediah Figura <z.figura12 at gmail.com>
> ---
>  dlls/ntdll/process.c | 1 +
>  include/winternl.h   | 1 +
>  2 files changed, 2 insertions(+)
>
> diff --git a/dlls/ntdll/process.c b/dlls/ntdll/process.c
> index 835d7e6..fc75f3e 100644
> --- a/dlls/ntdll/process.c
> +++ b/dlls/ntdll/process.c
> @@ -517,6 +517,7 @@ NTSTATUS WINAPI NtQueryInformationProcess(
>      case ProcessImageFileName:
>          /* FIXME: this will return a DOS path. Windows returns an NT path. Changing this would require also changing kernel32.QueryFullProcessImageName.
>           * The latter may be harder because of the lack of RtlNtPathNameToDosPathName. */

It seems that FIXME should be updated/removed then.

-- 
-Austin
GPG: 267B CC1F 053F 0749 (expires 2021/02/18)