From aaa5c09cb848896451dae4f575693426e8bcb0f0 Mon Sep 17 00:00:00 2001 From: rabbitstack Date: Fri, 11 Oct 2024 21:18:20 +0200 Subject: [PATCH] fix(proc): Spurious condition when querying process protection attributes --- pkg/ps/snapshotter_windows.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/ps/snapshotter_windows.go b/pkg/ps/snapshotter_windows.go index 872b323cc..4582516e4 100644 --- a/pkg/ps/snapshotter_windows.go +++ b/pkg/ps/snapshotter_windows.go @@ -552,7 +552,7 @@ func (s *snapshotter) Find(pid uint32) (bool, *pstypes.PS) { if err := windows.IsWow64Process(process, &isWOW64); err != nil && isWOW64 { proc.IsWOW64 = true } - if p, err := sys.QueryInformationProcess[sys.PsProtection](process, sys.ProcessProtectionInformation); err != nil && p != nil { + if p, err := sys.QueryInformationProcess[sys.PsProtection](process, sys.ProcessProtectionInformation); err == nil && p != nil { proc.IsProtected = p.IsProtected() } proc.IsPackaged = sys.IsProcessPackaged(process)