Show LFH for process heaps
* process heaps dialog
*
* Copyright (C) 2010-2011 wj32
- * Copyright (C) 2020 dmex
+ * Copyright (C) 2020-2022 dmex
*
* This file is part of Process Hacker.
*
@@ -503,13 +503,39 @@ VOID PhpEnumerateProcessHeaps(
switch (entry->Signature)
{
case RTL_HEAP_SIGNATURE:
+ {
+ switch (entry->HeapFrontEndType)
+ {
+ case 1:
+ PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"NT Heap (Lookaside)");
+ break;
+ case 2:
+ PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"NT Heap (LFH)");
+ break;
+ default:
PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"NT Heap");
break;
+ }
+ }
+ break;
case RTL_HEAP_SEGMENT_SIGNATURE:
+ {
+ switch (entry->HeapFrontEndType)
+ {
+ case 1:
+ PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"Segment Heap (Lookaside)");
+ break;
+ case 2:
+ PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"Segment Heap (LFH)");
+ break;
+ default:
PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"Segment Heap");
break;
}
}
+ break;
+ }
+ }
PhDereferenceObject(capturedHeapInfoString);
}
@@ -562,13 +588,39 @@ VOID PhpEnumerateProcessHeaps(
switch (entry->Signature)
{
case RTL_HEAP_SIGNATURE:
+ {
+ switch (entry->HeapFrontEndType)
+ {
+ case 1:
+ PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"NT Heap (Lookaside)");
+ break;
+ case 2:
+ PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"NT Heap (LFH)");
+ break;
+ default:
PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"NT Heap");
break;
+ }
+ }
+ break;
case RTL_HEAP_SEGMENT_SIGNATURE:
+ {
+ switch (entry->HeapFrontEndType)
+ {
+ case 1:
+ PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"Segment Heap (Lookaside)");
+ break;
+ case 2:
+ PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"Segment Heap (LFH)");
+ break;
+ default:
PhSetListViewSubItem(Context->ListViewHandle, lvItemIndex, 7, L"Segment Heap");
break;
}
}
+ break;
+ }
+ }
#ifdef _WIN64
}
