Update unbacked execution for accuracy/tracking#588
Conversation
Improve process tracking and of memory frees
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request refactors several Windows memory signatures to improve unbacked memory tracking by handling deallocations via NtFreeVirtualMemory and VirtualFree. However, a critical bug was identified across all modified signatures: the hProcess argument of VirtualAllocEx is treated as a Process ID (PID) rather than a process handle. This causes unbacked memory ranges to be stored under the handle value instead of the target process's actual PID, breaking remote allocation detection. The reviewer provided suggestions to resolve this by limiting tracking to self-allocations where hProcess represents the current process.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
1 participant
Improve process tracking and of memory frees