From f780011a865bb0b935e104f93b1ba2c2a1bb3a88 Mon Sep 17 00:00:00 2001 From: Mounir IDRASSI Date: Fri, 8 Mar 2019 00:32:03 +0100 Subject: Windows Driver: fix BSOD when mounting hidden volume if RAM encryption is enabled --- src/Driver/Ntvol.c | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/src/Driver/Ntvol.c b/src/Driver/Ntvol.c index ab9370f7..b159b79d 100644 --- a/src/Driver/Ntvol.c +++ b/src/Driver/Ntvol.c @@ -591,10 +591,6 @@ NTSTATUS TCOpenVolume (PDEVICE_OBJECT DeviceObject, mount->VolumePim, mount->bTrueCryptMode, &Extension->cryptoInfo); -#ifdef _WIN64 - if (IsRamEncryptionEnabled()) - VcProtectKeys (Extension->cryptoInfo, VcGetEncryptionID (Extension->cryptoInfo)); -#endif } ReadVolumeHeaderRecoveryMode = FALSE; @@ -611,6 +607,11 @@ NTSTATUS TCOpenVolume (PDEVICE_OBJECT DeviceObject, goto error; } +#ifdef _WIN64 + if (IsRamEncryptionEnabled()) + VcProtectKeys (Extension->cryptoInfo, VcGetEncryptionID (Extension->cryptoInfo)); +#endif + Dump ("Volume header decrypted\n"); Dump ("Required program version = %x\n", (int) Extension->cryptoInfo->RequiredProgramVersion); Dump ("Legacy volume = %d\n", (int) Extension->cryptoInfo->LegacyVolume); -- cgit v1.2.3