Hide process support wildcard matching?

[ayanamist]

After dig the source code, i find hide process function only use exact case-insensitive match, can it support wildcard match like Foobar*.exe or *foobar*.exe ?

Sandboxie/Sandboxie/core/dll/sysinfo.c

Lines 214 to 295 in 45977d2

	//---------------------------------------------------------------------------
	// SysInfo_DiscardProcesses
	//---------------------------------------------------------------------------
	_FX void SysInfo_DiscardProcesses(SYSTEM_PROCESS_INFORMATION *buf)
	{
	SYSTEM_PROCESS_INFORMATION *curr = buf;
	SYSTEM_PROCESS_INFORMATION *next;
	WCHAR boxname[48];
	BOOL hideOther = SbieApi_QueryConfBool(NULL, L"HideOtherBoxes", TRUE);
	WCHAR* hiddenProcesses = NULL;
	WCHAR* hiddenProcessesPtr = NULL;
	ULONG hiddenProcessesLen = 100 * 110; // we can hide up to 100 processes, should be enough
	WCHAR hiddenProcess[110];
	for (ULONG index = 0; ; ++index) {
	NTSTATUS status = SbieApi_QueryConfAsIs(NULL, L"HideHostProcess", index, hiddenProcess, 108 * sizeof(WCHAR));
	if (NT_SUCCESS(status)) {
	if (hiddenProcesses == NULL) {
	hiddenProcesses = (WCHAR*)HeapAlloc(GetProcessHeap(), 0, hiddenProcessesLen * sizeof(WCHAR));
	if (!hiddenProcesses)
	break;
	hiddenProcessesPtr = hiddenProcesses;
	}
	ULONG nameLen = wcslen(hiddenProcess) + 1; // include terminating 0
	if ((hiddenProcessesPtr - hiddenProcesses) + nameLen + 1 > hiddenProcessesLen) {
	SbieApi_Log(2310, L", 'HideProcess'"); // todo add custom message
	break;
	}
	wmemcpy(hiddenProcessesPtr, hiddenProcess, nameLen);
	hiddenProcessesPtr += nameLen;
	*hiddenProcessesPtr = L'\0';
	}
	else if (status != STATUS_BUFFER_TOO_SMALL)
	break;
	}
	//
	// we assume the first record is always going to be the idle process or
	// a system process -- in any case, one we're not going to have to skip
	//
	while (1) {
	next = (SYSTEM_PROCESS_INFORMATION *) (((UCHAR *)curr) + curr->NextEntryOffset);
	if (next == curr)
	break;
	SbieApi_QueryProcess(next->UniqueProcessId, boxname, NULL, NULL, NULL);
	BOOL hideProcess = FALSE;
	if (hideOther && *boxname && _wcsicmp(boxname, Dll_BoxName) != 0) {
	hideProcess = TRUE;
	}
	else if(hiddenProcesses && next->ImageName.Buffer) {
	WCHAR* imagename = wcschr(next->ImageName.Buffer, L'\\');
	if (imagename) imagename += 1; // skip L'\\'
	else imagename = next->ImageName.Buffer;
	if (!*boxname || _wcsnicmp(imagename, L"Sandboxie", 9) == 0) {
	for (hiddenProcessesPtr = hiddenProcesses; *hiddenProcessesPtr != L'\0'; hiddenProcessesPtr += wcslen(hiddenProcessesPtr) + 1) {
	if (_wcsicmp(imagename, hiddenProcessesPtr) == 0) {
	hideProcess = TRUE;
	break;
	}
	}
	}
	}
	if (!hideProcess)
	curr = next;
	else if (next->NextEntryOffset)
	curr->NextEntryOffset += next->NextEntryOffset;
	else
	curr->NextEntryOffset = 0;
	}
	if(hiddenProcesses)
	HeapFree(GetProcessHeap(), HEAP_GENERATE_EXCEPTIONS, hiddenProcesses);
	}