致电NtqueryInformationProcess返回status_access_violation错误

Question

我正在尝试查询当前过程中的所有手柄。为此，首先我要打电话，连续2个呼叫后最终抛出status_access_violation（0xc0000005）错误代码。

我的C＃代码如下：

 public class Main
    {

        [StructLayout(LayoutKind.Sequential, Pack = 1)]
        public struct PROCESS_HANDLE_INFORMATION
        { // ProcessInfoClass 0x33
            public IntPtr Handle;
            public IntPtr HandleCount;
            public IntPtr PointerCount;
            public ulong GrantedAccess;
            public ulong ObjectTypeIndex;
            public ulong HandleAttributes;
            public ulong Reserved;
        }
        
        [StructLayout(LayoutKind.Sequential, Pack = 1)]
        public struct PROCESS_HANDLE_SNAPSHOT_INFORMATION
        { // ProcessInfoClass 0x33
            public ulong NumberOfHandles;
            public ulong Reserved;
            public IntPtr Handles;
        }

        [DllImport("kernel32.dll")]
        public static extern IntPtr GetCurrentProcess();

        [DllImport("ntdll.dll", SetLastError = true)]
        public static extern int NtQueryInformationProcess(IntPtr processHandle, uint processInformationClass, ref IntPtr processInformation, int processInformationLength, ref int returnLength);

        [DllImport("ntdll.dll", SetLastError = true)]
        public static extern void RtlZeroMemory(IntPtr Destination, int length);

        private const uint CNST_PROCESS_HANDLE_INFORMATION = 0x33;
        
        public static void doThings()
        {
            unsafe
            {
                int handle_info_size = 0;
                int nLength = 0;
                IntPtr ptrHandleData = IntPtr.Zero;
                try
                {
                    int status = NtQueryInformationProcess(GetCurrentProcess(), CNST_PROCESS_HANDLE_INFORMATION, ref ptrHandleData, handle_info_size, ref nLength);
                    while (status != 0)
                    {
                        handle_info_size = nLength;
                        Marshal.FreeHGlobal(ptrHandleData);
                        ptrHandleData = Marshal.AllocHGlobal(nLength);
                        RtlZeroMemory(ptrHandleData, nLength);
                        status = NtQueryInformationProcess(GetCurrentProcess(), CNST_PROCESS_HANDLE_INFORMATION, ref ptrHandleData, handle_info_size, ref nLength);
                    }
                }
                catch (Exception ex)
                {
                    Console.WriteLine(ex.Message);
                }
                finally
                {
                    Marshal.FreeHGlobal(ptrHandleData);
                }
            }

        }
    }

前两次我调用ntqueryInformationProcess，它返回status_info_length_mismatch（0xc0000004），这似乎很好，因为首先您需要找出所需的缓冲区长度。在这两个电话之后，我想我终于获得了正确的缓冲区长度，但是从那里抛出了status_access_violation错误，而处理信息从未成功检索。