Skip to content

Suspend vs Freeze #1854

Sep 27, 2023 · 1 comments · 3 replies
Discussion options

You must be logged in to vote

Freezing is a stronger version of suspension that cannot be undone via resuming (only thawing). Effectively, when a process is frozen, it adds an additional (permanent) +1 to the suspension counter of each thread. The current implementation of PhFreezeProcess uses state change objects, so it performs freezing, not suspension.

If you're interested in more details, I have a repository about this topic. It is slightly outdated (doesn't cover freeze-bypassing threads, for instance) but can still shed some light on the topic.

Replies: 1 comment 3 replies

Comment options

You must be logged in to vote
3 replies
@anonymous1184
Comment options

@diversenok
Comment options

Answer selected by anonymous1184
@anonymous1184
Comment options

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
3 participants