- Execute the below command to print the value of the disable break on failure cookie. If the value is zero the termination on heap corruption flag is set, otherwise it's unset. For more details about this see the previous post.
0:031> db ntdll!RtlpDisableBreakOnFailureCookie L4
77230098 aa cb 7f 69 ...i
- Another way is to execute the following command to print if the termination on heap corruption is enabled.
0:031> !heap -s
LFH Key : 0x726d2f4c
Termination on corruption : DISABLED
Internet Explorer: ENABLEDI asked Mozilla what's the reason to not enable this mitigation but haven't heard back from them so far.
Mozilla Firefox: DISABLED