SECTION_BASIC_INFORMATION - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTMMAPI_H

/**
 * The SECTION_BASIC_INFORMATION structure contains information of an opened section object.
 *
 * @sa https://learn.microsoft.com/en-us/windows/win32/devnotes/ntquerysection
 */
typedef struct _SECTION_BASIC_INFORMATION
{
    PVOID BaseAddress;              // The base virtual address of the section if the section is based.
    ULONG AllocationAttributes;     // The allocation attributes flags.
    LARGE_INTEGER MaximumSize;      // The maximum size of the section in bytes.
} SECTION_BASIC_INFORMATION, *PSECTION_BASIC_INFORMATION;

#endif

View code on GitHub

Structure SECTION_BASIC_INFORMATION is returned as a result of call NtQuerySection with SectionBasicInformation information class.

Unknown

(?), always set to zero.

SectionAttributes

Can be one or combination of:

SectionSize

Size of section, in bytes. This value equals to section's size declared in a call to NtCreateSection or NtExtendSection.

Documented by

See also