Address space clobbers during fork() (was Re: Extending /proc/*/maps)

[Chris January]

> Second, I don't know who maps locale.nls, but it happens *very* early
> in the life of the process, long before gdb can talk to it. Using

 From what I can gather from http://www.alex-ionescu.com/part1.pdf and 
 Reactos source code I believe it's mapped by MmCreatePeb, called from 
 PspCreateProcess, called from NtCreateProcess{Ex}. It doesn't look like 
 mapping it in advance would help (if that was even possible), but it may 
 be possible (but risky) to map it somewhere else, update the pointers in 
 the PEB, and then unmap the original.

 Regards,
 Chris January