[ros-dev] Re: [ros-svn] [ion] 13832: - FreeLdr Part II (ntoskrnl is now relocated, removes 3GB compiler flag). Note that there is a bug in LD which Filip and I are examining, so do not try this yet.

[James Tabor]

BugCheck Alert!

ion(a)svn.reactos.com wrote:
>       - FreeLdr Part II (ntoskrnl is now relocated,
> removes 3GB compiler flag). Note that there is a bug in LD which Filip and I are
> examining, so do not try this yet. 
>      - Fix Registry ObRef/ObDeref bug -- Hartmut
>      - Fix SID Capture Bug -- Thomas
>      - Use KPRCB pointer properly (results in more portable and much faster code)
>   
(ob/object.c:1034) Object 81d6ad68/81d6ad90 has invalid handle count (-858993460
)
KeBugCheck at ob/object.c:1035
A problem has been detected and ReactOS has been shut down to prevent damage to
your computer.

The bug code is undefined. Please use an existing code instead.

Technical information:

*** STOP: 0x00000000 (0x00000000,0x00000000,0x00000000,0x00000000)

Frames:
<ntoskrnl.exe: bf15 (ke/bug.c:425 (KeBugCheckEx))>
<ntoskrnl.exe: bf51 (ke/bug.c:445 (KeBugCheck))>
<ntoskrnl.exe: a98ba (ob/object.c:1035 (ObfDereferenceObject))>
<ntoskrnl.exe: a7310 (ob/handle.c:959 (NtClose))>
<ntoskrnl.exe: 33c2 (/tmp/cch6Lxn6.s:178 (KiSystemService))>
<658D9845>
<win32k.sys: 4b9bc (objects/text.c:2928 (TextIntRealizeFont))>
<win32k.sys: 3811d (objects/dc.c:1867 (NtGdiSelectObject))>
<ntoskrnl.exe: 33c2 (/tmp/cch6Lxn6.s:178 (KiSystemService))>
<user32.dll: 3be70 (controls/edit.c:2977 (EDIT_EM_PosFromChar))>

Entered debugger on exception number 3 (Breakpoint)

Entered kernel debugger (type "help" for a list of commands)

kdb:> bt
Frames:
<ntoskrnl.exe: 50d7 (ke/i386/brkpoint.c:50 (DbgBreakPointWithStatus))>
<ntoskrnl.exe: be64 (ke/bug.c:397 (KeBugCheckWithTf))>
<ntoskrnl.exe: bf15 (ke/bug.c:425 (KeBugCheckEx))>
<ntoskrnl.exe: bf51 (ke/bug.c:445 (KeBugCheck))>
<ntoskrnl.exe: a98ba (ob/object.c:1035 (ObfDereferenceObject))>
<ntoskrnl.exe: a7310 (ob/handle.c:959 (NtClose))>
<ntoskrnl.exe: 33c2 (/tmp/cch6Lxn6.s:178 (KiSystemService))>

<win32k.sys: 4b9bc (objects/text.c:2928 (TextIntRealizeFont))>
<win32k.sys: 3811d (objects/dc.c:1867 (NtGdiSelectObject))>
<ntoskrnl.exe: 33c2 (/tmp/cch6Lxn6.s:178 (KiSystemService))>
<user32.dll: 3be70 (controls/edit.c:2977 (EDIT_EM_PosFromChar))>
<user32.dll: 3c2e0 (controls/edit.c:1583 (EDIT_GetLineRect))>
<user32.dll: 3dd6e (controls/edit.c:1711 (EDIT_InvalidateText))>
<user32.dll: 3f927 (controls/edit.c:4791 (EDIT_WM_SetText))>
<user32.dll: 41a88 (controls/edit.c:1002 (EditWndProc_common))>
<user32.dll: 42636 (controls/edit.c:1064 (EditWndProcW))>
<user32.dll: 11ea1 (windows/message.c:964 (IntCallWindowProcW))>
<user32.dll: 13207 (windows/message.c:1868 (User32CallWindowProcFromKernel))>
<ntdll.dll: 9124 (rtl/callback.c:36 (KiUserCallbackDispatcher))>

<user32.dll: 1df55 (windows/dialog.c:528 (DIALOG_DoDialogBox))>
<user32.dll: 1e0f2 (windows/dialog.c:1632 (DialogBoxParamA))>
<taskmgr.exe: fa62 (taskmgr.c:109 (WinMain))>
<taskmgr.exe: 1242a (graphctl.c:605 (GraphCtrl_WndProc))>
<taskmgr.exe: 11e7>
<taskmgr.exe: 1258>
<kernel32.dll: 26562 (process/create.c:339 (BaseProcessStart))>

kdb:> regs
CS:EIP 0008:800050d7, EAX 00000004 EBX 00000000 ECX 8013aa10 EDX 00000000
ESI 00000000 EDI 00000000 EBP 9e9eba38 SS:ESP be64:9e9eba78
EFLAGS: IF IOPL0

kdb:> dregs
Trap   : DR0 00000000 DR1 00000000 DR2 00000000 DR3 00000000 DR6 ffff0ff0 DR7 00
000400

kdb:> cregs
CR0: PE MP TS NE WP PG
CR1 00000000 CR2 000bf000 CR3 3aa57000 CR4 00000680 TR 9e9eb9c4 LDTR 00000000

kdb:> plist
Process list: 308 taskmgr.296 ctm.EXE284 cmd.exe
268 cmd.exe256 explorer244 userinit224 umpnpmgr
208 eventlog192 services160 winlogon132 csrss.ex
104 smss.exe4 System

Wow!
James