Re: bugchecks in CSRSS (was Re: [ros-dev] Service Control Manager, Plug and Pray, SMB and RPC)

[Eric Kohl]

Hartmut Birr wrote:

>   The real bug starts here. NtUserToUnicodeEx trys to
> allocate to much
>  from nonpaged pool. This means cchBuff is to large. The only caller of
>  NtUserToUnicodeEx is ConioProcessKey. ConioProcessKey calls  ToUnicodeEx
>  (which calls NtUserToUnicodeEx) with cchBuff = 2. Something is wrong in
>  the paramter translation between real and protected mode. 
I set cchBuff = 2 inside of NtUserToUnicodeEx and this fixes the 
following warnings:

>   (mm/npool.c:1626) Trying to allocate 3758215216 bytes
> from nonpaged
>  pool - nothing suitable found, returning NULL
>  (ntuser/keyboard.c:849) ExAllocatePool(-536752086) failed 
But the bugcheck still happens. So, I think it is related to

>   MenuInit():
> SystemParametersInfoW(SPI_GETNONCLIENTMETRICS) failed! 
Because the bugcheck happens in IntGetMenuObject (in win32k.sys).


Regards,
Eric