Hi all,
Most common, when exiting a app by clicking the "X" in the upper right corner,
(./subsys/win32k/objects/gdiobj.c:591) Attempted to free global gdi handle 0xe04
04b4, caller needs to get ownership first!!!
(lib/rtl/exception.c:75) RtlRaiseStatus(Status 0xc0000005)
(./subsys/win32k/ntuser/message.c:1121) Failed to copy message to kernel: invali
d usermode buffer
(lib/comctl32/toolbar.c:417) bitmap for ID 0, index 0 is not valid, number of bi
tmaps in imagelist: -2
(./ntoskrnl/ke/queue.c:420) Unwaiting Thread: 5
(lib/rtl/exception.c:75) RtlRaiseStatus(Status 0xc0000005)
(./subsys/win32k/ntuser/message.c:1121) Failed to copy message to kernel: invali
d usermode buffer
C0000005 is an Access error, due to MmCopyToCaller being called inside kernel space
when copying one object to another with in kernel space, sometimes but it is common.
In win32k/ntuser/message.c there is and it's my best guess,
Status = MmCopyFromCaller(KernelMem, (PVOID) UserModeMsg->lParam, Size);
at line ~1118, in function CopyMsgToKernelMem. If that function is used to copy data
inside kernel space it will through and exception.
This one is from OpenOffice, Some where in kernel32.dll.
(lib/rtl/exception.c:29) RtlRaiseException(Status 0054f404)
(lib/rtl/exception.c:36) ExceptionAddress 7c801217
(./ntoskrnl/ke/exception.c:94) KiRaiseException
(lib/rtl/exception.c:29) RtlRaiseException(Status 0054f41c)
(lib/rtl/exception.c:36) ExceptionAddress 7c801217
(./ntoskrnl/ke/exception.c:94) KiRaiseException
0 bytes requested - initiating pool verification
0 bytes requested - initiating pool verification
Sorry I haven't looked at this one yet, I just started!
8^>
James