Alex Ionescu wrote:
I don't understand this change; it is incorrect. MS kernel32.dll sends the name of the port.
It seems that KERNEL32, the 1st (or the 2nd) time, sends L"\Windows", but, the 2nd (or the 1st) time, sends NULL. This happens during the DLL initialization. As you and other stated, this is probably related to the SM managing subsystem IDs in pairs (2+3 for Win32) and not to the servers (Win32 has 1+3 servers hosted by the CSR).
N.B. Still trying to understand how everything get glued.