Filip Navara schrieb:
Does the attached patch help? I noticed that the
handle number gets
converted along the way by the HANDLE_TO_EX_HANDLE macro and in fact
the original ID passed to PsLookupProcessByProcessId is zero. This
makes prefect sense since it's used as a marker for global GDI handles.
Your patch fix the problem. Now I see only ten or twenty calls to
ExpLookupHandleTableEntry with -1 or -2 from other locations. Most of
them are from CloseHandle and some from ReleaseMutex.
- Filip
P.S. Sorry for the ugly grammar mistakes in my previous post. I should
read twice what I wrote before hitting the Send button. ;-)
And I did always mean win32k in the topic and not win2k.
- Hartmut