Mike Nordell schrieb:
Hartmut Birr wrote:
while looking for the console closing problem, I've seen that win2k calls PsLookupProcessByProcessId very often with a id of 0xffffffff.
~0 (or -1) is in Win32 (and therefore by extension likely also for NT) the "pseudo handle" for the current process.
~1 (or -2) is current thread.
I know this. The value -1 is not used as pseudo handle. The value is passed as id to PsLookupProcessByProcessId and that is wrong.
- Hartmut