Alex Ionescu wrote:
  Hi,
 Booting ROS doesn't work lately...... I've debugged the problem and
 found two likely causes:
 1) RtlFormatCurrentUserKeyPath calls NtQueryInformationToken with a
 Kernel Mode address while in user-mode
 2) Something is wrong with setting the current mode (in syscall.S),
 and so MmCopySafe... thinks that teh current mode is user while the
 buffer is kernel:
 (mm/mm.c:60) 1, de1c7cf8
 Note that 1 == UserMode while the buffer is kernel-mode.
 It's late here so I don't have time to look into it with more detail.
 Best regards,
 Alex Ionescu
 _______________________________________________ 
    /* Restore the old previous mode */
    popl %ebx
// + 0x2C
    int $3
    movb %bl, %ss:KTHREAD_PREVIOUS_MODE(%esi)
ebx = 0x300.
Nuff said, something is wrong when popping from the stack. It's 2AM so
time to sleep, but this should take a second to fix for anyone.
bEst regards,
Alex Ionescu