Alex Ionescu wrote:
Hi,
Booting ROS doesn't work lately...... I've debugged the problem and
found two likely causes:
1) RtlFormatCurrentUserKeyPath calls NtQueryInformationToken with a
Kernel Mode address while in user-mode
2) Something is wrong with setting the current mode (in syscall.S),
and so MmCopySafe... thinks that teh current mode is user while the
buffer is kernel:
(mm/mm.c:60) 1, de1c7cf8
Note that 1 == UserMode while the buffer is kernel-mode.
It's late here so I don't have time to look into it with more detail.
Best regards,
Alex Ionescu
_______________________________________________
/* Restore the old previous mode */
popl %ebx
// + 0x2C
int $3
movb %bl, %ss:KTHREAD_PREVIOUS_MODE(%esi)
ebx = 0x300.
Nuff said, something is wrong when popping from the stack. It's 2AM so
time to sleep, but this should take a second to fix for anyone.
bEst regards,
Alex Ionescu