UsbView with Overflows

[James Tabor]

Hi,
Running usbview.exe, killed it with ctm. It fills up memory with threads.

Start of Usbview,

(lib/shell32/shlview.c:1517) LVN_KEYDOWN key=0x0000000d
MainFrameBase::OpenShellFolders(): parent_pidl=C:\Documents and Settings\Adminis
trator.REACTOS\Desktop
(lib/shell32/shlexec.c:1060) flags ignored: 0x0000000c
(lib/rtl/env.c:570) Return STATUS_VARIABLE_NOT_FOUND: PROMPT
FIXME: CopyImage doesn't support IMAGE_ICON correctly!
(lib/ntdll/ldr/utils.c:1190) LdrGetExportByName(): failed to find mxdMessage
(lib/ntdll/ldr/utils.c:2015) Failed to create or open dll section of 'msacm.drv'
  (Status c0000135)
(lib/ntdll/ldr/utils.c:2015) Failed to create or open dll section of 'midimap.dr
v' (Status c0000135)
(lib/rpcrt4/ndr_marshall.c:499) sized string format=68
(lib/rpcrt4/ndr_marshall.c:446) sized string format=68
(lib/rpcrt4/ndr_marshall.c:463) buffer overflow 978 bytes
(lib/rpcrt4/ndr_marshall.c:563) sized string format=68
(lib/rpcrt4/ndr_marshall.c:1853) buffer overflow 2556 byte

<Snip .. ..>

(lib/rpcrt4/ndr_marshall.c:563) sized string format=68
(lib/rpcrt4/ndr_marshall.c:1853) buffer overflow 2580 bytes
(lib/rpcrt4/ndr_marshall.c:499) sized string format=68
(lib/rpcrt4/ndr_marshall.c:446) sized string format=68
(lib/rpcrt4/ndr_marshall.c:463) buffer overflow 923 bytes
(lib/rpcrt4/ndr_marshall.c:563) sized string format=68
(lib/rpcrt4/ndr_marshall.c:1853) buffer overflow 2580 bytes

<Killed by Ctm>

(subsys/win32k/ntuser/window.c:581) thread cleanup: while destroy wnds, wnd=0x8d
9a30dc
(subsys/win32k/objects/gdiobj.c:585) Attempted to free global gdi handle 0x21080
268, caller needs to get ownership first!!!
(subsys/win32k/objects/gdiobj.c:585) Attempted to free global gdi ha(lib/rpcrt4/
ndr_marshall.c:499) sized string format=68
(lib/rpcrt4/ndr_marshall.c:446) sized string format=68
(lindle 0xa0802ed, caller needs to get ownership first!!!
b/rpcrt4/ndr_marshall.c:463) buffer overflow 923 bytes

[James Tabor]

Hi all,
Usbview works, it has work for about two weeks now. Still get allot of these:
(lib/rpcrt4/ndr_marshall.c:531) sized string format=68
But it does run! Revision: 20273

Thanks,
James

[Robert Shearman]

James Tabor wrote:
> Hi all,
> Usbview works, it has work for about two weeks now. Still get allot of 
> these:
> (lib/rpcrt4/ndr_marshall.c:531) sized string format=68

That FIXME signifies that ComputeConformance needs to be called and that 
the string lengths should be capped at pStubMsg->MaxCount. Feel free to 
send a patch to this effect to wine-patches.
-- 
Rob Shearman

[James Tabor]

Robert Shearman wrote:
> James Tabor wrote:
> > Hi all,
> > Usbview works, it has work for about two weeks now. Still get allot of 
> > these:
> > (lib/rpcrt4/ndr_marshall.c:531) sized string format=68
>
> That FIXME signifies that ComputeConformance needs to be called and that 
> the string lengths should be capped at pStubMsg->MaxCount. Feel free to 
> send a patch to this effect to wine-patches.

Hi all!
Well, during this function call we have hundreds of threads created and not exited,
even when the program is ended. Run usbview, you will need to wait, and once you
see our kick ass usb stuff displayed, you can exit the program. Now in a cmd window
run ps.exe, you will see what I'm writing about. Note the time of the threads. ;^)
Thanks,
James