Hi!
Hartmut Birr wrote:
James Tabor wrote:
Hi,
SVB revision 15031. List dll dump.
I noticed many cmd in the process list so I could only use listdlls to
dump
the processes and command lines. I use a old cvs ros build for
testing, this
uses less drive space (2 + G), so here it is,
ListDLLs V2.23 - DLL lister for Win9x/NT
Copyright (C) 1997-2000 Mark Russinovich
http://www.sysinternals.com
That is a result of my changes in rev 14475 and 14480. Csrss holds an
opened handle for each process. This is necessary to identify a process
over its process id. The process id is only unique if the process does
live. The process itself has an opened port handle. If the process is
closed the port handle, csrss does also close the process handle. If a
process is terminate and does not inform csrss, csrss does not close
the process handle. Deleting of the process' handle table will close the
port handle, but the handle table is only deleted if no reference to the
process exist. It seems I have to revert my changes. The old
implementation needs a delay between removing a process id from one
process and reassign the same id to a new process.
- Hartmut
New problems,
When I execute a batch file to modify the path, after the batch file is
completed the cmd consoles go away.
First cmd;
mm/mm.c:338
Unhandled exception
Address:
0 C:\ReactOS\System32\cmd.exe
CS:EIP 1b:0
DS 23 ES 23 FS 3b GS 23
EAX: 0068f293 EBX: 00004000 ECX: 0068f1d8
EDX: 7ffe0304 EBP: 0068f298 ESI: 00000000 ESP: 0068f25c
EDI: 00000000 EFLAGS: 00010216
Frames:
400000+4dea C:\ReactOS\System32\cmd.exe
400000+2643 C:\ReactOS\System32\cmd.exe
400000+31b0 C:\ReactOS\System32\cmd.exe
400000+11e7 C:\ReactOS\System32\cmd.exe
400000+1238 C:\ReactOS\System32\cmd.exe
7c800000+28acf C:\ReactOS\system32\KERNEL32.dll
Second cmd;
mm/mm.c:338
Unhandled exception
Address:
0 C:\ReactOS\System32\cmd.exe
CS:EIP 1b:0
DS 23 ES 23 FS 3b GS 23
EAX: 0068f293 EBX: 00004000 ECX: 0068f1d8
EDX: 7ffe0304 EBP: 0068f298 ESI: 00000000 ESP: 0068f25c
EDI: 00000000 EFLAGS: 00010216
Frames:
400000+4dea C:\ReactOS\System32\cmd.exe in _ReadBatchLine {call 411748
<_FileGetString>}
400000+2643 C:\ReactOS\System32\cmd.exe in ProcessInput { if (!(ip =
ReadBatchLine
(&bEchoThisLine))) }
400000+31b0 C:\ReactOS\System32\cmd.exe in main { nExitCode =
ProcessInput(FALSE);}
400000+11e7 C:\ReactOS\System32\cmd.exe in ___mingw_CRTStartup
400000+1238 C:\ReactOS\System32\cmd.exe in _mainCRTStartup
7c800000+28acf C:\ReactOS\system32\KERNEL32.dll process/create.c:331
(BaseProcessStart)
Okay, this was from ls.bat which is a batch file with "xls -CF %1 %2" in it.
The cmd locks up and kdb is started;
(NTDLL:ldr/utils.c:2039) Failed to create or open dll section of '\SystemRoot\sy
stem32\winlogon.exe' (Status c0000135)
(mm/i386/page.c:283) Pde for 00c00000 - 00ffffff is not freed, RefCount 1
(dispatch.c:166)(dispatch) Select: 0
(dispatch.c:166)(dispatch) Select: 0
(dispatch.c:166)(dispatch) Select: 0
Entered debugger on last-chance exception number 14 (Page Fault)
Memory at 0x200068 could not be read: Page not present.
kdb:> bt
Eip:
<ntoskrnl.exe:98ebb (kdbg/kdb_symbols.c:541 (KdbSymFreeProcessSymbols))>
Frames:
<ntoskrnl.exe:9211a (kdbg/kdb.c:1487 (KdbDeleteProcessHook))>
<ntoskrnl.exe:7b9dd (ps/kill.c:163 (PspDeleteProcess))>
<ntoskrnl.exe:772a9 (ob/object.c:998 (ObpDeleteObject))>
<ntoskrnl.exe:773b5 (ob/object.c:1055 (ObpDeleteObjectDpcLevel))>
<ntoskrnl.exe:7757e (ob/object.c:1165 (ObfDereferenceObject))>
<ntoskrnl.exe:73b99 (ob/handle.c:78 (ObpDecrementHandleCount))>
<ntoskrnl.exe:73fd1 (ob/handle.c:212 (ObpDeleteHandle))>
<ntoskrnl.exe:7508c (ob/handle.c:909 (NtClose))>
<ntoskrnl.exe:3602 (/tmp/ccLjPSWL.s:180 (KiSystemService))>
Entered debugger on last-chance exception number 14 (Page Fault)
Memory at 0x200038 could not be read: Page not present.
KeBugCheckWithTf at ke/catch.c:217
(ke/process.c:282) Invalid detach (thread was not attached)
KeBugCheck at ke/process.c:283
A problem has been detected and ReactOS has been shut down to prevent damage to
your computer.
INVALID_PROCESS_DETACH_ATTEMPT
Technical information:
*** STOP: 0x00000006 (0x00000000,0x00000000,0x00000000,0x00000000)
Frames:
<ntoskrnl.exe:10839 (ke/bug.c:456 (KeBugCheckEx))>
<ntoskrnl.exe:10859 (ke/bug.c:476 (KeBugCheck))>
<ntoskrnl.exe:14ca3 (ke/process.c:283 (KeDetachProcess))>
<videoprt.sys:3bd6 (videoprt.c:521 (IntDetachFromCSRSS))>
<videoprt.sys:2f8d (int10.c:194 (IntInt10CallBios))>
<vbemp.sys:1dc5 (vbemp.c:757 (VBEResetDevice))>
<vbemp.sys:1973 (vbemp.c:530 (VBEResetHw))>
<videoprt.sys:23b8 (dispatch.c:54 (IntVideoPortResetDisplayParameters))>
<hal.dll:30a2 (../generic/display.c:646 (HalReleaseDisplayOwnership))>
<ntoskrnl.exe:1067b (ke/bug.c:303 (KeBugCheckWithTf))>
<ntoskrnl.exe:10c00 (ke/catch.c:212 (KiDispatchException))>
<ntoskrnl.exe:1229 (ke/i386/exp.c:176 (KiKernelTrapHandler))>
<ntoskrnl.exe:1a49 (ke/i386/exp.c:580 (KiTrapHandler))>
<ntoskrnl.exe:33e4 (/tmp/ccDVLimL.s:192 (KiTrapProlog))>
<ntoskrnl.exe:98617 (kdbg/kdb_symbols.c:81 (KdbpSymFindUserModule))>
<ntoskrnl.exe:98802 (kdbg/kdb_symbols.c:141 (KdbpSymFindModule))>
<ntoskrnl.exe:98827 (kdbg/kdb_symbols.c:160 (KdbpSymFindModuleByAddress))>
<ntoskrnl.exe:9888a (kdbg/kdb_symbols.c:222 (KdbSymPrintAddress))>
<ntoskrnl.exe:92f7b (kdbg/kdb_cli.c:590 (KdbpCmdBackTrace))>
<ntoskrnl.exe:9614e (kdbg/kdb_cli.c:2191 (KdbpDoCommand))>
<ntoskrnl.exe:962ad (kdbg/kdb_cli.c:2250 (KdbpCliMainLoop))>
<ntoskrnl.exe:9175c (kdbg/kdb.c:1070 (KdbpCallMainLoop))>
<ntoskrnl.exe:b007 (/tmp/ccGBevvE.s:142 (KdbpStackSwitchAndCall))>
Entered debugger on embedded INT3 at 0x0008:0x8000581e.
Entered debugger on embedded INT3 at 0x0008:0x8000581e.
I can execute standard execution files w/o any problem, FYI.
Well, until this is fixed I can not start checking my changes to kernel32
or ntdll modifications. BTW these changed I have are in a local branch.
Thanks,
James