[ros-bugs] [Bug 677] New: Crashes after lots of GDI_OBJECT_TYPE_BRUSH - memory corruption?

ReactOS.Bugzilla at reactos.com ReactOS.Bugzilla at reactos.com
Sun Jul 17 14:58:10 CEST 2005 

http://reactos.com/bugzilla/show_bug.cgi?id=677

           Summary: Crashes after lots of GDI_OBJECT_TYPE_BRUSH - memory
                    corruption?
           Product: ReactOS
           Version: 0.3.0-SVN
          Platform: x86 Hardware
        OS/Version: ReactOS
            Status: NEW
          Severity: blocker
          Priority: P3
         Component: Win32
        AssignedTo: ros-bugs at reactos.com
        ReportedBy: michael at fritscher.net


Examples are totalcmd, drhardware 2002 and Everest. They worked some time ago

Lesson5.exe (a opengl test) works, but when I move teh mouse I get corrupt 
blocks on the screen

totalcmd:(crashes only sometimes)
...
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
0 bytes requested - initiating pool verification
ntoskrnl\mm\/rpoolmgr.h(699): High-side redzone overwrite detected for paged 
pool address 0x8cd29270
Tag None(656E6F4E), Size 72, UserSize 32, LoZone 87878787, HiZone 8c92d28c
First few Stack Frames: <ntoskrnl.exe:62ec0 (ntoskrnl/mm/ppool.c:868 
(RPoolAlloc))> <ntoskrnl.exe:63462 (ntoskrnl/mm/ppool.c:92 
(ExAllocatePagedPoolWithTag))> <CDCDCDCD>
Contents of Block:
0000 01 00 00 00 70 A0 D2 8C 70 92 D2 8C 48 A4 D6 8C  ....p...p...H...
0010 00 00 00 00 84 92 D2 8C 84 92 D2 8C 8C 92 D2 8C  ................
A problem has been detected and ReactOS has been shut down to prevent damage to 
your computer.

Technical information:

*** STOP: 0x00000000 (0x00000000,0x00000000,0x00000000,0x00000000)

Frames:
<ntoskrnl.exe:23cc (ntoskrnl/ke/bug.c:498 (KeBugCheckEx))>
<ntoskrnl.exe:2404 (ntoskrnl/ke/bug.c:519 (KeBugCheck))>
<ntoskrnl.exe:62114 (ntoskrnl/mm/ppool.c:410 (RiBadBlock))>
<ntoskrnl.exe:623b4 (ntoskrnl/mm/ppool.c:471 (RUsedRedZoneCheck))>
<ntoskrnl.exe:62520 (ntoskrnl/mm/ppool.c:540 (RPoolRedZoneCheck))>
<ntoskrnl.exe:62a72 (ntoskrnl/mm/ppool.c:700 (RPoolAlloc))>
<ntoskrnl.exe:63462 (ntoskrnl/mm/ppool.c:92 (ExAllocatePagedPoolWithTag))>
<ntoskrnl.exe:612f0 (ntoskrnl/mm/pool.c:54 (EiAllocatePool))>
<ntoskrnl.exe:613a7 (ntoskrnl/mm/pool.c:128 (ExAllocatePoolWithTag))>
<win32k.sys:35be2 (subsys/win32k/eng/mem.c:52 (EngAllocMem))>
<framebuf.DLL:15a6 (drivers/video/displays/framebuf/palette.c:179 
(DrvSetPalette))>
<win32k.sys:6f4fe (subsys/win32k/objects/color.c:410 (NtGdiRealizePalette))>
<ntoskrnl.exe:924e2 ({standard input}:177 (KiSystemService))>
<totalcmd.EXE:300b2>


dhard2002:
...

(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
(subsys\system\services\rpcserver.c:582) Could not find a service!
(lib\advapi32\service\scm.c:691) ScmrOpenServiceA() failed (Error 1060)
(lib\advapi32\service\scm.c:219) CreateServiceA is unimplemented, but returning 
INVALID_HANDLE_VALUE instead of NULL
(ntoskrnl\mm\mm.c:344) Address: ffffffff
_SEHCallHandler: REG 00f3f414
_SEHCallHandler: REG 00f3f8e0
_SEHCallHandler: REG 00f3f8e0
Unhandled exception
Address:
     402895   C:\reactos\System32\services.exe
CS:EIP 1b:402895
DS 23 ES 23 FS 3b GS 23
EAX: ffffffff   EBX: 0065b520   ECX: 00f3fdf8
EDX: 00f3fdf8   EBP: 00f3fdd0   ESI: 00000000   ESP: 00f3fdb8
EDI: 00000000   EFLAGS: 00010286
Frames:
     400000+3816       C:\reactos\System32\services.exe
   76000000+b133       C:\reactos\System32\rpcrt4.dll
   76000000+b26d       C:\reactos\System32\rpcrt4.dll
   7c800000+3487c      C:\reactos\system32\KERNEL32.dll
_SEHCallHandler: REG 00f3f960
_SEHCallHandler: REG 00f3ffb8
_SEHCallHandler: REG 00f3ffb8

Everest:
...

(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
GDI32: UnrealizeObject is unimplemented, please try again later.
WARNING:  NtGdiUnrealizeObject at subsys\win32k\objects\color.c:598 is 
UNIMPLEMENTED!
(subsys\win32k\objects\color.c:617) GDI_OBJECT_TYPE_BRUSH
(lib\shell32\shell32_main.c:471:SHGetFileInfoW) set icon to shell size, stub
(lib\shell32\shell32_main.c:471:SHGetFileInfoW) set icon to shell size, stub
(lib\shell32\shlexec.c:1026:ShellExecuteExW32) flags ignored: 0x00000500
(ntoskrnl\ke\mutex.c:149) Trying to touch a Mutant that the caller doesn't own!
KeBugCheckWithTf at ntoskrnl\ke\catch.c:217
A problem has been detected and ReactOS has been shut down to prevent damage to 
your computer.

The problem seems to be caused by the following file: ntoskrnl.exe

Technical information:

*** STOP: 0x0000001E (0xc0000046,0x80006446,0x000ec340,0x9faa2c44)

***    ntoskrnl.exe - Address 0x8002a7c9 base at 0x80000000, DateStamp 0x0

Exception: -2143058045(0)
Processor: 0 CS:EIP 8:8002a7c9 <ntoskrnl.exe:2a7c9 ({standard input}:1521 
(ZwRaiseException))>
cr2 9faa2898 cr3 4a19000 Proc: 80fc9c28 Pid: 134 <everest.exe> Thrd: 80fcf6a0 
Tid: 138
DS 10 ES 10 FS 30 GS 23
EAX: 00000096   EBX: 0000009d   ECX: 00000000
EDX: 9faa2d74   EBP: 9faa2bf4   ESI: 0055fc6c   ESP: 9faa2884
EDI: 9faa2d74   EFLAGS: 00000282 kESP 9faa2884 kernel stack base 9faa0000
Frames:
<ntoskrnl.exe:1bb3a (ntoskrnl/ex/error.c:64 (ExRaiseStatus))>
<ntoskrnl.exe:6446 (ntoskrnl/ke/mutex.c:150 (KeReleaseMutant))>
<ntoskrnl.exe:21576 (ntoskrnl/ex/mutant.c:337 (NtReleaseMutant))>
<ntoskrnl.exe:924e2 ({standard input}:177 (KiSystemService))>
<KERNEL32.DLL:330a7 (lib/kernel32/synch/mutex.c:202 (ReleaseMutex))>

-- 
Configure bugmail: http://reactos.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the Ros-bugs mailing list