[ros-dev] win2k poroblem

[Filip Navara]

Hartmut Birr wrote:

>Hi,
>
>while looking for the console closing problem, I've seen that win2k
>calls PsLookupProcessByProcessId very often with a id of 0xffffffff.
>
>- Hartmut
>  
>
I've put ASSERT(ProcessId != (HANDLE)-1) in PsLookupProcessByProcessId 
on my local copy and it was never triggered. My test was booting to 
Explorer and running OpenOffice.org 1.1.1 Word Processor...

>(ex/handle.c:721) Looking up invalid handle 0xffffffff
>Frames:
><ntoskrnl.exe:26f2d (ex/handle.c:722 (ExpLookupHandleTableEntry))>
><ntoskrnl.exe:275ce (ex/handle.c:919 (ExMapHandleToPointer))>
><ntoskrnl.exe:74af8 (ps/cid.c:106 (PsLookupCidHandle))>
><ntoskrnl.exe:7c6d5 (ps/process.c:2709 (PsLookupProcessByProcessId))>
><win32k.sys:45c16 (objects/gdiobj.c:1219 (GDIOBJ_SetOwnership))>
>  
>
^ Honestly I can't see how can you ever get ProcessId == -1 from this 
line of code (assuming it's the correct line):
    Status = PsLookupProcessByProcessId((HANDLE)((ULONG_PTR)PrevProcId & 
~0x1), &OldProcess);
Since a "binary and" with 0xfffffffe is performed, the result can never 
be 0xfffffffff.

><win32k.sys:6840 (eng/surface.c:466 (EngDeleteSurface))>
><win32k.sys:52456 (objects/text.c:1922 (NtGdiExtTextOut))>
><win32k.sys:539ef (objects/text.c:2770 (NtGdiTextOut))>
><ntoskrnl.exe:3fb2 (D:\DOKUME~1\hb\LOKALE~1\Temp/ccgPaaaa.s:178
>(KiSystemService))>
><gdi32.dll:99bc (objects/text.c:45 (TextOutW))>
>  
>
Regards,
Filip