Uploaded image for project: 'Core ReactOS'
  1. Core ReactOS
  2. CORE-11124

Pool corruption due to invalid handling of window station objects

    XMLWordPrintable

Details

    Description

      https://reactos.org/testman/compare.php?ids=46964,46968,47069,47072

      r70947 (winhttp_winetest sync) caused this test to switch to "crash"
      Since r70979 (user32_winetest sync) it's been "canceled"

      Log for the user crash:

      winhttp.c:3658: Test failed: got 80072f45
      Unhandled exception
      ExceptionCode:    c0000005
      Faulting Address:   ac100c
      CS:EIP 1b:41d6bf
      DS 23 ES 23 FS 3b GS 0
      EAX: 000000ac   EBX: 80072f45   ECX: 004228a8
      EDX: 004228a8   EBP: 0022fa00   ESI: ffffffff   ESP: 0022f9d8
      EDI: 00ac100c   EFLAGS: 00010246
      Address:
           400000+1d6bf      C:\ReactOS\bin\winhttp_winetest.exe
      Frames:
           400000+18aaa      C:\ReactOS\bin\winhttp_winetest.exe
           400000+1cfdd      C:\ReactOS\bin\winhttp_winetest.exe
           400000+1db7e      C:\ReactOS\bin\winhttp_winetest.exe
           400000+1e18f      C:\ReactOS\bin\winhttp_winetest.exe
           400000+1e1f1      C:\ReactOS\bin\winhttp_winetest.exe
         7c750000+fe37       C:\ReactOS\system32\kernel32.dll

      Log for the kernel crash:

      (lib/rtl/actctx.c:2441) unknown element trustInfo
      
      Entered debugger on last-chance exception (Exception Code: 0xc0000005) (Page Fault)
      Memory at 0x00440057 could not be written: Page protection violation.
      kdb:>
       bt
      Eip:
      <NTOSKRNL.EXE:9e37a (ntoskrnl/mm/ARM3/expool.c:1718 (ExAllocatePoolWithTag))>
      Frames:
      <fastfat.sys:822f (drivers/filesystems/fastfat/fcb.c:93 (vfatNewFCB))>
      <fastfat.sys:9032 (drivers/filesystems/fastfat/fcb.c:616 (vfatMakeFCBFromDirEntry))>
      <fastfat.sys:9594 (drivers/filesystems/fastfat/fcb.c:782 (vfatDirFindFile))>
      <fastfat.sys:9adb (drivers/filesystems/fastfat/fcb.c:965 (vfatGetFCBForFile))>
      <fastfat.sys:2bc3 (drivers/filesystems/fastfat/create.c:412 (VfatCreate))>
      <fastfat.sys:db94 (drivers/filesystems/fastfat/misc.c:124 (VfatDispatchRequest))>
      <fastfat.sys:e1ab (drivers/filesystems/fastfat/misc.c:235 (VfatBuildRequest))>
      <NTOSKRNL.EXE:6b49b (ntoskrnl/io/iomgr/irp.c:1221 (IofCallDriver))>
      <NTOSKRNL.EXE:5f966 (ntoskrnl/io/iomgr/file.c:861 (IopParseDevice))>
      <NTOSKRNL.EXE:f394b (ntoskrnl/ob/obname.c:809 (ObpLookupObjectName))>
      <NTOSKRNL.EXE:ec5bc (ntoskrnl/ob/obhandle.c:2531 (ObOpenObjectByName))>
      <NTOSKRNL.EXE:60dc0 (ntoskrnl/io/iomgr/file.c:2466 (IoCreateFile))>
      <NTOSKRNL.EXE:61aa3 (ntoskrnl/io/iomgr/file.c:3223 (NtCreateFile))>
      <NTOSKRNL.EXE:125074 (ntoskrnl/include/internal/i386/ke.h:706 (KiSystemServiceHandler))>
      <NTOSKRNL.EXE:3da5 (:0 (KiFastCallEntry))>
      <ntdll.dll:c78d>
      <wininet.dll:128bb>
      <wininet.dll:1993c>
      <wininet.dll:1ba6e>
      <cryptnet.dll:2ee6>
      <cryptnet.dll:3d04>
      <cryptnet.dll:42a4>
      <crypt32.dll:4ba5>
      <crypt32.dll:11040>
      <winhttp.dll:3764>
      <winhttp.dll:db7b>
      <winhttp.dll:e0c0>
      <winhttp.dll:f599>
      <winhttp_winetest.exe:19045>
      <winhttp_winetest.exe:19630>
      <winhttp_winetest.exe:1db79>
      <winhttp_winetest.exe:1e18a>
      <winhttp_winetest.exe:1e1ec>
      <kernel32.dll:fe32>
      <00000000>
      kdb:>

      Attachments

        Issue Links

          Activity

            People

              ThFabba ThFabba
              ThFabba ThFabba
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: