Uploaded image for project: 'Core ReactOS'
  1. Core ReactOS
  2. CORE-18123

Fuzzing NtUserCreateWindowEx with ROCALL causes BSoD

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Fix Version/s: 0.4.15
    • Component/s: Win32SS
    • Labels:

      Description

      ReactOS 0.4.15-x86-dev (Build 20220320-755631e). Debug log exceeds max size, here's the trace:

       (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2637) err: NtUserCreateWindowEx: failed to capture plstrWindowName
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2637) err: NtUserCreateWindowEx: failed to capture plstrWindowName
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2637) err: NtUserCreateWindowEx: failed to capture plstrWindowName*** Assertion failed: plstrWindowName
      ***   Source File: /win32ss/user/ntuser/window.c, line 2620Break repeatedly, break Once, Ignore, terminate Process or terminate Thread (boipt)? 
      kdb:> o
      Execute '.cxr F8E5C968' to dump context
      
      Entered debugger on embedded INT3 at 0x0008:0x8058B775.
      kdb:> bt
      Eip:
      <ntoskrnl.exe:18b776 (home/runner/work/reactos/reactos/build/../src/sdk/lib/rtl/i386/debug_asm.S:33 (DbgBreakPoint))>
      Frames:
      <win32k.sys:8865a (win32ss/user/ntuser/window.c:2620 (NtUserCreateWindowEx))>
      <ntoskrnl.exe:3fe5 (:0 (KiSystemCallTrampoline))>
      <ntoskrnl.exe:14e739 (ntoskrnl/ke/i386/traphdlr.c:1840 (KiSystemServiceHandler))>
      <ntoskrnl.exe:3e2f (:0 (KiFastCallEntry))>
      <ntdll.dll:10181>
      <ROCALL_checked.exe:1203>
      <kernel32.dll:1c97b>
      kdb:> cont
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2637) err: NtUserCreateWindowEx: failed to capture plstrWindowName
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2637) err: NtUserCreateWindowEx: failed to capture plstrWindowName
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2637) err: NtUserCreateWindowEx: failed to capture plstrWindowName
      (/win32ss/user/ntuser/window.c:2637) err: NtUserCreateWindowEx: failed to capture plstrWindowName
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2637) err: NtUserCreateWindowEx: failed to capture plstrWindowName
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!
      (/win32ss/user/ntuser/window.c:2627) err: NtUserCreateWindowEx: Got an invalid menu handle!*** Assertion failed: plstrWindowName
      ***   Source File: /win32ss/user/ntuser/window.c, line 2620Break repeatedly, break Once, Ignore, terminate Process or terminate Thread (boipt)? 
      kdb:> 

        Attachments

          Activity

            People

            • Assignee:
              ThFabba ThFabba
              Reporter:
              ctasan ctasan
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: