[pso] NTCLOSE 2
Mihai Iancu
pso@cursuri.cs.pub.ro
Sun, 28 Mar 2004 08:25:21 -0800 (PST)
cate precizari :
pt orice syscall merge cu logare,
la NTCLOSE crapa numai cand inchid ferestre.
Daca scot zona de logare se pare ca merge
--- Mihai Iancu <mail2mihai@yahoo.com> wrote:
> _asm mov new_stack, esp
> log = IoAllocateErrorLogEntry(
> drv,(UCHAR)(sizeof(IO_ERROR_LOG_PACKET) + 10));
> RtlCopyMemory( log->DumpData,"xxxx", 3);
> IoWriteErrorLogEntry(log);
> memcpy(new_stack, old_stack, params);
>
> asta am in interceptor ... exact inainte de apelul
> functiei originale.
>
> Merge perfect pt orice apel de sistem, chiar si la
> NtClose, dar cand inchid o fereastra
> apare blue screen.
>
> Nu se pot face logari in momentul inchiderii cu
> NtClose
>
> __________________________________
> Do you Yahoo!?
> Yahoo! Finance Tax Center - File online. File on
> time.
> http://taxes.yahoo.com/filing.html
> _______________________________________________
> pso mailing list
> pso@cursuri.cs.pub.ro
>
http://cursuri.cs.pub.ro/cgi-bin/mailman/listinfo/pso
__________________________________
Do you Yahoo!?
Yahoo! Finance Tax Center - File online. File on time.
http://taxes.yahoo.com/filing.html