[pso] NTCLOSE 2

Mihai Iancu pso@cursuri.cs.pub.ro
Sun, 28 Mar 2004 08:25:21 -0800 (PST)


cate precizari :
pt orice syscall merge cu logare,
la NTCLOSE crapa numai cand inchid ferestre.

Daca scot zona de logare se pare ca merge

--- Mihai Iancu <mail2mihai@yahoo.com> wrote:
> _asm mov new_stack, esp
> log = IoAllocateErrorLogEntry(
> drv,(UCHAR)(sizeof(IO_ERROR_LOG_PACKET) + 10));
> 	RtlCopyMemory( log->DumpData,"xxxx", 3);
> 	IoWriteErrorLogEntry(log);
> memcpy(new_stack, old_stack, params);
> 
> asta am in interceptor ... exact inainte de apelul
> functiei originale.
> 
> Merge perfect pt orice apel de sistem, chiar si la 
> NtClose, dar cand inchid o fereastra
> apare blue screen.
> 
> Nu se pot face logari in momentul inchiderii cu
> NtClose
> 
> __________________________________
> Do you Yahoo!?
> Yahoo! Finance Tax Center - File online. File on
> time.
> http://taxes.yahoo.com/filing.html
> _______________________________________________
> pso mailing list
> pso@cursuri.cs.pub.ro
>
http://cursuri.cs.pub.ro/cgi-bin/mailman/listinfo/pso


__________________________________
Do you Yahoo!?
Yahoo! Finance Tax Center - File online. File on time.
http://taxes.yahoo.com/filing.html