Debugging a gnarly problem on Windows

Essentially why I steer clear of 'high level' languages.. you have to eventually do the Win/Kernel API work anyway, so one might as well start from the beginning. :)
 
What's interesting is that the Windows kernel on the async return just stomps on memory without any respect for the RO flags the author put on the page. Those flags are obviously just for the little guy, not the mighty kernel!
 
What's interesting is that the Windows kernel on the async return just stomps on memory without any respect for the RO flags the author put on the page. Those flags are obviously just for the little guy, not the mighty kernel!

Isn't it good to be Kernel?
 
Win and Kernel APIs do a lot of stack fixups before they return, not like you usual return instruction, and it does get really messy.
The impression I get from that article was that the development were not exactly aware of what the Kernel and Win APIs are doing, and started playing at that level without keeping tabs..
It took him 5 days to discover this... heh heh.. he has a few more years to go still
:)
 
Back
Top