New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
UNADDR in NtGdiOpenDCW system call when calling CreateTextServices #501
Comments
From bruen...@google.com on July 19, 2011 13:26:18 looks like the # args changed in NtGdiOpenDCW in Vista: an arg was added in the middle Status: Started |
From derek.br...@gmail.com on July 20, 2011 13:48:16 This issue was closed by revision r404 . Status: Fixed |
From timurrrr@google.com on July 21, 2011 02:49:39 Thanks! Status: Verified |
From timurrrr@google.com on July 21, 2011 03:12:17 Ooops, looks like it's still broken on Vista x64, see http://build.chromium.org/p/client.drmemory/builders/win-vista_x64-drm/builds/1149/steps/app_suite_tests/logs/stdio [ RUN ] NtGdiTests.CreateTextServices Status: Started |
From bruen...@google.com on July 21, 2011 09:28:46 this makes no sense: where did 0x1c come from? win7 wow64: |
From bruen...@google.com on July 21, 2011 09:50:18 cannot repro on my vista x64 vm. |
From timurrrr@google.com on July 21, 2011 10:59:30 Can you try reproducing it on vm75-m3 ? |
From bruen...@google.com on July 21, 2011 11:10:25 the "vista wow64" in comment 5 is from vm75-m3 run w/ -verbose 2 |
From timurrrr@google.com on July 21, 2011 11:14:38
You can "shutdown -r -t 0 -f" at any time and this will likely restore the RDP availability if it has problems :) |
From timurrrr@google.com on July 22, 2011 08:35:46 Hmmm the report disappeared from the bot since r408 - r409 ... Marking as fixed unless it re-appears. Status: Fixed |
From bruen...@google.com on October 27, 2013 09:04:15 Re-opening for a simplification to switch to purely table-based: Now that we have the min+max version support in the number Status: Started |
From bruen...@google.com on October 27, 2013 09:09:32 While at it, the min,max fields could be used for NtGdiHfontCreate as well |
From SDenbo...@gmail.com on October 31, 2013 14:57:59 Added two entries in the table for NtGdiOpenDCW and NtGdiHfontCreate in r1605 . Status: Fixed |
From timurrrr@google.com on July 19, 2011 07:07:33
Repro taken from issue #455 :
#include <windows.h>
#include <richedit.h>
#include <textserv.h>
#pragma comment(lib, "riched20.lib")
int main() {
CreateTextServices(NULL, NULL, NULL); // it fails but it's OK
return 0;
}
[XP 32-bit with symbols]
Error
#1
: UNADDRESSABLE ACCESS: reading 0x00dbd4ac-0x00dbd4b0 4 byte(s) within 0x00dbd4ac-0x00dbd4b0@0:00:01.423 in thread 4736
system call NtGdiOpenDCW
0x77f1be2f <GDI32.dll+0xbe2f> GDI32.dll!bCreateDCW
0x77f2c82b <GDI32.dll+0x1c82b> GDI32.dll!CreateICW
0x74e8b9bd <RICHED20.dll+0x5b9bd> RICHED20.dll!CreateTextServices
0x74e7d96b <RICHED20.dll+0x4d96b> RICHED20.dll!CreateTextServices
0x0040101e <test.exe+0x101e> test.exe!main
c:\sandbox\455\test.cpp:8
[w/o symbols]
system call NtGdiOpenDCW
0x77f1be2f <GDI32.dll+0xbe2f> GDI32.dll!EnumFontFamiliesExW
0x77f2c82b <GDI32.dll+0x1c82b> GDI32.dll!CreateICW
0x74e8b9bd <RICHED20.dll+0x5b9bd> RICHED20.dll!CreateTextServices
0x74e7d96b <RICHED20.dll+0x4d96b> RICHED20.dll!CreateTextServices
0x0040101e <test.exe+0x101e> test.exe!main
c:\sandbox\455\test.cpp:8
Also seen on Chromium w/o symbols, looks related:
Error
#1
: UNINITIALIZED READ: reading 0x003cbe58-0x003cbe5c 4 byte(s) within 0x003cbe58-0x003cbe5c@0:01:26.148 in thread 2840
system call NtGdiEnumFonts
0x759ec264 <GDI32.dll+0x1c264> GDI32.dll!CreateICW
0x759ec3d9 <GDI32.dll+0x1c3d9> GDI32.dll!EnumFontFamiliesExW
0x726eea4e <RICHED20.dll+0xea4e> RICHED20.dll!CreateTextServices
0x726edc98 <RICHED20.dll+0xdc98> RICHED20.dll!IID_ITextServices
0x726ed54a <RICHED20.dll+0xd54a> RICHED20.dll!IID_IRichEditOleCallback
0x726ee895 <RICHED20.dll+0xe895> RICHED20.dll!CreateTextServices
0x726ee871 <RICHED20.dll+0xe871> RICHED20.dll!CreateTextServices
0x726e220c <RICHED20.dll+0x220c> RICHED20.dll!?
0x75e96238 <USER32.dll+0x16238> USER32.dll!gapfnScSendMessage
0x75e968ea <USER32.dll+0x168ea> USER32.dll!gapfnScSendMessage
0x75ea0ab0 <USER32.dll+0x20ab0> USER32.dll!FillRect
0x75ea0ad6 <USER32.dll+0x20ad6> USER32.dll!CallWindowProcW
0x5d221b87 <chrome.dll+0x1b91b87> chrome.dll!ATL::CWindowImplBaseTWTL::CRichEditCtrlT<ATL::CWindow,ATL::CWinTraits<1342177664,0> >::DefWindowPro
c:\program files (x86)\microsoft visual studio 9.0\vc\atlmfc\include\atlwin.h:3030
0x5d223778 <chrome.dll+0x1b93778> chrome.dll!ATL::CWindowImplBaseTWTL::CRichEditCtrlT<ATL::CWindow,ATL::CWinTraits<1342177664,0> >::WindowProc
c:\program files (x86)\microsoft visual studio 9.0\vc\atlmfc\include\atlwin.h:3089
0x75e96238 <USER32.dll+0x16238> USER32.dll!gapfnScSendMessage
0x75e968ea <USER32.dll+0x168ea> USER32.dll!gapfnScSendMessage
0x75e9cd1a <USER32.dll+0x1cd1a> USER32.dll!GetWindow
0x75e9cd81 <USER32.dll+0x1cd81> USER32.dll!SendMessageW
0x5d21af26 <chrome.dll+0x1b8af26> chrome.dll!ATL::CWindow::SetFont
c:\program files (x86)\microsoft visual studio 9.0\vc\atlmfc\include\atlwin.h:864
Original issue: http://code.google.com/p/drmemory/issues/detail?id=501
The text was updated successfully, but these errors were encountered: