[Bug 23431] New: provide a stub for ntdll.NtSystemDebugControl() (Ollydbg 2.x)

wine-bugs at winehq.org wine-bugs at winehq.org
Mon Jun 28 15:38:40 CDT 2010


           Summary: provide a stub for ntdll.NtSystemDebugControl()
                    (Ollydbg 2.x)
           Product: Wine
           Version: 1.2-rc5
          Platform: x86
               URL: http://www.ollydbg.de/version2.html
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: ntdll
        AssignedTo: wine-bugs at winehq.org
        ReportedBy: focht at gmx.net


a simple one...
Ollydbg 2.x uses NtSystemDebugControl( DebugSysReadVirtual, ...) to read kernel
memory (driver/OS address space) for informational purposes.
Failure to do so doesn't cause harm.

Although this approach doesn’t require any additional kernel driver (only the
SeDebugPrivilege privilege on the running process) it's only useful for Windows
XP systems. It's disallowed since Windows Vista/Windows 7.

Not really useful in Wine but it obviously needs a stub.

--- snip ---
wine: Call from 0x7bc3d2d0 to unimplemented function
ntdll.dll.NtSystemDebugControl, aborting
First chance exception: unimplemented function ntdll.dll.NtSystemDebugControl
called in 32-bit code (0x7bc3d2d0).
=>0 0x7bc3d2d0 __wine_spec_unimplemented_stub+0x50(module="ntdll.dll",
in ntdll (0x00334434)
  1 0x7bc1f895 __wine_stub_NtSystemDebugControl+0x28() in ntdll (0x00334434)
  2 0x004467ae in ollydbg (+0x467ad) (0x00334460)
  3 0x0044698b in ollydbg (+0x4698a) (0x00334484)
--- snip ---

Dump params and return STATUS_NOT_IMPLEMENTED to keep it running ;-)


Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.

More information about the wine-bugs mailing list