[Bug 33849] Multiple 64-bit kernel drivers crash on access to KI_USER_SHARED_DATA range (0xfffff78000000000) (Tages DRM, Comodo Backup)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=33849

--- Comment #17 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

addendum for the curious ...

The 64-bit kernel drivers here don't suffer from bug 29168 ("Multiple games and
applications need realtime updates to KSYSTEM_TIME members in KUSER_SHARED_DATA
(Star Wars: The Old Republic game client, GO 1.4+ runtime)").

The KI_USER_SHARED_DATA+0x320 -> SharedTickCount is used to initialize the
driver stack security cookie.
Yes, even kernel drivers make use of this security concept (Windows Kernel-mode
GS Cookies) and "fastfail" with bugcheck code 0x2 (kernel driver security
cookie exception).

In newer Windows versions the OS loader generates a new security cookie,
locates old security cookie in PE and replaces it - including kernel modules.

See also bug 38714

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.