[Bug 44911] BattlEye 'BEDaisy' kernel service crashes on unimplemented function ntoskrnl.exe.PsGetProcessId

wine-bugs at winehq.org wine-bugs at winehq.org
Wed Apr 4 17:41:04 CDT 2018


https://bugs.winehq.org/show_bug.cgi?id=44911

--- Comment #1 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

with this and all the previous patches in place, the driver successfully
returns from entry point:

--- snip ---
$ WINEDEBUG=+seh,+relay,+ntoskrnl,+service wine net start BEDaisy >>log.txt
2>&1
...
0036:Call driver init 0x78d000
(obj=0x11cc20,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\BEDaisy") 
...
0036:Call ntoskrnl.exe.PsGetProcessId(7ec0b070) ret=007d19d2
0036:fixme:ntoskrnl:PsGetProcessId stub: 0x7ec0b070
0036:Ret  ntoskrnl.exe.PsGetProcessId() retval=00000000 ret=007d19d2
...
0036:Ret  driver init 0x78d000
(obj=0x11cbf8,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\BEDaisy")
retval=00000000
0036:Ret  ntoskrnl.exe.IoCreateDriver() retval=00000000 ret=7effb832
0036:Call
ntoskrnl.exe.ObReferenceObjectByName(0065fdc0,00000040,00000000,00000000,00000000,00000000,00000000,0065fdc8)
ret=7effb8bc
0036:trace:ntoskrnl:ObReferenceObjectByName mostly-stub:L"\\Driver\\BEDaisy" 64
(nil) 0 (nil) 0 (nil) 0x65fdc8
...
0036:Ret  ntoskrnl.exe.ObReferenceObjectByName() retval=00000000 ret=7effb8bc
...
0036:Call advapi32.SetServiceStatus(0011b820,0065fd84) ret=7effb485 
...
0036:trace:service:SetServiceStatus 0x11b820 30 4 5 0 0 0 0
--- snip ---

It will run later into problems because it relies on actual data (watcher
thread created by 'PsCreateSystemThread' crashes).

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.



More information about the wine-bugs mailing list