[Bug 50195] New: x64dbg snapshots >= 2020-11-12_05-12 need ntdll.dll.NtDebugActiveProcess implementation to debug process via attach

WineHQ Bugzilla wine-bugs at winehq.org
Thu Nov 26 06:14:16 CST 2020


https://bugs.winehq.org/show_bug.cgi?id=50195

            Bug ID: 50195
           Summary: x64dbg snapshots >= 2020-11-12_05-12 need
                    ntdll.dll.NtDebugActiveProcess implementation to debug
                    process via attach
           Product: Wine
           Version: 5.22
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: ntdll
          Assignee: wine-bugs at winehq.org
          Reporter: focht at gmx.net
      Distribution: ---

Hello folks,

continuation of bug 50194

--- snip ---
$ wine ./x32dbg.exe 
...
0144:fixme:process:NtCreateDebugObject (0x7ff72f24 1f000f 0x614fe78 0), stub!
0144:fixme:process:NtDebugActiveProcess (0x214 (nil)), stub!
--- snip ---

Wine source:

https://source.winehq.org/git/wine.git/blob/40d4fbe45997a1820296e7909ba2212518bcfacc:/dlls/ntdll/unix/process.c#l1747

--- snip ---
1747 /**********************************************************************
1748  *           NtDebugActiveProcess  (NTDLL.@)
1749  */
1750 NTSTATUS WINAPI NtDebugActiveProcess( HANDLE process, HANDLE debug_object
)
1751 {
1752     FIXME( "(%p %p), stub!\n", process, debug_object );
1753     return STATUS_SUCCESS;
1754 }
--- snip ---

The problem here is that debuggers expect to receive startup debug events about
process/thread creation, loading of modules etc. If they are not received, the
debugger can't synchronize its state machine in the debugger loop.

$ sha1sum snapshot_2020-11-12_05-12.zip 
6e88d4ce8fb967d08b381084f9ab805e5bcc4f18  snapshot_2020-11-12_05-12.zip

$ du -sh snapshot_2020-11-12_05-12.zip 
32M    snapshot_2020-11-12_05-12.zip

$ wine --version
wine-5.22-96-g4957599bbf5

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.



More information about the wine-bugs mailing list