mirror of
https://github.com/reactos/reactos.git
synced 2026-05-26 19:02:18 +08:00
db69a9a7e1
- Reimplement `RtlUnhandledExceptionFilter()` by just calling `RtlUnhandledExceptionFilter2()`. - Return an adequate exception filter value `EXCEPTION_CONTINUE_SEARCH` from `RtlUnhandledExceptionFilter2()`, instead of some random error. If `ExceptionCode` is `STATUS_POSSIBLE_DEADLOCK` however, return `EXCEPTION_CONTINUE_EXECUTION` instead, as shown by a test from Whindmar Saksit. - The second parameter of `RtlUnhandledExceptionFilter2()` is not a flag, but a pointer to string `PCSTR` ! See https://skanthak.hier-im-netz.de/download/NTDLL.H who is the only one online who has the correct definition, whose usage I've double-checked on Win7 ntdll.dll. This is used in the `<function_name>` slot in the displayed debugger message: ``` *** An Access Violation occurred in <program_command_line>:<function_name> The instruction at <address> tried to write to a NULL pointer ``` For example, see: https://community.osr.com/t/access-violation/33435
RTL restrictions: ExAllocatePool (and friends) must be used exclusively. RtlAllocateHeap (and friends) must NOT be used! ExAllocatePool (and friends) translate to RtlAllocateHeap (and friends) in ntdll\rtl\libsupp.c. RtlEnterCriticalSection (and friends) must be used exclusively. ExAcquireFastMutex (and friends) must NOT be used! RtlEnterCriticalSection (and friends) translate to ExAcquireFastMutex (and friends) in ntoskrnl\rtl\libsupp.c. This means that RtlEnterCriticalSection (and friends) can NOT be used recursively in RTL. The reason for choosing RtlEnterCriticalSection (and friends) over ExAcquireFastMutex (and friends) is that the FAST_MUTEX struct is smaller than the RTL_CRITICAL_SECTION struct.