EldoS | Feel safer!

Software components for data protection, secure storage and transfer

Cannot run sample

Also by EldoS: SecureBlackbox
200+ components and classes for digital security, signing, encryption and secure networking.
#7051
Posted: 07/25/2008 04:29:33
by Dan Cooper (Basic support level)
Joined: 06/27/2007
Posts: 125

I am trying to run the sample project (CPP / VC6) but when I install the driver I get a message box saying I need to restart for changes to take effect. I have restarted twice now and still get the same message. Any attempt to do anything beyond the install of the driver results in "The system cannot find the specified file". Have I missed something?
#7080
Posted: 07/28/2008 01:38:03
by Vladimir Cherniga (EldoS Corp.)

Please specify from which sample project you have obtained this problem ? What cbflt library package did you use ? Did you see driver version number within sample project main window. Could you locate cbfltfs.sys driver file at the %windir%\System32\Drivers path ?

#7082
Posted: 07/28/2008 04:27:06
by Dan Cooper (Basic support level)
Joined: 06/27/2007
Posts: 125

cbfltfs.sys is in the %windir%\System32\Drivers folder.

The project causing the problem is the BaseFilter project. The library and header being used is the one in the 'CPP\VC6\static_runtime(MT)' folder.

I have just tried the sample again after the weekend and now it says "Driver (ver 0.2.8.21) installed, service running" which it did not say before so it seems it did eventually install.
#7083
Posted: 07/28/2008 05:10:15
by Dan Cooper (Basic support level)
Joined: 06/27/2007
Posts: 125

I do get an exception when a directory is refreshed multiple times in quick succession:
Code
   ntdll.dll!DbgBreakPoint()    
   ntdll.dll!RtlpNtMakeTemporaryKey()  + 0x6737   
   ntdll.dll!RtlInitializeSListHead()  + 0x10b69   
   ntdll.dll!iswdigit()  + 0x224   
   ntdll.dll!RtlpNtMakeTemporaryKey()  + 0x7e56   
   ntdll.dll!RtlInitializeSListHead()  + 0x115c0   
   ntdll.dll!iswdigit()  + 0x128   
>   FileMon.exe!free(void * pBlock=0x008843e0)  Line 101 + 0xe   C
   FileMon.exe!_CbFltUcbPostCreate()  + 0x22e   
   FileMon.exe!_CbFltUcbRequest@12()  + 0x60   
   FileMon.exe!_UcbWorkerThreadProc()  + 0x146   
   FileMon.exe!_UcbSWorkerThreadProc@4()  + 0x10   
   kernel32.dll!GetModuleFileNameA()  + 0x1b4   
#7092
Posted: 07/28/2008 10:42:17
by Vladimir Cherniga (EldoS Corp.)

Could you specify exect steps that leads to the exception. Or at least partial memory dump for pBlock parameter ?
#7093
Posted: 07/28/2008 12:26:19
by Dan Cooper (Basic support level)
Joined: 06/27/2007
Posts: 125

The exact steps are to run the FileMon sample and browse to a folder which is being monitored in Explorer (in my case - C:\temp\*.*), then hit F5 lots of times very quickly, I have found this causes the crash very quickly.

#7099
Posted: 07/29/2008 03:50:23
by Vladimir Cherniga (EldoS Corp.)

Please compile FileMon with an attached zipped library file cbflt.lib (for VC6 multithreaded RTL) and test it.


[ Download ]
#7102
Posted: 07/29/2008 05:24:02
by Dan Cooper (Basic support level)
Joined: 06/27/2007
Posts: 125

That does appear to fix the problem
Also by EldoS: CallbackRegistry
A component to monitor and control Windows registry access and create virtual registry keys.

Reply

Statistics

Topic viewed 5100 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!