EldoS | Feel safer!

Software components for data protection, secure storage and transfer

Crashed When Monitoring c:\ drive

Also by EldoS: CallbackRegistry
A component to monitor and control Windows registry access and create virtual registry keys.
#13811
Posted: 07/06/2010 01:43:02
by Theo Z (Basic support level)
Joined: 05/03/2010
Posts: 26

Hi,

I have a problem with the CallbackFilter library to monitor c:\ drive. It crashed the OS (blue screen with SYSTEM_SERVICE_EXCEPTION message). I only used the OpenCallback event with minimal code in it (just set ProcessRequest to true).

Attached is the C# 2008 solution I used (I removed the SetRegistrationKey code). I also attached the dump file.

I used C# 2008, Windows 7 64-bit and CallbackFilter v.2.1.27 (June 3, 2010). The driver and dll I used for release version were cbfltfs.sys (124 KB; 6/3/2010 10:07 AM; taken from C:\Program Files (x86)\EldoS\CallbackFilter\Drivers\release\64bit\x64) and CBFltNet.dll (130 KB; 6/3/2010 10:08 AM; taken from C:\Program Files (x86)\EldoS\CallbackFilter\dotNET\NET_20\64bit).

Is there something wrong in the way I used the library?

Please help.

Thanks,
Theo


[ Download ]
#13813
Posted: 07/06/2010 03:06:48
by Vladimir Cherniga (EldoS Corp.)

Hi,
could you attach full kernel dump ? In this one only crashed stack trace is available , but it didn't contains cbfilter calls in the dump. Thank you.
#13820
Posted: 07/06/2010 08:28:25
by Theo Z (Basic support level)
Joined: 05/03/2010
Posts: 26

Hi,

Thank you very much for your response. I always fail sending the file via this forum, maybe because the file size is very big (around 100Mb zipped and 450Mb extracted). Therefore I uploaded the file in megaupload site. You can download it here: http://www.megaupload.com/?d=A93AENEM

Regards,
Theo
#13821
Posted: 07/06/2010 08:30:46
by Theo Z (Basic support level)
Joined: 05/03/2010
Posts: 26

Hi,

Did you manage to reproduce the problem in your Windows 7 64-bit with the solution I attached before?

Regards,
Theo
#13825
Posted: 07/06/2010 11:22:39
by Vladimir Cherniga (EldoS Corp.)

Hi, thank you for the dump, i tried to reproduce the bug with Windows 7 64-bit on VmWare virtual machine, but without success. I will answer you after downloading and analyzing the dump.
#13866
Posted: 07/08/2010 05:08:48
by Theo Z (Basic support level)
Joined: 05/03/2010
Posts: 26

Hi,

Here are some information that might be useful to you:

* I didn't use VMWare to reproduce the problem. Even when I uninstall VMWare, the problem still happens.
* It's not always blue screen with SYSTEM_SERVICE_EXCEPTION error message. Sometimes it's blue screen with PAGE_FAULT_IN_NONPAGED_AREA error message.
* It crashes when monitoring "c:\*", "c:\*.*" or "c:\*.exe". Sometimes it crashes right away, sometimes I need to open a file to make it crashes.
* It doesn't crash when monitoring "c:" or "c:\", but the FileName argument on OnOpenFileC event handler always return "c:".
* It doesn't crash when monitoring certain files like "c:\*.dll", "c:\*.sys" or "c:\*.txt".

Because this problem doesn't happen on all computer, my guess is that the CallbackFilter conflicts with one or more programs installed in my computer. Will it help if I can send you the sysdata.xml file which contains information regarding all the devices/drivers installed in my computer?

Regards,
Theo
#13867
Posted: 07/08/2010 05:38:34
by Vladimir Cherniga (EldoS Corp.)

Thank you for the information, currently i am working with a crash dump reproduced on my local machine with VmWare. I will inform you in a short about results or if i will need some additional information.
PS: All information about system environment is available from your last crash dump. Thanks.
#13868
Posted: 07/08/2010 10:03:46
by Vladimir Cherniga (EldoS Corp.)

The problem is fixed now, new build will be available soon. Thank you for help.
#13869
Posted: 07/08/2010 13:53:23
by Theo Z (Basic support level)
Joined: 05/03/2010
Posts: 26

Hi,

Thank you very much for fixing the problem. I will wait for the new build.

Regards,
Theo
#13871
Posted: 07/08/2010 15:33:57
by Vladimir Cherniga (EldoS Corp.)

New build is available for download.
Also by EldoS: Rethync
The cross-platform framework that simplifies synchronizing data between mobile and desktop applications and servers and cloud storages

Reply

Statistics

Topic viewed 7715 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!