Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FindZombieHandles fails with custom ProcessCreateTests version #11

Open
randomascii opened this issue Nov 21, 2020 · 2 comments
Open

FindZombieHandles fails with custom ProcessCreateTests version #11

randomascii opened this issue Nov 21, 2020 · 2 comments

Comments

@randomascii
Copy link
Owner

The latest FindZombieHandles fails after running ProcessCreateTests from this branch/commit:

bdb648c

The error message printed is:
(0xC0000023) - {Buffer Too Small}
The buffer is too small to contain the entry. No information has been written to the buffer.

I have not seen the message trigger under other cases. I suspect the problem is caused by there being a very large number of processes that are holding zombie process handles, rather than it being a problem with a very large number of zombie process handles.

@tyranid
Copy link
Contributor

tyranid commented Nov 21, 2020

Seems I fixed this issue with querying handles in the latest version of the library, just I haven't updated the version in nuget yet. I really should do that :-)

@randomascii
Copy link
Owner Author

That would be great.

randomascii added a commit that referenced this issue Nov 23, 2020
Updated NtApiDotNet to v1.1.29 to fix issue #11.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants