Hi ,
I have one critical problem.
We can attach a debugger to a process using the call
DebugActiveProcess( ).
Is there any way to detach the debugger from the process??
Probably some kind of a hack, writing a driver module , altering
ETHREAD and EPROCESS structures of the debugger thread
and the debuggee process, etc…
it will be very helpful.
-Murali
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Hello Murali,
No, you can not detach the debugger from process using Win32 API.
Surelly, you can process and thread information of the process, attach
debugger and then restore this information for detach, but it may
crash the system.
MS> Hi ,
MS> I have one critical problem.
MS> We can attach a debugger to a process using the call
MS> DebugActiveProcess( ).
MS> Is there any way to detach the debugger from the process??
MS> Probably some kind of a hack, writing a driver module , altering
MS> ETHREAD and EPROCESS structures of the debugger thread
MS> and the debuggee process, etc…
MS> it will be very helpful.
MS> -Murali
MS> —
MS> You are currently subscribed to ntfsd as: xxxxx@chat.ru
MS> To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
–
Best regards,
Ilia mailto:xxxxx@chat.ru
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Some new APIs to do this has been added to WinXP
BOOL DebugActiveProcessStop(DWORD dwProcessId)
BOOL DebugSetProcessKillOnExit(BOOL KillOnExit)
-----Original Message-----
From: Ilia Rabinovich [mailto:xxxxx@chat.ru]
Sent: Saturday, August 18, 2001 2:07 AM
To: File Systems Developers
Subject: [ntfsd] Re: detach debugger from a process
Hello Murali,
No, you can not detach the debugger from process using Win32 API.
Surelly, you can process and thread information of the process, attach
debugger and then restore this information for detach, but it may
crash the system.
MS> Hi ,
MS> I have one critical problem.
MS> We can attach a debugger to a process using the call
MS> DebugActiveProcess( ).
MS> Is there any way to detach the debugger from the process??
MS> Probably some kind of a hack, writing a driver module ,
altering
MS> ETHREAD and EPROCESS structures of the debugger thread
MS> and the debuggee process, etc…
MS> it will be very helpful.
MS> -Murali
MS> —
MS> You are currently subscribed to ntfsd as: xxxxx@chat.ru
MS> To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
–
Best regards,
Ilia mailto:xxxxx@chat.ru
You are currently subscribed to ntfsd as: xxxxx@microsoft.com
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com