when PsSetLoadImageNotifyRoutine’s callback is called, and we get
ImageInfo->Imagebase, is there a guarentee that while this routine is
running, all pages of the process will remain i memory and not be paged out?
thanks
B
No, in fact it could be that most of the pages are not in memory since the
system can establish a mapping then let the references pull them in.
–
Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
“Bedanto” wrote in message news:xxxxx@ntdev…
> when PsSetLoadImageNotifyRoutine’s callback is called, and we get
> ImageInfo->Imagebase, is there a guarentee that while this routine is
> running, all pages of the process will remain i memory and not be paged
> out?
>
> thanks
>
> B
>
>
>
> Information from ESET NOD32 Antivirus, version of virus
> signature database 4341 (20090817)
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
Information from ESET NOD32 Antivirus, version of virus signature database 4341 (20090817)
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
Certainly not – what gives you the idea that this would be so?
In fact, when launching an executable that has not yet been fully inpaged, most of the image may be unavailable in physical memory.
- S
From: Bedanto
Sent: Monday, August 17, 2009 05:38
To: Windows System Software Devs Interest List
Subject: [ntdev] process pages in PsSetLoadImageNotifyRoutine
when PsSetLoadImageNotifyRoutine’s callback is called, and we get ImageInfo->Imagebase, is there a guarentee that while this routine is running, all pages of the process will remain i memory and not be paged out?
thanks
B
— NTDEV is sponsored by OSR For our schedule of WDF, WDM, debugging and other seminars visit: http://www.osr.com/seminars To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
thanks all. i have one more doubt in this context, exactly at what point
does this callback get called? after the image has been loaded, and
rlocations been mapped and just before the first instruction in main(or
equiv) is been executed?
thanks
b
On Mon, Aug 17, 2009 at 9:42 PM, Skywing wrote:
> Certainly not – what gives you the idea that this would be so?
>
> In fact, when launching an executable that has not yet been fully inpaged,
> most of the image may be unavailable in physical memory.
>
> - S
>
> ------------------------------
> From: Bedanto
> Sent: Monday, August 17, 2009 05:38
> To: Windows System Software Devs Interest List
> Subject: [ntdev] process pages in PsSetLoadImageNotifyRoutine
>
> when PsSetLoadImageNotifyRoutine’s callback is called, and we get
> ImageInfo->Imagebase, is there a guarentee that while this routine is
> running, all pages of the process will remain i memory and not be paged out?
>
> thanks
>
> B
> — NTDEV is sponsored by OSR For our schedule of WDF, WDM, debugging and
> other seminars visit: http://www.osr.com/seminars To unsubscribe, visit
> the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
Whether relocations have been applied or not depends on the platform that you’re running on and whether there is heavy address space pressure (for NT6+). You should not rely on this distinction in general.
- S
From: Bedanto
Sent: Monday, August 17, 2009 10:56
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] process pages in PsSetLoadImageNotifyRoutine
thanks all. i have one more doubt in this context, exactly at what point does this callback get called? after the image has been loaded, and rlocations been mapped and just before the first instruction in main(or equiv) is been executed?
thanks
b
On Mon, Aug 17, 2009 at 9:42 PM, Skywing > wrote:
Certainly not – what gives you the idea that this would be so?
In fact, when launching an executable that has not yet been fully inpaged, most of the image may be unavailable in physical memory.
- S
________________________________
From: Bedanto >
Sent: Monday, August 17, 2009 05:38
To: Windows System Software Devs Interest List >
Subject: [ntdev] process pages in PsSetLoadImageNotifyRoutine
when PsSetLoadImageNotifyRoutine’s callback is called, and we get ImageInfo->Imagebase, is there a guarentee that while this routine is running, all pages of the process will remain i memory and not be paged out?
thanks
B
— NTDEV is sponsored by OSR For our schedule of WDF, WDM, debugging and other seminars visit: http://www.osr.com/seminars To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
—
NTDEV is sponsored by OSR
For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
— NTDEV is sponsored by OSR For our schedule of WDF, WDM, debugging and other seminars visit: http://www.osr.com/seminars To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
Yes, the callbacks are invoked right before the image is about to be
executed. I don’t know if you should rely on this implementation detail,
though.
- Cay
On Mon, 17 Aug 2009 19:55:41 +0200, Bedanto wrote:
> thanks all. i have one more doubt in this context, exactly at what point
> does this callback get called? after the image has been loaded, and
> rlocations been mapped and just before the first instruction in main(or
> equiv) is been executed?
>
> thanks
>
> b
>
> On Mon, Aug 17, 2009 at 9:42 PM, Skywing
> wrote:
>
>> Certainly not – what gives you the idea that this would be so?
>>
>> In fact, when launching an executable that has not yet been fully
>> inpaged,
>> most of the image may be unavailable in physical memory.
>>
>> - S
>>
>> ------------------------------
>> From: Bedanto
>> Sent: Monday, August 17, 2009 05:38
>> To: Windows System Software Devs Interest List
>> Subject: [ntdev] process pages in PsSetLoadImageNotifyRoutine
>>
>> when PsSetLoadImageNotifyRoutine’s callback is called, and we get
>> ImageInfo->Imagebase, is there a guarentee that while this routine is
>> running, all pages of the process will remain i memory and not be paged
>> out?
>>
>> thanks
>>
>> B
>> — NTDEV is sponsored by OSR For our schedule of WDF, WDM, debugging
>> and
>> other seminars visit: http://www.osr.com/seminars To unsubscribe, visit
>> the List Server section of OSR Online at
>> http://www.osronline.com/page.cfm?name=ListServer
>>
>> —
>> NTDEV is sponsored by OSR
>>
>> For our schedule of WDF, WDM, debugging and other seminars visit:
>> http://www.osr.com/seminars
>>
>> To unsubscribe, visit the List Server section of OSR Online at
>> http://www.osronline.com/page.cfm?name=ListServer
Actually that is not always true. Even for the executable, there may be
more loads of DLL’s before it ever reaches main().
–
Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
“Cay Bremer” wrote in message news:xxxxx@ntdev…
> Yes, the callbacks are invoked right before the image is about to be
> executed. I don’t know if you should rely on this implementation detail,
> though.
>
>
> - Cay
>
>
> On Mon, 17 Aug 2009 19:55:41 +0200, Bedanto wrote:
>> thanks all. i have one more doubt in this context, exactly at what point
>> does this callback get called? after the image has been loaded, and
>> rlocations been mapped and just before the first instruction in main(or
>> equiv) is been executed?
>>
>> thanks
>>
>> b
>>
>> On Mon, Aug 17, 2009 at 9:42 PM, Skywing
>> wrote:
>>
>>> Certainly not – what gives you the idea that this would be so?
>>>
>>> In fact, when launching an executable that has not yet been fully
>>> inpaged,
>>> most of the image may be unavailable in physical memory.
>>>
>>> - S
>>>
>>> ------------------------------
>>> From: Bedanto
>>> Sent: Monday, August 17, 2009 05:38
>>> To: Windows System Software Devs Interest List
>>> Subject: [ntdev] process pages in PsSetLoadImageNotifyRoutine
>>>
>>> when PsSetLoadImageNotifyRoutine’s callback is called, and we get
>>> ImageInfo->Imagebase, is there a guarentee that while this routine is
>>> running, all pages of the process will remain i memory and not be paged
>>> out?
>>>
>>> thanks
>>>
>>> B
>>> — NTDEV is sponsored by OSR For our schedule of WDF, WDM, debugging
>>> and
>>> other seminars visit: http://www.osr.com/seminars To unsubscribe, visit
>>> the List Server section of OSR Online at
>>> http://www.osronline.com/page.cfm?name=ListServer
>>>
>>> —
>>> NTDEV is sponsored by OSR
>>>
>>> For our schedule of WDF, WDM, debugging and other seminars visit:
>>> http://www.osr.com/seminars
>>>
>>> To unsubscribe, visit the List Server section of OSR Online at
>>> http://www.osronline.com/page.cfm?name=ListServer
>
>
> Information from ESET NOD32 Antivirus, version of virus
> signature database 4343 (20090817)
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
Information from ESET NOD32 Antivirus, version of virus signature database 4343 (20090817)
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com