When HKEY_PERFORMANCE_TEXT
(“\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Perflib\009”) or
HKEY_PERFORMANCE_NLSTEXT is opened from a driver, the
returned handle is the predefined handle 0x80000050 or
0x80000060 respectively.
When you try to close these handles you will most
likely get a STATUS_INVALID_HANDLE. If you booted
with the /debug parameter and you close the handle in
a non-system context thread, the system will bugcheck.
This is IMO a bug since I ought to be able to
successfully close a handle that I just successfully
opened.
Bugchecks because I’m closing a handle that was
properly returned to me are no fun.
Notice that this only happens when using the keys
mentioned above. For example, Opening
“\REGISTRY\MACHINE” does not give you back the
predefined handle for HKEY_LOCAL_MACHINE.
Do you Yahoo!?
Declare Yourself - Register online to vote today!
http://vote.yahoo.com