stack overflow and Norton

Hi,

I am having a filter driver on top of NTFS on Win2K.I am facing a system
crash due to stack overflow(0000007F,00000008 00000000 00000000 00000000
)…Exception is happening in the IRP_MJ_CREATE path.

I have noticed that the stack overflow happens if Norton AntiVirus is
active… Also I have seen that the crash occurs only if NAV is started
after my filter is loaded.(if my filter is loaded after NAV, the crash is
not occurring).

This prompted me to think that the infamous ‘load order’ is the problem.
But I was able to avoid the crash in this situation also , by removing
some of the big local arrays in my code…

By seeing the above result, I was wondering how the stack size can be
varied that much depending on the load order…Does anyone have any clue…
(with the same driver, crash doesn’t happen in NT 4.0)

Thanks in advance
vishnu.

Quite normal - Norton will read on open, and wait on it, causing a new
IRP - which you also process. So your read routine stack gets noticed, WITH
NAV’s Create stack - which could be a lot.
If your stack usage in read/write is not big (over say 256 bytes:-), then
it’s not the load order, but just a coincidence.
Arrays? Don’t tell me you’re allocating array variables on the stack? 256
bytes is a LOT of stack space for a file system filter! Any array will top
that for sure.
But, while NAV can afford to do that - not too many people use other
filters - you cannot. It doesn’t make it right, but that is the case.

vishnu wrote:

Hi,

I am having a filter driver on top of NTFS on Win2K.I am facing a system
crash due to stack overflow(0000007F,00000008 00000000 00000000 00000000
)…Exception is happening in the IRP_MJ_CREATE path.

I have noticed that the stack overflow happens if Norton AntiVirus is
active… Also I have seen that the crash occurs only if NAV is started
after my filter is loaded.(if my filter is loaded after NAV, the crash is
not occurring).

This prompted me to think that the infamous ‘load order’ is the problem.
But I was able to avoid the crash in this situation also , by removing
some of the big local arrays in my code…

By seeing the above result, I was wondering how the stack size can be
varied that much depending on the load order…Does anyone have any clue…
(with the same driver, crash doesn’t happen in NT 4.0)

Thanks in advance
vishnu.


You are currently subscribed to ntfsd as: xxxxx@alfasp.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Kind regards, Dejan M. www.alfasp.com
E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.

You are experiencing recursive calls to the FSD. App sends fs
request->Norton->UsermodeService->fsRequest->Norton->UsermodeService->fs
request…

\

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of vishnu
Sent: Thursday, March 06, 2003 6:12 AM
To: File Systems Developers
Subject: [ntfsd] stack overflow and Norton

Hi,

I am having a filter driver on top of NTFS on Win2K.I am facing a system
crash due to stack overflow(0000007F,00000008 00000000 00000000 00000000
)…Exception is happening in the IRP_MJ_CREATE path.

I have noticed that the stack overflow happens if Norton AntiVirus is
active… Also I have seen that the crash occurs only if NAV is started
after my filter is loaded.(if my filter is loaded after NAV, the crash
is
not occurring).

This prompted me to think that the infamous ‘load order’ is the problem.
But I was able to avoid the crash in this situation also , by removing
some of the big local arrays in my code…

By seeing the above result, I was wondering how the stack size can be
varied that much depending on the load order…Does anyone have any
clue…
(with the same driver, crash doesn’t happen in NT 4.0)

Thanks in advance
vishnu.


You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com