From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 13014 invoked by alias); 21 Jun 2012 17:51:33 -0000 Received: (qmail 12982 invoked by uid 22791); 21 Jun 2012 17:51:30 -0000 X-SWARE-Spam-Status: No, hits=-1.1 required=5.0 tests=AWL,BAYES_00,KHOP_THREADED,RCVD_IN_DNSWL_NONE,RCVD_IN_HOSTKARMA_YE,RCVD_IN_SORBS_WEB,SARE_HEAD_8BIT_SPAM,SARE_SUB_ENC_UTF8,SPF_HELO_PASS X-Spam-Check-By: sourceware.org Received: from mout.perfora.net (HELO mout.perfora.net) (74.208.4.195) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Thu, 21 Jun 2012 17:49:56 +0000 Received: from JamesJPC (75-146-80-177-Chattanooga.hfc.comcastbusiness.net [75.146.80.177]) by mrelay.perfora.net (node=mrus3) with ESMTP (Nemesis) id 0M24nL-1RsOz31YYF-00u4Pn; Thu, 21 Jun 2012 13:49:55 -0400 From: "James Johnston" To: References: <4FE0596F.4060702@roularta.be> <201206191631.q5JGVSaD088723@barrierB241.nike.com> <4FE33F15.50101@roularta.be> <4FE343D0.1020000@cs.utoronto.ca> In-Reply-To: <4FE343D0.1020000@cs.utoronto.ca> Subject: =?utf-8?Q?RE:_Cygwin_unstable_as_hell_on_W?= =?utf-8?Q?indows7_64bit=E2=80=8F?= Date: Thu, 21 Jun 2012 17:51:00 -0000 Message-ID: <013901cd4fd6$37703ab0$a650b010$@motionview3d.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-IsSubscribed: yes Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com X-SW-Source: 2012-06/txt/msg00408.txt.bz2 > -----Original Message----- > Sent: Thursday, June 21, 2012 15:55 > Subject: Re: Cygwin unstable as hell on Windows7 64bit=E2=80=8F >=20 > On 21/06/2012 11:34 AM, Gerard H. Pille wrote: > > I checked the BLODA, but with only the following programs left > > running, Cygwin is still getting killed: > > > > $ ps -efW > >=20 > A task list isn't terribly useful: > - It doesn't include system tasks (winlogon.exe and a pile of svchost.exe > being prominently absent) > - Some BLODA are services, which tend to run as threads within a process > rather than given their own > - BLODA are most often troublesome because they inject dlls dynamically > into other processes. I dont' know the mechanics, but I suspect it involv= es > black magic in the registry and doesn't require the BLODA to be "running"= at > all (that's why an uninstall is usually needed to clean up the mess). No black magic at all - can I introduce you to the AppInit_DLLs registry va= lue? http://support.microsoft.com/kb/197571 "The AppInit DLLs are loaded by using the LoadLibrary() function during the= DLL_PROCESS_ATTACH process of User32.dll. Therefore, executables that do n= ot link with User32.dll do not load the AppInit DLLs." It's not recommended to use according to Microsoft, but I've seen software = use it anyway and the registry value does work as advertised... In addition to Ryan's recommendations, I'd suggest examining the list of im= ages loaded in your Cygwin process using a tool like VMMap or ListDLLs. A = loaded 3rd-party DLL that isn't Cygwin or part of the operating system woul= d be a red flag. However, even if the image list does not have any suspect= DLLs, there could still be some that are temporarily loaded when the Cygwi= n process starts/forks: e.g. imagine a 3rd-party program injects the DLL in= to your software or it's otherwise loaded, and then the library is unloaded= after some initialization is done. I suppose there is also the possibility of kernel drivers that could interf= ere - for example, something interfering with file system drivers? It would be nice if there was a list of ways for checking for BLODA. While= there is a long list of BLODA already there, it's possible there could be = a new dodgy app not on the list. In that case, some things to check for wo= uld be helpful. There is the obvious ways mentioned: check for 3rd-party s= ervices, 3rd-party apps loaded via the Run registry key, AppInit_DLLs - but= I'm sure I'm missing some. > - I don't know what all those processes are doing (freepopsd.exe (??), > rundll32 could do *anything*, etc.)=20 -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple