X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-1.1 required=5.0 tests=AWL,BAYES_00,KHOP_THREADED,RCVD_IN_DNSWL_NONE,RCVD_IN_HOSTKARMA_YE,RCVD_IN_SORBS_WEB,SARE_HEAD_8BIT_SPAM,SARE_SUB_ENC_UTF8,SPF_HELO_PASS
X-Spam-Check-By:	sourceware.org
From:	"James Johnston" <JamesJ AT motionview3d DOT com>
To:	<cygwin AT cygwin DOT com>
References:	<4FE0596F DOT 4060702 AT roularta DOT be> <201206191631 DOT q5JGVSaD088723 AT barrierB241 DOT nike DOT com> <4FE33F15 DOT 50101 AT roularta DOT be> <4FE343D0 DOT 1020000 AT cs DOT utoronto DOT ca>
In-Reply-To:	<4FE343D0.1020000@cs.utoronto.ca>
Subject:	=?utf-8?Q?RE:_Cygwin_unstable_as_hell_on_W?= =?utf-8?Q?indows7_64bit=E2=80=8F?=
Date:	Thu, 21 Jun 2012 17:49:31 -0000
Message-ID:	<013901cd4fd6$37703ab0$a650b010$@motionview3d.com>
MIME-Version:	1.0
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id q5LHpkjg020518

> -----Original Message-----
> Sent: Thursday, June 21, 2012 15:55
> Subject: Re: Cygwin unstable as hell on Windows7 64bit‏
> 
> On 21/06/2012 11:34 AM, Gerard H. Pille wrote:
> > I checked the BLODA, but with only the following programs left
> > running, Cygwin is still getting killed:
> >
> > $ ps -efW
> <snip>
> 
> A task list isn't terribly useful:
> - It doesn't include system tasks (winlogon.exe and a pile of svchost.exe
> being prominently absent)
> - Some BLODA are services, which tend to run as threads within a process
> rather than given their own
> - BLODA are most often troublesome because they inject dlls dynamically
> into other processes. I dont' know the mechanics, but I suspect it involves
> black magic in the registry and doesn't require the BLODA to be "running" at
> all (that's why an uninstall is usually needed to clean up the mess).

No black magic at all - can I introduce you to the AppInit_DLLs registry value?

http://support.microsoft.com/kb/197571

"The AppInit DLLs are loaded by using the LoadLibrary() function during the DLL_PROCESS_ATTACH process of User32.dll. Therefore, executables that do not link with User32.dll do not load the AppInit DLLs."

It's not recommended to use according to Microsoft, but I've seen software use it anyway and the registry value does work as advertised...

In addition to Ryan's recommendations, I'd suggest examining the list of images loaded in your Cygwin process using a tool like VMMap or ListDLLs.  A loaded 3rd-party DLL that isn't Cygwin or part of the operating system would be a red flag.  However, even if the image list does not have any suspect DLLs, there could still be some that are temporarily loaded when the Cygwin process starts/forks: e.g. imagine a 3rd-party program injects the DLL into your software or it's otherwise loaded, and then the library is unloaded after some initialization is done.

I suppose there is also the possibility of kernel drivers that could interfere - for example, something interfering with file system drivers?

It would be nice if there was a list of ways for checking for BLODA.  While there is a long list of BLODA already there, it's possible there could be a new dodgy app not on the list.  In that case, some things to check for would be helpful.  There is the obvious ways mentioned: check for 3rd-party services, 3rd-party apps loaded via the Run registry key, AppInit_DLLs - but I'm sure I'm missing some.

> - I don't know what all those processes are doing (freepopsd.exe (??),
> rundll32 could do *anything*, etc.) 


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -