DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 62QAGHLB2188564
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 946D94BA2E11
EX-QQ-RecipientCnt: 1
To: "=?utf-8?B?Y3lnd2lu?=" <cygwin AT cygwin DOT com>
Subject: Bug: MapViewOfFileEx 'cygpid' fails with Win32 error 487 on Windows
 11 x64
Mime-Version: 1.0
Date: Thu, 26 Mar 2026 18:15:48 +0800
Message-ID: <tencent_336070CE7BC04F442FA63154@qq.com>
Feedback-ID: lv:nui.st:qybglogicsvrgz:qybglogicsvrgz3a-0
From: =?utf-8?b?6ZmI6YC454KcIHZpYSBDeWd3aW4=?= <cygwin AT cygwin DOT com>
Reply-To: =?utf-8?B?6ZmI6YC454Kc?= <i AT nui DOT st>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

Hi Cygwin developers,


I'm writing to report a fatal crash that occurs on Windows 11 x64 with
a self-compiled program, but does NOT occur on Windows 10 x64 or
Windows 11 ARM.


## Symptom


A self-compiled program terminates immediately at startup with:


&nbsp; *** fatal error - MapViewOfFileEx 'cygpid.XXXXXX'(0x46C, size 64896,
&nbsp; m 6, created 0), Win32 error 487. Terminating.
&nbsp; Hangup


Win32 error 487 is ERROR_INVALID_ADDRESS, meaning the target virtual
address is already occupied at the time of mapping.


## Root Cause Analysis


After reading the Cygwin source code, I traced the crash to
winsup/cygwin/shared.cc, inside open_shared():


&nbsp; static NO_COPY uintptr_t next_address = SHARED_REGIONS_ADDRESS_LOW;


&nbsp; do {
&nbsp; &nbsp; addr&nbsp; &nbsp;= (void *) next_address;
&nbsp; &nbsp; shared = MapViewOfFileEx(shared_h, access, 0, 0, 0, addr);
&nbsp; &nbsp; next_address += wincap.allocation_granularity();
&nbsp; &nbsp; if (next_address &gt;= SHARED_REGIONS_ADDRESS_HIGH) {
&nbsp; &nbsp; &nbsp; if (!shared &amp;&amp; loop) break;&nbsp; // exhausted entire range -&gt; api_fatal
&nbsp; &nbsp; &nbsp; next_address = SHARED_REGIONS_ADDRESS_LOW;
&nbsp; &nbsp; &nbsp; loop = true;
&nbsp; &nbsp; }
&nbsp; } while (!shared);


The address range is defined in winsup/cygwin/memory_layout.h:


&nbsp; #define SHARED_REGIONS_ADDRESS_LOW&nbsp; &nbsp;0x1a0000000UL
&nbsp; #define SHARED_REGIONS_ADDRESS_HIGH&nbsp; 0x200000000UL


On my Windows 11 x64 system, every MapViewOfFileEx() call in the loop
fails with ERROR_INVALID_ADDRESS (487) for this particular program,
exhausting the entire range and triggering the api_fatal().


I used VirtualQuery() to scan the address space and confirmed that the
0x1a0000000-0x200000000 range is occupied when this program runs.
The exact cause of the occupation is not yet identified, but it is
reproducibly absent on Windows 10 x64 and Windows 11 ARM.


## Workaround (user-side)


I confirmed a fix by patching the two constants in cygwin1.dll to:


&nbsp; SHARED_REGIONS_ADDRESS_LOW&nbsp; = 0x140000000
&nbsp; SHARED_REGIONS_ADDRESS_HIGH = 0x1a0000000


The new range was verified free via VirtualQuery(), and the program
runs normally after the patch.


## Suggested Fix


It may be worth investigating why the 0x1a0000000-0x200000000 range
becomes unavailable on Windows 11 x64 in certain scenarios, and
considering whether the range defined in memory_layout.h should be
adjusted or made more resilient (e.g., falling back to a different
range instead of calling api_fatal).


## Environment


- Affected:&nbsp; &nbsp; &nbsp;Windows 11 x64 (tested on 25H2)
- Not affected: Windows 10 x64, Windows 11 ARM
- Cygwin:&nbsp; &nbsp; &nbsp; 3.6.7


I hope this analysis is useful. Happy to provide additional information
or run further diagnostics if needed.


Best regards

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple