Re: GetThreadContext returns invalid values

Article View: borland.public.delphi.nativeapi

Article #12113

Back to borland.public.delphi.nativeapi Previous Next

#12113

From: madshi
Date: Sat, 23 Nov 2002 20:55

13 lines
1366 bytes

> You cannot get a valid context for a running thread.

Well, it depends on what you call "valid". GetThreadContext will succeed 
and the Context structure will be filled correctly, but it will not 
contain what you would expect. Instead it will show a snapshot of where 
"NtGetThreadContext" jumps into kernel mode (in XP).

-- 
www.madshi.net
quality low level Delphi components
extended exception handling
API hooking, DLL injection
undocumented functionality

Technical Details

Message-ID: <MPG.184a09c131efd1c69896e0@newsgroups.borland.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-05!sn-xit-06!sn-xit-08!supernews.com!newsfeed.online.be!fu-berlin.de!news.uni-x.net!newsgroups.borland.com!not-for-mail

References: <3ddfb320@newsgroups.borland.com> <3ddfd619@newsgroups.borland.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f94dd,334d5eef68190214
X-Google-Attributes: gidf94dd,public
X-Google-ArrivalTime: 2002-11-23 13:15:31 PST
From: madshi (Mathias Rauen) <borland@madshi.net>
Newsgroups: borland.public.delphi.nativeapi
Subject: Re: GetThreadContext returns invalid values
Date: Sat, 23 Nov 2002 21:55:46 +0100
Message-ID: <MPG.184a09c131efd1c69896e0@newsgroups.borland.com>
References: <3ddfb320@newsgroups.borland.com> <3ddfd619@newsgroups.borland.com>
Organization: www.madshi.net
X-Newsreader: MicroPlanet Gravity v2.50
NNTP-Posting-Host: 217.226.219.75
X-Trace: newsgroups.borland.com 1038084867 217.226.219.75 (23 Nov 2002 12:54:27 -0800)
Lines: 13
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-05!sn-xit-06!sn-xit-08!supernews.com!newsfeed.online.be!fu-berlin.de!news.uni-x.net!newsgroups.borland.com!not-for-mail

Reply to Parent Message