Results 1 to 2 of 2

Thread: Ollydbg handle leak (solves LINK problem?)

  1. #1
    focht
    Guest

    Ollydbg handle leak (solves LINK problem?)

    Greetings,

    i got same problem as reported earlier by some people (LINK, locked exe) and spent some time investigating it.

    First to detect kernel/user object handle leaks you should use decent utilities:

    www.sysinternals.com -> ProcessViewer (the former HandleEx) or
    www.smidgeonsoft.com -> NTObjects

    Both will show you that ollydbg leaks 2 handles, a file object and a thread object after you "close" the debuggee. (internally 2 more handles, unnamed objects, are leaked from the OS debug subsystem too but this not the case here).

    Well i'd say both handles returned by CreateProcess( ... DEBUG_PROCESS) in the PROCESS_INFORMATION structure must be closed by the debugger, e.g.:

    processInfo.hProcess
    processInfo.hThread

    Every handle delivered in the xxx_DEBUG_EVENT structures must be closed or it will leak too (will go away after debuggee terminates but its cleaner programming style). The only exception is the thread handle stored in CREATE_THREAD_DEBUG_EVENT (if i read guru Matt Pietrek right).

    I hope this information helps ...

    Regards,

    Anastasius Focht.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2

    Ollydbg handle leak (solves LINK problem?)

    focht: thanks.
    how is your scripting plugin goin' btw ?

Similar Threads

  1. A problem about Ollydbg
    By MathewMickle in forum The Newbie Forum
    Replies: 6
    Last Post: November 20th, 2008, 14:39
  2. A breakpoint problem with Ollydbg
    By rukawaruki in forum OllyDbg Support Forums
    Replies: 7
    Last Post: August 15th, 2006, 10:27
  3. LINK problem?!
    By The_Philosopher in forum Bugs
    Replies: 8
    Last Post: February 1st, 2003, 03:59
  4. Just another handle
    By Ceegee in forum Advanced Reversing and Programming
    Replies: 0
    Last Post: February 25th, 2001, 04:44
  5. a thread handle problem
    By tsehp in forum Advanced Reversing and Programming
    Replies: 4
    Last Post: January 10th, 2001, 16:08

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •