bugchecks in CSRSS (was Re: [ros-dev] Service Control Manager, Plug and Pray, SMB and RPC)

[Hartmut Birr]

Eric Kohl wrote:

> Hartmut Birr wrote:
>
>> The real bug starts here. NtUserToUnicodeEx trys to allocate to much
>> from nonpaged pool. This means cchBuff is to large. The only caller of
>> NtUserToUnicodeEx is ConioProcessKey. ConioProcessKey calls  ToUnicodeEx
>> (which calls NtUserToUnicodeEx) with cchBuff = 2. Something is wrong in
>> the paramter translation between real and protected mode.
>
>
> I set cchBuff = 2 inside of NtUserToUnicodeEx and this fixes the
> following warnings:
>
I've the feeling that there exist an index mismatch of the called
functions. Possible user32 and win32k use different versions of w32ksvc.db.

- Hartmut