Detours 拦截API导致目标程序崩溃

问题描述

Detours 拦截API导致目标程序崩溃

系统环境为Windows7,X64,注入程序,DLL,目标程序为VS2013生成的Win32项目
代码再回复中贴出

解决方案

数组越界导致程序崩溃

解决方案二：

// dllmain.cpp : Defines the entry point for the DLL application.
#include "stdafx.h"
#include "detours.h"
#include
#include
#include
#include
#include

#pragma comment(lib, "detours.lib")

static BOOL(WINAPI*system_BitBlt)(HDC hdcDest, int nXDest, int nYDest,
int nWidth, int nHeight, HDC hdcSrc, int nXSrc, int nYSrc, DWORD dwRop) = BitBlt;
BOOL hook_BitBlt(HDC hdcDest, int nXDest, int nYDest, int nWidth, int nHeight,
HDC hdcSrc, int nXSrc, int nYSrc, DWORD dwRop)
{
wchar_t szProcessPathname[MAX_PATH];
::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
wchar_t sz[2560] = { 0 };
StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_BitBlt
hdcDest %s
nXDest %d
nYDest %d
nWidth %d
nHeight %d
hdcSrc %s
nXsrc %d
nySrc %d
dwRop %d",
GetCurrentProcessId(), szProcessPathname, hdcDest, nXDest, nYDest, nWidth, nHeight, hdcSrc, nXSrc, nYSrc, dwRop);

//StringCchPrintfW(sz, _countof(sz),
    //L"
Process: (%d) %s
hook_BitBlt",
    //GetCurrentProcessId(), szProcessPathname);
FILE *fp;
fopen_s(&fp, "C:PosLabel.txt", "a");
fwrite(sz, sizeof(char), sizeof(sz), fp);
fclose(fp);

return system_BitBlt(hdcDest, nXDest, nYDest, nWidth, nHeight, hdcSrc, nXSrc, nYSrc, dwRop);

}
static BOOL(WINAPI*system_OpenPrinterA)(LPSTR pPrinterName, LPHANDLE phPrinter, LPPRINTER_DEFAULTSA pDefault) = OpenPrinterA;
BOOL hook_OpenPrinterA(LPSTR pPrinterName, LPHANDLE phPrinter, LPPRINTER_DEFAULTSA pDefault)
{
wchar_t szProcessPathname[MAX_PATH];
::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
wchar_t sz[256] = { 0 };
StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_OpenPrinter",
GetCurrentProcessId(), szProcessPathname);

FILE *fp;
fopen_s(&fp, "C:PosLabel.txt", "a");
fwrite(sz, sizeof(char), sizeof(sz), fp);
fclose(fp);

return system_OpenPrinterA(pPrinterName, phPrinter, pDefault);

}

static BOOL(WINAPI*system_GetTextExtentPoint32A)(HDC hdc, LPCSTR lpstring, int c, LPSIZE lpSize) = GetTextExtentPoint32A;
BOOL hook_GetTextExtentPoint32A(HDC hdc, LPCSTR lpstring, int c, LPSIZE lpSize)
{
wchar_t szProcessPathname[MAX_PATH];
::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
wchar_t sz[256] = { 0 };
/*StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_GetTextExtentPoint32A
hdc:%s
lpstring:%s
c:%d
lpSize:%d",
GetCurrentProcessId(), szProcessPathname, hdc, lpstring, c, lpSize);*/
StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_GetTextExtentPoint32A
lpstring:%s
c:%d
lpSizex:%d
lpSizey:%d",
GetCurrentProcessId(), szProcessPathname, lpstring, c, lpSize->cx, lpSize->cy);

FILE *fp;
fopen_s(&fp, "C:PosLabel.txt", "a");
fwrite(sz, sizeof(char), sizeof(sz), fp);
fclose(fp);

return system_GetTextExtentPoint32A(hdc, lpstring, c, lpSize);

}
static HFONT(WINAPI*system_CreateFontA)(int cHeight, int cWidth, int cEscapement, int cOrientation, int cWeight, DWORD bItalic,
DWORD bUnderline, DWORD bStrikeOut, DWORD iCharSet, DWORD iOutPrecision, DWORD iClipPrecision,
DWORD iQuality, DWORD iPitchAndFamily, LPCSTR pszFaceName) = CreateFontA;
static HFONT(WINAPI*system_CreateFontW)(int cHeight, int cWidth, int cEscapement, int cOrientation, int cWeight, DWORD bItalic,
DWORD bUnderline, DWORD bStrikeOut, DWORD iCharSet, DWORD iOutPrecision, DWORD iClipPrecision,
DWORD iQuality, DWORD iPitchAndFamily, LPCWSTR pszFaceName) = CreateFontW;
HFONT hook_CreateFontA(int cHeight, int cWidth, int cEscapement, int cOrientation, int cWeight, DWORD bItalic,
DWORD bUnderline, DWORD bStrikeOut, DWORD iCharSet, DWORD iOutPrecision, DWORD iClipPrecision,
DWORD iQuality, DWORD iPitchAndFamily, LPCSTR pszFaceName)
{
//MessageBoxA(NULL, "Hook This!", "My hook", MB_OK);
wchar_t szProcessPathname[MAX_PATH];
::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
wchar_t sz[256] = { 0 };
StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_CreateFontA
%s",
GetCurrentProcessId(), szProcessPathname, pszFaceName);

    FILE *fp;
    fopen_s(&fp, "C:PosLabel.txt", "a");
    fwrite(sz, sizeof(char), sizeof(sz), fp);
    fclose(fp);
    return system_CreateFontA(cHeight, cWidth, cEscapement, cOrientation, cWeight, bItalic,
        bUnderline, bStrikeOut, iCharSet, iOutPrecision, iClipPrecision,
        iQuality, iPitchAndFamily, pszFaceName);

}
HFONT hook_CreateFontW(int cHeight, int cWidth, int cEscapement, int cOrientation, int cWeight, DWORD bItalic,
DWORD bUnderline, DWORD bStrikeOut, DWORD iCharSet, DWORD iOutPrecision, DWORD iClipPrecision,
DWORD iQuality, DWORD iPitchAndFamily, LPCWSTR pszFaceName)
{
//MessageBoxA(NULL, "Hook This!", "My hook", MB_OK);
wchar_t szProcessPathname[MAX_PATH];
::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
wchar_t sz[256] = { 0 };
StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_CreateFontW
%s",
GetCurrentProcessId(), szProcessPathname, pszFaceName);

    FILE *fp;
    fopen_s(&fp, "C:PosLabel.txt", "a");
    fwrite(sz, sizeof(char), sizeof(sz), fp);
    fclose(fp);
    return system_CreateFontW(cHeight, cWidth, cEscapement, cOrientation, cWeight, bItalic,
        bUnderline, bStrikeOut, iCharSet, iOutPrecision, iClipPrecision,
        iQuality, iPitchAndFamily, pszFaceName);

}
static int(WINAPI*system_StartPage)(HDC hdc) = StartPage;
int hook_StartPage(HDC hdc)
{
wchar_t szProcessPathname[MAX_PATH];
::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
wchar_t sz[256] = { 0 };
StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_StartPage",
GetCurrentProcessId(), szProcessPathname);

FILE *fp;
fopen_s(&fp, "C:PosLabel.txt", "a");
fwrite(sz, sizeof(char), sizeof(sz), fp);
fclose(fp);
return system_StartPage(hdc);

}
static int(WINAPI*system_EndPage)(HDC hdc) = EndPage;
int hook_EndPage(HDC hdc)
{
wchar_t szProcessPathname[MAX_PATH];
::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
wchar_t sz[256] = { 0 };
StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_CreateFontA
%s",
GetCurrentProcessId(), szProcessPathname, hdc);

FILE *fp;
fopen_s(&fp, "C:PosLabel.txt", "a");
fwrite(sz, sizeof(char), sizeof(sz), fp);
fclose(fp);
return system_EndPage(hdc);

}
static BOOL(WINAPI*system_TextOutA)(HDC hdc, int x, int y, LPCSTR lpString, int c) = TextOutA;
static BOOL(WINAPI*system_TextOutW)(HDC hdc, int x, int y, LPCWSTR lpString, int c) = TextOutW;
BOOL hook_TextOutA(HDC hdc, int x, int y, LPCSTR lpString, int c)
{
wchar_t szProcessPathname[MAX_PATH];
::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
wchar_t sz[256] = { 0 };
StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_TextOutA
HDC:%s
%s",
GetCurrentProcessId(), szProcessPathname, hdc, lpString);

FILE *fp;
fopen_s(&fp, "C:PosLabel.txt", "a");
fwrite(sz, sizeof(char), sizeof(sz), fp);
fclose(fp);
return system_TextOutA(hdc, x, y, lpString, c);

}
BOOL hook_TextOutW(HDC hdc, int x, int y, LPCWSTR lpString, int c)
{
wchar_t szProcessPathname[MAX_PATH];
::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
wchar_t sz[256] = { 0 };
StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_TextOutW
HDC:%s
%s",
GetCurrentProcessId(), szProcessPathname, hdc, lpString);

FILE *fp;
fopen_s(&fp, "C:PosLabel.txt", "a");
fwrite(sz, sizeof(char), sizeof(sz), fp);
fclose(fp);
return system_TextOutW(hdc, x, y, lpString, c);

}
static int(WINAPI* system_GetDeviceCaps)(HDC hdc, int index) = GetDeviceCaps;
int hook_GetDeviceCaps(HDC hdc, int index)
{
int ret = system_GetDeviceCaps(hdc, index);
wchar_t szProcessPathname[MAX_PATH];
::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
//wchar_t sz[256] = { 0 };
char sz[256] = { 0 };
/*StringCchPrintfW(sz, _countof(sz),
L"
Process: (%d) %s

hook_GetDeviceCaps",
GetCurrentProcessId(), szProcessPathname);
StringCchPrintfA(sz, _countof(sz),
"
hook_GetDeviceCaps
hdc:%s
index:%d
ret %d", hdc, index, ret);*/
StringCchPrintfA(sz, _countof(sz),
"
hook_GetDeviceCaps
ret %d", ret);
FILE *fp;
fopen_s(&fp, "C:PosLabel.txt", "a");
fwrite(sz, sizeof(char), sizeof(sz), fp);
fclose(fp);
return ret;
}

//typedef int (WINAPI *PfuncMessageBoxA)(HWND hWnd, LPCSTR lpText, LPCSTR lpCaption, UINT uType);
//typedef int (WINAPI *PfuncMessageBoxW)(HWND hWnd, LPCWSTR lpText, LPCWSTR lpCaption, UINT uType);
//
//PVOID system_MessageBoxA = DetourFindFunction("User32.dll", "MessageBoxA");
//PVOID system_MessageBoxW = DetourFindFunction("User32.dll", "MessageBoxW");
//
//int WINAPI hook_MessageBoxA(HWND hWnd, LPCSTR lpText, LPCSTR lpCaption, UINT uType)
//{
// wchar_t szProcessPathname[MAX_PATH];
// ::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
// wchar_t sz[256] = { 0 };
// StringCchPrintfW(sz, _countof(sz),
// L"
Process: (%d) %s

Hook_MessageBoxWsss

hWnd %s
lpText %s
lpCaption %s
uType %d",
// GetCurrentProcessId(), szProcessPathname, hWnd, lpText, lpCaption, uType);
//
// FILE *fp;
// fopen_s(&fp, "C:
otepad.txt", "a");
// fwrite(sz, sizeof(char), sizeof(sz), fp);
// fclose(fp);
// return ((PfuncMessageBoxA)system_MessageBoxA)(hWnd, "Hook This!", "My hook", uType);
//}
//
//int WINAPI hook_MessageBoxW(HWND hWnd, LPCWSTR lpText, LPCWSTR lpCaption, UINT uType)
//{
// wchar_t szProcessPathname[MAX_PATH];
// ::GetModuleFileName(NULL, szProcessPathname, MAX_PATH);
// wchar_t sz[256] = { 0 };
// StringCchPrintfW(sz, _countof(sz),
// L"
Process: (%d) %s

Hook_MessageBoxWsss

hWnd %s
lpText %s
lpCaption %s
uType %d",
// GetCurrentProcessId(), szProcessPathname, hWnd, lpText, lpCaption, uType);
//
// FILE *fp;
// fopen_s(&fp, "C:
otepad.txt", "a");
// fwrite(sz, sizeof(char), sizeof(sz), fp);
// fclose(fp);
// return ((PfuncMessageBoxW)system_MessageBoxW)(hWnd, L"Hook This!", L"My hook", uType);
//}

BOOL APIENTRY InstallHook()
{
DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
//DetourAttach((PVOID*)&system_OpenPrinterA, hook_OpenPrinterA);//引起崩溃的函数
//DetourAttach((PVOID*)&system_StartPage, hook_StartPage);//引起崩溃的函数
//DetourAttach((PVOID*)&system_EndPage, hook_EndPage);//引起崩溃的函数
//DetourAttach((PVOID*)&system_BitBlt, hook_BitBlt);//引起崩溃的函数
//DetourAttach((PVOID*)&system_GetTextExtentPoint32A, hook_GetTextExtentPoint32A);//引起崩溃的函数
//DetourAttach((PVOID*)&system_GetDeviceCaps, hook_GetDeviceCaps);//引起崩溃的函数

    DetourAttach((PVOID*)&system_TextOutA, hook_TextOutA);               //没有引起崩溃的函数
DetourAttach((PVOID*)&system_TextOutW, hook_TextOutW);               //没有引起崩溃的函数
/*DetourAttach((PVOID*)&system_CreateFontA, hook_CreateFontA);    //没有引起崩溃的函数
DetourAttach((PVOID*)&system_CreateFontW, hook_CreateFontW);*/  //没有引起崩溃的函数

LONG ret = DetourTransactionCommit();
return ret == NO_ERROR;

}

BOOL APIENTRY UnInstallHook()
{
DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());

//DetourDetach((PVOID*)&system_StartPage, hook_StartPage);
//DetourDetach((PVOID*)&system_EndPage, hook_EndPage);
//DetourDetach((PVOID*)&system_BitBlt, hook_BitBlt);
//DetourDetach((PVOID*)&system_GetTextExtentPoint32A, hook_GetTextExtentPoint32A);
//DetourDetach((PVOID*)&system_GetDeviceCaps, hook_GetDeviceCaps);
//DetourDetach((PVOID*)&system_OpenPrinterA, hook_OpenPrinterA);

DetourDetach((PVOID*)&system_TextOutA, hook_TextOutA);
DetourDetach((PVOID*)&system_TextOutW, hook_TextOutW);
/*DetourDetach((PVOID*)&system_CreateFontA, hook_CreateFontA);
DetourDetach((PVOID*)&system_CreateFontW, hook_CreateFontW);*/
LONG ret = DetourTransactionCommit();
return ret == NO_ERROR;

}

BOOL APIENTRY DllMain( HMODULE hModule,
DWORD ul_reason_for_call,
LPVOID lpReserved
)
{
switch (ul_reason_for_call)
{
case DLL_PROCESS_ATTACH:
OutputDebugString(L"DLL_PROCESS_ATTACH
");
if (!InstallHook())
MessageBoxA(NULL, "No InstallHook Failed", "DllMain", MB_OK);
break;

case DLL_THREAD_ATTACH:break;
case DLL_THREAD_DETACH:break;
case DLL_PROCESS_DETACH:
    OutputDebugString(L"DLL_PROCESS_DETACH
");
    if (!UnInstallHook())
        MessageBoxA(NULL, "No UnInstallHook Failed", "DllMain", MB_OK);
    break;
}
return TRUE;

}

//注入程序
// createhook.cpp : 定义控制台应用程序的入口点。
//

#include "stdafx.h"
#include
#include
#include
#include
#include
#include
#include

void ErrorExit(LPTSTR lpszFunction)
{
LPVOID lpMsgBuf;
LPVOID lpDisplayBuf;
DWORD dw = GetLastError();
FormatMessage(
FORMAT_MESSAGE_ALLOCATE_BUFFER |
FORMAT_MESSAGE_FROM_SYSTEM |
FORMAT_MESSAGE_IGNORE_INSERTS,
NULL,
dw,
MAKELANGID(LANG_NEUTRAL, SUBLANG_DEFAULT),
(LPTSTR)&lpMsgBuf,
0, NULL);
lpDisplayBuf = (LPVOID)LocalAlloc(LMEM_ZEROINIT,
(lstrlen((LPCTSTR)lpMsgBuf) + lstrlen((LPCTSTR)lpszFunction) + 40)*sizeof(TCHAR));
StringCchPrintf((LPTSTR)lpDisplayBuf,
LocalSize(lpDisplayBuf),
TEXT("
%s failed with error %d: %s"),
lpszFunction, dw, lpMsgBuf);
MessageBox(NULL, (LPCTSTR)lpDisplayBuf, TEXT("Error"), MB_OK);

FILE *fp;
fopen_s(&fp, "C:errorlog.txt", "a ");
fwrite(lpDisplayBuf, sizeof(char), sizeof(lpDisplayBuf), fp);
fclose(fp);

LocalFree(lpMsgBuf);
LocalFree(lpDisplayBuf);
//ExitProcess(dw);

}

int EnableDebugPrivilege(const char* name)
{
HANDLE hToken;
TOKEN_PRIVILEGES tp;
LUID luid;
//打开进程令牌环
OpenProcessToken(GetCurrentProcess(), TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY,
&hToken);
//ErrorExit("OpenProcessToken ");
//查看系统权限的特权值，返回信息到一个LUID结构体里
LookupPrivilegeValueA(NULL, name, &luid);
//ErrorExit("LookupPrivilegeValueA ");
tp.PrivilegeCount = 1;
tp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
tp.Privileges[0].Luid = luid;
//调整权限
AdjustTokenPrivileges(hToken, 0, &tp, sizeof(TOKEN_PRIVILEGES), NULL, NULL);
ErrorExit("AdjustTokenPrivileges ");

return 0;

}

BOOL InjectDll(const char* dll_absolute_path, const DWORD dwRemoteProcessID)
{
HANDLE hRemoteProcess;
EnableDebugPrivilege(SE_DEBUG_NAME);
//打开远程线程
hRemoteProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, dwRemoteProcessID);
//ErrorExit("OpenProcess ");
//printf_s("hRemoteProcess:%d", hRemoteProcess);
if (hRemoteProcess == NULL)
MessageBox(NULL, "No hRemoteProcess Failed", TEXT("InjectDll"), MB_OK);

char* pszLibFileRemote;
//使用VirtualAllocEx函数在远程进程的内存地址空间分配dll文件名空间
pszLibFileRemote = (char *)VirtualAllocEx(hRemoteProcess, NULL,
    lstrlen(dll_absolute_path) + 1, MEM_COMMIT, PAGE_EXECUTE_READWRITE);
if (pszLibFileRemote == NULL)
    MessageBox(NULL, "No  pszLibFileRemote Failed", TEXT("VirtualAllocEx"), MB_OK);
//ErrorExit("VirtualAllocEx ");
//使用WriteProcessMemory函数将DLL的路径名写入到远程进程的内存空间
if (WriteProcessMemory(hRemoteProcess, pszLibFileRemote, (void*)dll_absolute_path,
    lstrlen(dll_absolute_path) + 1, NULL) != TRUE)
{
    MessageBox(NULL, "No  WriteProcessMemory Failed", TEXT("WriteProcessMemory"), MB_OK);
}

//ErrorExit("WriteProcessMemory ");
//printf_s("WriteProcessMemory:%d", GetLastError());
//计算LoadLibarayA的入口地址
PTHREAD_START_ROUTINE pfnStartAddr = (PTHREAD_START_ROUTINE)GetProcAddress
    (GetModuleHandleA("Kernel32.dll"), "LoadLibraryA");
if (pfnStartAddr == NULL)
{
    MessageBox(NULL, "No  GetProcAddress Failed", TEXT("GetProcAddress"), MB_OK);
}
//ErrorExit("GetProcAddress ");

//启动远程线程LoadLibraryA,通过远程线程创建新线程
HANDLE hRemoteThread;
if ((hRemoteThread = CreateRemoteThread(hRemoteProcess, NULL, 0,
    pfnStartAddr, pszLibFileRemote, 0, NULL)) == NULL)
{
    MessageBox(NULL, "No  CreateRemoteThread Failed", TEXT("CreateRemoteThread"), MB_OK);
    return FALSE;
}
WaitForSingleObject(hRemoteThread, INFINITE);
if (pszLibFileRemote != NULL)
    VirtualFreeEx(hRemoteProcess, pszLibFileRemote,0, MEM_COMMIT);

//ErrorExit("CreateRemoteThread ");
//释放句柄
CloseHandle(hRemoteProcess);
CloseHandle(hRemoteThread);

return TRUE;

}

DWORD GetProcessID(char* targetFile)//获取exe执行时的进程ID
{
DWORD pid = -1;

//创建系统快照
HANDLE hSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
//ErrorExit("CreateToolhelp32Snapshot ");
PROCESSENTRY32 lprs;
//取得系统快照中的第一个进程信息,判断是否为目标exe的运行进程
Process32First(hSnap, &lprs);
//ErrorExit("Process32First ");
if (strstr(targetFile, lprs.szExeFile))
{
    pid = lprs.th32ProcessID;
    return pid;
}

while (1)
{
    ZeroMemory(&lprs, sizeof(lprs));
    lprs.dwSize = (&lprs, sizeof(lprs));
    if (!Process32Next(hSnap, &lprs))
    {
        pid = -1;
        break;
    }
    if (strstr(targetFile, lprs.szExeFile))
    {
        pid = lprs.th32ProcessID;
        break;
    }
}
printf_s("pid:%d", pid);
//MessageBox(NULL, (LPCTSTR)&pid, TEXT("Error"), MB_OK);
return pid;

}

int _tmain(int argc, _TCHAR* argv[])
{
if (InjectDll("E:chf_yjy's_workwork5503detourlibReleasedetourlib.dll",
GetProcessID("printtest.exe")))
MessageBox(NULL, "Yes InjectDll Successed", TEXT("InjectDll"), MB_OK);
else
MessageBox(NULL, "No InjectDll Failed", TEXT("InjectDll"), MB_OK);

return 0;

}

解决方案三：

代码有些乱,也没有比较好的注释,soga,希望路过的大神们能帮忙看看

解决方案四：

生成DLL的代码流程参照微软示例程序,注入程序代码流程也是参照网上,应该不会出错,可是还是引起了崩溃,这是什么样的情况呢.

解决方案五：

soga,希望路过的大神们能帮忙看看

解决方案六：

看来这就是所谓的沉贴了,,,大牛们,,,求帮助,soga没有C币，，，按说应该悬赏的。。。求帮助。。。

时间： 2024-04-17 02:20:35

Detours 拦截API导致目标程序崩溃的相关文章

关于9行代码导致系统崩溃的分析整理_漏洞研究

目前很多地方都转载着利用9行代码史windows崩溃的文章,不过我发现没有关于为什么会使windows崩溃的分析.我先把原文给大家看看.然后把具体的细节说一下.   微软一直声称Windows XP多么多么稳定可靠,但日前一位名为Masaru Tsuchiyama的外国编程爱好者刊出了一小段C语言代码.这一只有9行的小程序如果在Windows XP/2000下运行,则可导致系统完全崩溃,并重新启动.但此程序对其他版本的Windows没有任何影响.这一产生无限循环输出的小程序的代码如下:   #i

win2003下PHP使用preg_match_all导致apache崩溃问题的解决方法_Linux

小编的平台是windows server 2003(32位系统) + Apache/2.2.9 (Win32) + PHP/5.2.17,在使用正则表达式 preg_match_all (如 preg_match_all("/ni(.*?)wo/", $html, $matches);)进行分析匹配比较长的字符串 $html 时(大于10万字节,一般用于分析采集回来的网页源码),Apache服务器会崩溃自动重启.     在Apache错误日志里有这样的提示: 复制代码 代码如下: [

win2003使用preg_match_all导致apache崩溃解决办法

Apache/2.2.9 (Win32) + PHP/5.2.17,在使用正则表达式 preg_match_all (如 preg_match_all("/ni(.*?)wo/", $html, $matches);)进行分析匹配比较长的字符串 $html 时(大于10万字节,一般用于分析采集回来的网页源码),Apache服务器会崩溃自动重启. 在Apache错误日志里有这样的提示: [Thu Apr 11 18:31:31 2013] [notice] Parent: child p

卡巴斯基误杀导致XP崩溃的解决方案

根据瑞星客户服务中心的报告,最近两天除了大量因诺顿误杀导致XP崩溃的用户求助之外,又有数千名卡巴斯基杀毒软件的用户向瑞星求助,称开机后XP系统崩溃,无法进入计算机"桌面".根据分析,该故障是由于卡巴斯基杀毒软件在5月18日的一次误杀系统文件导致的. 瑞星安全工程师分析,除了台湾的繁体中文版之外,该次误杀同样会把简体中文版WindowsXP SP2系统中的shdocvw.dll文件当作Trojan.Win32.Agent.alz病毒清除.shdocvw.dll文件是系统"She

Opcache导致php-fpm崩溃nginx返回502

 这篇文章主要介绍了Opcache导致php-fpm崩溃nginx返回502的解决方法,十分实用,需要的朋友可以参考下     我这个博客为了提高运行效率在vps上装了opcache扩展,结果发现有个页面返回502,其他页面正常. 检查了php-fpm日志,发现是php-fpm子进程不知道为什么会崩溃,然后把opcache关了就正常.中间折腾的过程就不提了,总之最后发现应该是和另外一个扩展 zend guard冲突导致的,搞笑的是,只要我把php.ini中[zend guard] 配置段放在[z

win7配置文件不正确导致系统崩溃无法使用的解决方法

  win7配置文件不正确导致系统崩溃无法使用的解决方法           解决方法如下: 1.当电脑出现系统崩溃的情况时,我们可以在重新启动电脑的时候,找到相关的修复方案. 2.在启动的过程中找到启动修复的功能按钮,然后对我们的电脑系统进行修复,来完成修复系统崩溃. 3.然后对我们的电脑进行系统的修复的相关方案,如下图所示对我们的电脑进行重镜像修复. 4.然后可以进入到启动设置的页面中,对电脑的系统启动进行设置,防止启动过多导致电脑系统崩溃. 5.如果以上操作还是不能够帮助我们修复电脑系统修

如何解决Win7系统计算机管理导致桌面崩溃

 计算机管理导致桌面崩溃-360导致系统崩溃"> 1.首先打开运行对话框,输入regedit回车进入注册表编辑器;(这里涉及修改注册表,不熟悉的建议实现备份注册表) 2.然后依次展开定位到hkey_local_machineSoftwareClassesCLSID{20D04EF-3AEA-1069-A2D8-08002B30309D}ShellManageCommand; 3.然后将1处的键值修改为%Windir%SYstem32MMC.exe /要%Windir%System32Com

MindManager破解版导致系统崩溃怎么办？

  MindManager破解版导致系统崩溃怎么办?MindManager作为全球领先的思维导图软件,在中国也拥有大量的用户,但是MindManager作为商业软件,需要付费使用,很多用户容易坠入一个误区--为了省钱而选择所谓免费的破解版/绿色版MindManager软件. MindManager自上市以来,一直存在其对应的破解版本,但随着MindManager版本的不断升级,破解版本逐渐跟不上脚步,一些冒充最新版本破解版本的软件其实是老版本,更有一些不法分子恰好利用用户需求免费版本心理,在破解

tomcat运行内存过高过高，导致服务崩溃

问题描述 tomcat运行内存过高过高,导致服务崩溃 tomcat运行不到2小时,内存占的过高,导致服务崩溃 2015-6-1 10:34:22 com.microsoft.sqlserver.jdbc.TDSReader throwInvalidTDS 严重: ConnectionID:21 got unexpected value in TDS response at offset:199 2015-6-1 10:36:07 org.apache.tomcat.jdbc.pool.Conne