search

Open-Shell / Open-Shell-Menu

Classic Shell Reborn.
MIT License
6.88k stars 427 forks source link

Periodic stack overflow inExplorer process caused by OS 4.4.190 as opposed to 4.4.160 #1758

Closed Anixx closed 10 months ago

Anixx commented 10 months ago

Describe the bug

Periodic stack overflow inExplorer process caused by OS 4.4.190 as opposed to 4.4.160

Area of issue

Windows Explorer

To reproduce

  1. Install OS 4.4.190
  2. Work for a half a day on the PC

Expected behavior

No response

Open-Shell version

4.4.190

Windows version

Windows 11 22H2

Additional context

No response

ge0rdi commented 10 months ago

Please, provide crash dump obtained using this guide.

Anixx commented 10 months ago

So, I did what was told in the guide, imported registry key, got the crash, but the dump was not created. I see only old dumps in the folder.

ge0rdi commented 10 months ago

That is pretty weird. If Explorer crashes and the key is set the dump should be created. Maybe try to reboot the machine?

How does the crash manifest? How do you know explorer is crashing?

Anixx commented 10 months ago

I get a messagebox saying there is stack overflow in explorer.exe and then Explorer restarts. I will make a screenshot next time.

Anixx commented 10 months ago

Here is the screenshot: изображение

Anixx commented 10 months ago

It says: "A stack buffer overflow detected in this application. This overflow can allow an intruder to gain control over this application."

Anixx commented 10 months ago

The crash dump is not created even though it is created in other cases of Explorer crash on the same day.

ge0rdi commented 10 months ago

It doesn't look like typical application crash dialog where you have also some details (where the crash occurred, etc). Anyways, if you want some help with this you need to obtain crash dump somehow. Without it there is not much we can do :(

ge0rdi commented 10 months ago

You can try running ProcDump like this: procdump -ma -e explorer.exe It should wait for Explorer crash and then create full dump.

Anixx commented 10 months ago

Version 4.4.169: works reliably, no crash.

ge0rdi commented 10 months ago

Thank you for the information. Though I'm not sure it will help much. Just look at the number of changes between 169 and 190 :(

Weren't you successful with obtaining crash dump via ProcDump?

Anixx commented 10 months ago

It seems, the issue was due to third-party software and as of now promised to be fixed by the developer. No crashes so far.