Open lindexi opened 1 year ago
lindexi
commented
1 year ago The temporary workaround I've discovered involves hooking the WM_GETOBJECT message, as demonstrated in my demo code here: https://github.com/lindexi/lindexi_gd/tree/5c735d85bc02507f27f2270029050e402b580810/CucherelahiBewilargalkalbea
However, a drawback of my temporary solution is that it may cause UIA tools to not function properly.
lindexi
commented
1 year ago Another stacktrace but not the same issues:
> win32u.dll!_NtUserPostMessage@16 ()
user32.dll!_PostMessageW@16 ()
combase.dll!CComApartment::ClassicSTAPostMessage(unsigned int msg=1027, IMessageParam * pParam=0x25780d20) line 153 C++
combase.dll!CComApartment::STAPostReleaseRifRef(IMessageParam * pParam=0x25780d20) line 1452 C++
combase.dll!PostReleaseRifRef(IRemUnknown * pRemUnk=0x14c2d594, int fReleaseRemUnkProxy=0, OXIDEntry * pOXIDEntry=0x25809dc0, unsigned short cRifRef=1, tagREMINTERFACEREF * pRifRef=0x25780ad4, IUnknown * pAsyncRelease=0x00000000) line 8874 C++
combase.dll!RemoteReleaseRifRefHelper(IRemUnknown * pRemUnk=0x055c025c, int fReleaseRemUnkProxy=348312980, int fProcessingPostedMessage=1, OXIDEntry * pOXIDEntry=0x25809dc0, unsigned short cRifRef=1, tagREMINTERFACEREF * pRifRef=0x25780ad4, IUnknown * pAsyncRelease=0x00000000) line 8748 C++
combase.dll!HandlePostReleaseRifRef(IMessageParam * pMessageParam=0x00000000) line 8946 C++
combase.dll!ThreadWndProc(HWND__ * window=0x000e1874, unsigned int message=1027, unsigned int wparam=47806, long params=628624048) line 697 C++
user32.dll!__InternalCallWinProc@20 ()
user32.dll!UserCallWinProcCheckWow(struct _ACTIVATION_CONTEXT *,void *,struct HWND__ *,enum _WM_VALUE,unsigned int,long,void *,int)
user32.dll!_DispatchMessageWorker@8 ()
user32.dll!_DispatchMessageW@4 ()
[Inline] combase.dll!CCliModalLoop::MyDispatchMessage(tagMSG *) line 2959 C++
combase.dll!CCliModalLoop::PeekRPCAndDDEMessage() line 2568 C++
combase.dll!CCliModalLoop::BlockFn(void * * ahEvent=0x4a7cba34, unsigned long cEvents=1, unsigned long * lpdwSignaled=0x0537be30) line 2055 C++
combase.dll!ClassicSTAThreadWaitForHandles(unsigned long dwFlags=2, unsigned long dwTimeout=1, unsigned long cHandles=1, void * * pHandles=0x4a7cba34, unsigned long * pdwIndex=0x0537be30) line 54 C++
combase.dll!CoWaitForMultipleHandles(unsigned long dwFlags=2, unsigned long dwTimeout=1, unsigned long cHandles=1, void * * pHandles=0x4a7cba34, unsigned long * lpdwindex=0x0537be30) line 126 C++
[Manager to Native]
System.Private.CoreLib.dll!System.Threading.SynchronizationContext.WaitHelper(System.IntPtr[] waitHandles, bool waitAll, int millisecondsTimeout)
WindowsBase.dll!System.Windows.Threading.DispatcherSynchronizationContext.Wait(System.IntPtr[] waitHandles, bool waitAll, int millisecondsTimeout)
System.Private.CoreLib.dll!System.Threading.SynchronizationContext.InvokeWaitMethodHelper(System.Threading.SynchronizationContext syncContext, System.IntPtr[] waitHandles, bool waitAll, int millisecondsTimeout)
[Native to Manager]
[Manager to Native]
UIAutomationProvider.dll!System.Windows.Automation.Provider.AutomationInteropProvider.HostProviderFromHandle(System.IntPtr hwnd)
PresentationCore.dll!MS.Internal.Automation.ElementProxy.HostRawElementProvider.get()
[Native to Manager]
UIAutomationCore.dll!UiaUtils::EntryPointFromImmediateProvider(struct IRawElementProviderSimple *,class ProviderEntryPoint * *,struct IRawElementProviderSimple * *)
UIAutomationCore.dll!UiaUtils::GetFragmentRootWithHostProviderEntryPoint(struct IRawElementProviderFragment *,bool,struct IRawElementProviderFragmentRoot * *,class ProviderEntryPoint * *)
UIAutomationCore.dll!GetProviderEventInfo()
UIAutomationCore.dll!_UiaRaiseAutomationEvent@8 ()
[Manager to Native]
UIAutomationProvider.dll!MS.Internal.Automation.UiaCoreProviderApi.UiaRaiseAutomationEvent(System.Windows.Automation.Provider.IRawElementProviderSimple provider = {MS.Internal.Automation.ElementProxy}, int eventId = 20005)
UIAutomationProvider.dll!System.Windows.Automation.Provider.AutomationInteropProvider.RaiseAutomationEvent(System.Windows.Automation.AutomationEvent eventId = {System.Windows.Automation.AutomationEvent}, System.Windows.Automation.Provider.IRawElementProviderSimple provider = {MS.Internal.Automation.ElementProxy}, System.Windows.Automation.AutomationEventArgs e = {System.Windows.Automation.AutomationEventArgs})
PresentationCore.dll!System.Windows.Automation.Peers.AutomationPeer.RaiseAutomationEvent(System.Windows.Automation.Peers.AutomationEvents eventId = AutomationFocusChanged)
PresentationCore.dll!System.Windows.Automation.Peers.AutomationPeer.RaiseFocusChangedEventHelper(System.Windows.IInputElement newFocus = {Lindex.Demo.UI.InTabEditingWindow})
PresentationCore.dll!System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject focus = {Lindex.Demo.UI.InTabEditingWindow}, int timestamp = 390239156)
PresentationCore.dll!System.Windows.Input.KeyboardDevice.TryChangeFocus(System.Windows.DependencyObject newFocus = {Lindex.Demo.UI.InTabEditingWindow}, System.Windows.Input.IKeyboardInputProvider keyboardInputProvider = {System.Windows.Interop.HwndKeyboardInputProvider}, bool askOld = true, bool askNew = true, bool forceToNullIfFailed = true)
PresentationCore.dll!System.Windows.Input.KeyboardDevice.Focus(System.Windows.DependencyObject focus = {Lindex.Demo.UI.InTabEditingWindow}, bool askOld = true, bool askNew = true, bool forceToNullIfFailed = true)
PresentationCore.dll!System.Windows.Input.KeyboardDevice.Focus(System.Windows.IInputElement element = null)
PresentationCore.dll!System.Windows.Input.Keyboard.Focus(System.Windows.IInputElement element = null)
PresentationCore.dll!System.Windows.Interop.HwndKeyboardInputProvider.OnSetFocus(System.IntPtr hwnd = 0x00120968)
PresentationCore.dll!System.Windows.Interop.HwndKeyboardInputProvider.FilterMessage(System.IntPtr hwnd = 0x00120968, MS.Internal.Interop.WindowMessage message = WM_SETFOCUS, System.IntPtr wParam = 0x000c0b36, System.IntPtr lParam = 0x00000000, ref bool handled = false)
PresentationCore.dll!System.Windows.Interop.HwndSource.InputFilterMessage(System.IntPtr hwnd = 0x00120968, int msg, System.IntPtr wParam = 0x000c0b36, System.IntPtr lParam = 0x00000000, ref bool handled = false)
WindowsBase.dll!MS.Win32.HwndWrapper.WndProc(System.IntPtr hwnd = 0x00120968, int msg, System.IntPtr wParam = 0x000c0b36, System.IntPtr lParam = 0x00000000, ref bool handled = false)
WindowsBase.dll!MS.Win32.HwndSubclass.DispatcherCallbackOperation(object o)
WindowsBase.dll!System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate callback, object args, int numArgs)
WindowsBase.dll!System.Windows.Threading.ExceptionWrapper.TryCatchWhen(object source = {System.Windows.Threading.Dispatcher}, System.Delegate callback, object args, int numArgs, System.Delegate catchHandler = null)
WindowsBase.dll!System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority priority, System.TimeSpan timeout, System.Delegate method, object args, int numArgs)
WindowsBase.dll!MS.Win32.HwndSubclass.SubclassWndProc(System.IntPtr hwnd = 0x00120968, int msg, System.IntPtr wParam = 0x000c0b36, System.IntPtr lParam = 0x00000000)
[Native to Manager]
user32.dll!__InternalCallWinProc@20 ()
user32.dll!UserCallWinProcCheckWow(struct _ACTIVATION_CONTEXT *,void *,struct HWND__ *,enum _WM_VALUE,unsigned int,long,void *,int)
user32.dll!DispatchClientMessage()
user32.dll!___fnDWORD@4 ()
ntdll.dll!_KiUserCallbackDispatcher@12 ()
user32.dll!RealDefWindowProcW(struct HWND__ *,unsigned int,unsigned int,long)
user32.dll!_DefWindowProcW@16 ()
user32.dll!__InternalCallWinProc@20 ()
user32.dll!UserCallWinProcCheckWow(struct _ACTIVATION_CONTEXT *,void *,struct HWND__ *,enum _WM_VALUE,unsigned int,long,void *,int)
user32.dll!CallWindowProcW()
[Manager to Native]
WindowsBase.dll!MS.Win32.HwndSubclass.DefWndProcWrapper(System.IntPtr hwnd, int msg, System.IntPtr wParam, System.IntPtr lParam)
[Native to Manager]
user32.dll!__InternalCallWinProc@20 ()
user32.dll!UserCallWinProcCheckWow(struct _ACTIVATION_CONTEXT *,void *,struct HWND__ *,enum _WM_VALUE,unsigned int,long,void *,int)
user32.dll!CallWindowProcW()
[Manager to Native]
WindowsBase.dll!MS.Win32.HwndSubclass.SubclassWndProc(System.IntPtr hwnd, int msg, System.IntPtr wParam, System.IntPtr lParam)
[Native to Manager]
user32.dll!__InternalCallWinProc@20 ()
user32.dll!UserCallWinProcCheckWow(struct _ACTIVATION_CONTEXT *,void *,struct HWND__ *,enum _WM_VALUE,unsigned int,long,void *,int)
user32.dll!DispatchClientMessage()
user32.dll!___fnDWORD@4 ()
ntdll.dll!_KiUserCallbackDispatcher@12 ()
user32.dll!RealDefWindowProcW(struct HWND__ *,unsigned int,unsigned int,long)
user32.dll!_DefWindowProcW@16 ()
user32.dll!__InternalCallWinProc@20 ()
user32.dll!UserCallWinProcCheckWow(struct _ACTIVATION_CONTEXT *,void *,struct HWND__ *,enum _WM_VALUE,unsigned int,long,void *,int)
user32.dll!CallWindowProcW()
[Manager to Native]
WindowsBase.dll!MS.Win32.HwndSubclass.DefWndProcWrapper(System.IntPtr hwnd, int msg, System.IntPtr wParam, System.IntPtr lParam)
[Native to Manager]
user32.dll!__InternalCallWinProc@20 ()
user32.dll!UserCallWinProcCheckWow(struct _ACTIVATION_CONTEXT *,void *,struct HWND__ *,enum _WM_VALUE,unsigned int,long,void *,int)
user32.dll!CallWindowProcW()
[Manager to Native]
WindowsBase.dll!MS.Win32.HwndSubclass.SubclassWndProc(System.IntPtr hwnd, int msg, System.IntPtr wParam, System.IntPtr lParam)
[Native to Manager]
user32.dll!__InternalCallWinProc@20 ()
user32.dll!UserCallWinProcCheckWow(struct _ACTIVATION_CONTEXT *,void *,struct HWND__ *,enum _WM_VALUE,unsigned int,long,void *,int)
user32.dll!DispatchClientMessage()
user32.dll!___fnDWORD@4 ()
ntdll.dll!_KiUserCallbackDispatcher@12 ()
[Manager to Native]
PresentationFramework.dll!System.Windows.Window.Activate()As the params from combase.dll!CComApartment::ClassicSTAPostMessage(unsigned int msg=1027, IMessageParam * pParam=0x25780d20) line 153, we can know that the application will keep post the 0x403 message, as https://github.com/MicrosoftEdge/WebView2Feedback/issues/3141
But unlike https://github.com/MicrosoftEdge/WebView2Feedback/issues/3141, my demo application does not use WebView2. And I think this issues maybe the UIA issues, not the WPF or the WebView2 issues.
There is a certain possibility of thread freezing. And the step is: drag any file to application and wait the explorer active the application
lindexi
commented
10 months ago The wparam=47806(0xBABE) is the const DWORD WMSG_MAGIC_VALUE = 0x0000babe; and the message=1027(0x403) is the const UINT WM_OLE_ORPC_RELRIFREF = (WM_USER + 3); in ole2int.h
combase.dll!ThreadWndProc(HWND__ * window=0x000e1874, unsigned int message=1027, unsigned int wparam=47806, long params=628624048) line 697 C++More info in ole2int.h:
const DWORD WMSG_MAGIC_VALUE = 0x0000babe;
const UINT WM_OLE_ORPC_POST = (WM_USER + 0);
const UINT WM_OLE_ORPC_SEND = (WM_USER + 1);
const UINT WM_OLE_ORPC_DONE = (WM_USER + 2);
const UINT WM_OLE_ORPC_RELRIFREF = (WM_USER + 3);
const UINT WM_OLE_ORPC_NOTIFY = (WM_USER + 4);
const UINT WM_OLE_GETCLASS = (WM_USER + 5);
const UINT WM_OLE_GIP_REVOKE = (WM_USER + 6);
const UINT WM_OLE_SIGNAL = (WM_USER + 7);As the document says, COM creates a hidden window using the Windows class "OleMainThreadWndClass" in each single-threaded apartment. And the stacktrace doesn't seem to help.
Description
I'm not sure it's appropriate to record this here. My WPF application with .NET Core 3.1 which Embedded UWP Control will hangs when I open the UIA application, such as AxeWindows or PAD.
Reproduction Steps
Expected behavior
Work well. Not hangs or freeze.
Actual behavior
There is a certain possibility of thread freezing. The stacktrace:
Regression?
No response
Known Workarounds
The wpf will call AutomationInteropProvider.HostProviderFromHandle when receive the WM_GETOBJECT message, see https://github.com/dotnet/wpf/blob/1a196a83a2fafbebe9c4003a4d38a796dd8bbf52/src/Microsoft.DotNet.Wpf/src/PresentationCore/System/Windows/InterOp/HwndTarget.cs#L1114-L1116
Impact
No response
Configuration
.NET Version: .NET Core 3.1
AxeWindows Version: 1.1
Architecture : x86
Other information
No response