This issue tracks the situation wherein the Deucalion named pipe handle still exists on the host process even after the DLL has been unloaded from memory. This issue should not occur during normal usage.
Reproduction
Inject Deucalion into the host process.
Connect a subscriber to Deucalion and start receiving data.
Use the signal_exit script to signal Deucalion to exit while data is being received.
The first subscriber will most likely hang waiting for more data. You can kill this subscriber since the server is gone.
Symptoms
Connecting to the named pipe will result in an "i/o timeout" error
Deucalion exits immediately after injection into the process, and logs state Server encountered error running: Access is denied. (os error 5)
No data can be received by applications
Workaround
Use Process Explorer to find the host process, scroll through the list of handles to find \\.\pipe\deucalion-* and forcibly kill the handle. New injection attempts should succeed.
Issue
This issue tracks the situation wherein the Deucalion named pipe handle still exists on the host process even after the DLL has been unloaded from memory. This issue should not occur during normal usage.
Reproduction
signal_exit
script to signal Deucalion to exit while data is being received.Symptoms
Server encountered error running: Access is denied. (os error 5)
Workaround
\\.\pipe\deucalion-*
and forcibly kill the handle. New injection attempts should succeed.