SOCKET_CONTEXT / IOCTL_AFD_SET_CONTEXT helper data format is unknown

[derekbruening]

From timurrrr@google.com on May 30, 2011 04:33:39

On W7 x64 the SizeOfHelperData is 4 and all the bytes after the remote address are initialized (on the issue #421 test).

On XP 32 (and maybe 64-bit too) the SizeOfHelperData is more (104 on 32-bit) and some data in the middle is uninit.

The current comment in drmemory/syscall_windows.c says:
/* XXX: helper data could be a struct w/ padding. I have seen pieces of
* it be uninit on XP. If see many false positives here should just
* disable this until understand its structure.
*/

xref issue #375

Original issue: http://code.google.com/p/drmemory/issues/detail?id=424

[derekbruening]

From timurrrr@google.com on June 01, 2011 04:43:58

btw, it's possible that helper data doesn't contain any data originating from the winsock client (i.e. a user program), so false negatives may not very important.

Labels: -Priority-Medium Priority-Low

[derekbruening]

From bruen...@google.com on June 01, 2011 06:54:12

please provide evidence to back that claim. did you track where the helperdata comes from?

[derekbruening]

From timurrrr@google.com on June 01, 2011 07:02:35

After looking briefly at the ReactOS sources I had an impression that HELPER_DATA structure contains only stuff like refcount and function pointers (callbacks) - something that a mortal winsock user should not work with.

[derekbruening]

From bruen...@google.com on February 17, 2013 10:52:24

Labels: GoodContrib