h3lpme
@telia.com
| SP2 causes problems!
Hi everybody!
I just recently installed SP2, and all of a sudden, several programs doesn't work.
I have this little application that I have coded that sits in the tray and provide favorite link, now this application just wont work:
When I try to install it, it doesn't create any registry entry in /run, and it doesn't even start a process..
When I execute it, nothing happens..
What could this be??
It works great on my SP1 machine, and on several other machines I have tried.
Please help... |
|
parputt
Premium
join:2001-11-25
New Iberia, LA
 ·AT&T Southeast
| Many older apps. do not work with SP2. If memory serves correct there is a warning given about this prior to install. Sorry, but you should have read the fine print.
--
"The tree of liberty must be refreshed from time to time with the blood of patriots and tyrants." -- Thomas Jefferson |
|
Steve
I'm a PC, so shut up
Consultant
join:2001-03-10
Yorba Linda, CA
| reply to h3lpme
Generally speaking, SP2 only really breaks applications that were coded insecurely in the first place, so it's a fair bet that your app needs a bit of tuning up.
What's it written in? Do you have a debugging channel (via OutputDebugString) that you could use to look for API failures?
Steve
--
Stephen J. Friedl • Unix Wizard • Microsoft Security MVP • Tustin, California USA • my web site |
|
h3lpme
@telia.com
| reply to h3lpme
Thanks for the fest reply guys!
Well, there's mainly 2 application that doesn't work.. NOTHING happens when I execute then, nothing..
They are written in C++ (MS Visual Studio 6).
I'm not that good of a coder, and have no experience of debugging really.. but well, then I know that some application simply doesn't work, huh..
Perhaps you know of some place where I can read about what functions are blocked?
THANKS a lot! |
|
Steve
I'm a PC, so shut up
Consultant
join:2001-03-10
Yorba Linda, CA
| said by h3lpme:
Perhaps you know of some place where I can read about what functions are blocked? It's not so much about API functions are blocked, but some insecure behaviors are. RPC, self-modifying code, as well as some kinds of network activity. This is not an exhaustive list.
I'm a Win32 developer; if you care to send me the source, I'd be glad to take a look and offer some pointers as to what might be causing you grief. I have SP1 and SP2 systems right in front of me. steve@unixwiz.net
Steve
--
Stephen J. Friedl • Unix Wizard • Microsoft Security MVP • Tustin, California USA • my web site |
|
h3lpme
@telia.com
| reply to h3lpme
Thanks a lot for that Steve! =)
However, I just now realized something;
The application does work, if executed or registered manually (there's also one dll)
When I execute them from my NSIS installer, nothing happens, nothing..
So I guess there's nothing wrong with the source.. perhaps it will work with inno setup 
Really weird anyway, I've been banging my head for hours trying to figure this one out
Thanks!! |
|
H3lpme
@telia.com
| reply to h3lpme
I just solved it!
I always compress my binaries with teLock, and this is what caused my misery!
Apparently, applications compressed with this application doesn't work flawlessly on SP2.. good to know, they work 100% on SP1 though..
Thanks for the help! |
|
hpguru
Curb Your Dogma
Premium
join:2002-04-12
| said by H3lpme:
I always compress my binaries with teLock... Things that make you go Hmmmm...
--
Get hpHOSTS! Member ASAP |
|
Steve
I'm a PC, so shut up
Consultant
join:2001-03-10
Yorba Linda, CA
| reply to H3lpme
said by H3lpme:
Apparently, applications compressed with this application doesn't work flawlessly on SP2.. good to know, they work 100% on SP1 though.. This smells like the application is trying to execute a data page, which is impacted by SP2's Data Execution Protection.
I'd imagine that self-unpackers allocate a big chunk of memory with either HeapAlloc() or VirtualAlloc(), unpack the data into it, then jump into the entry point. But with DEP, stack and data pages aren't executable, so I think they'd need to use VirtualProtect() to explicitly mark the pages executable.
I think it's also possible to disable DEP on a per-application basis.
A detailed description of the Data Execution Prevention (DEP) feature in Windows XP Service Pack 2
Steve
--
Stephen J. Friedl • Unix Wizard • Microsoft Security MVP • Tustin, California USA • my web site |
|
