aboutsummaryrefslogtreecommitdiffstats
path: root/ms/uplink.c
Commit message (Collapse)AuthorAgeFilesLines
* Windows: Call TerminateProcess, not ExitProcessRichard Levitte2019-02-221-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ty Baen-Price explains: > Problem and Resolution: > The following lines of code make use of the Microsoft API ExitProcess: > > ``` > Apps\Speed.c line 335: ExitProcess(ret); > Ms\uplink.c line 22: ExitProcess(1); > ``` > > These function calls are made after fatal errors are detected and > program termination is desired. ExitProcess(), however causes > _orderly_ shutdown of a process and all its threads, i.e. it unloads > all dlls and runs all destructors. See MSDN for details of exactly > what happens > (https://msdn.microsoft.com/en-us/library/windows/desktop/ms682658(v=vs.85).aspx). > The MSDN page states that ExitProcess should never be called unless > it is _known to be safe_ to call it. These calls should simply be > replaced with calls to TerminateProcess(), which is what should be > called for _disorderly_ shutdown. > > An example of usage: > > ``` > TerminateProcess(GetCurrentProcess(), exitcode); > ``` > > Effect of Problem: > Because of a compilation error (wrong c++ runtime), my program > executed the uplink.c ExitProcess() call. This caused the single > OpenSSL thread to start executing the destructors of all my dlls, > and their objects. Unfortunately, about 30 other threads were > happily using those objects at that time, eventually causing a > 0xC0000005 ACCESS_VIOLATION. Obviously an ACCESS_VIOLATION is the > best case scenario, as I'm sure you can imagine at the consequences > of undiscovered memory corruption, even in a terminating process. And on the subject of `TerminateProcess()` being asynchronous: > That is technically true, but I think it's probably synchronous > "enough" for your purposes, since a call to TerminateProcess > suspends execution of all threads in the target process. This means > it's really only asynchronous if you're calling TerminateProcess one > some _other_ process. If you're calling TerminateProcess on your own > process, you'll never return from the TerminateProcess call. Fixes #2489 Was originally RT-4526 Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/8301)
* Following the license change, modify the boilerplates in ms/Richard Levitte2018-12-061-1/+1
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/7769)
* Revert "RT4526: Call TerminateProcess, not ExitProcess"Matt Caswell2016-06-161-1/+1
| | | | | | | | | | This reverts commit 9c1a9ccf65d0ea1912675d3a622fa8e51b524b9e. TerminateProcess is asynchronous, so the code as written in the above commit is not correct. It is also probably not needed in the speed case. Reverting in order to figure out the correct solution. Reviewed-by: Rich Salz <rsalz@openssl.org>
* RT4526: Call TerminateProcess, not ExitProcessRich Salz2016-06-151-1/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add final(?) set of copyrights.Rich Salz2016-06-011-0/+9
| | | | | | | | | Add copyright to missing assembler files. Add copyrights to missing test/* files. Add copyrights Various source and misc files. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Windows build system: fix 32-bit appveyor build.Andy Polyakov2016-03-291-0/+28
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Windows build system: get uplink right.Andy Polyakov2016-03-211-28/+0
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-221-81/+90
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* ms/uplink.c: fix Visual Studio 2010 warning.Andy Polyakov2011-07-131-1/+2
|
* Race condition in ms/uplink.c.Andy Polyakov2006-09-181-0/+2
| | | | PR: 1382
* OPENSSL_Applink update.Andy Polyakov2005-05-171-115/+61
|
* Framework for glueing BIO layer and Win32 compiler run-time. Goal is toAndy Polyakov2004-05-251-0/+168
make it possible to produce for a unified binary build, which can be used with a variety of Win32 compilers.