[求助]CreateProcess挂住了，请各位大牛帮看看

[ScanerKi]

ntoskrnl.exe+0x584d
ntoskrnl.exe+0x96ff6
ntoskrnl.exe+0x699f
ntdll.dll!KiFastSystemCallRet
ntdll.dll!RtlEnterCriticalSection+0x46
ntdll.dll!LdrGetDllHandleEx+0x235
ntdll.dll!LdrGetDllHandle+0x18
!LoadLibraryExW+0x22e
!GetFileVersionInfoSizeW+0x31
!SdbTagIDToTagRef+0x609
!SdbGetStringTagPtr+0x4c5
!SdbGetStringTagPtr+0x3e3
!SdbGetStringTagPtr+0x38a
!SdbGetStringTagPtr+0x2d5
!SdbGetStringTagPtr+0x1e4
!SdbGetNextChild+0x120
!ApphelpCheckRunApp+0x217
!ApphelpCheckRunApp+0x29
!GetNlsSectionName+0x1504
!GetNlsSectionName+0x1093
!CreateProcessInternalA+0xf1
!CreateProcessA+0x2c
!utils::ShellMgrImpl::doShell+0x191
!utils::system+0xb1
!Ts::ServiceLoggerImpl::write_log+0x8c7
!Ts::ServiceLoggerImpl::svc+0x1c0
!ACE_Task_Base::svc_run+0x2e
!ACE_Thread_Adapter::invoke+0x73
!endthreadex+0xc7

[ScanerKi]

有没有人知道啊

[赵4老师]

请判断每个函数调用的返回值。

[ScanerKi]

其实是在doShell里面的如下语句挂住了

if(!CreateProcess(applicationName.c_str(), NULL, NULL, NULL, TRUE, CREATE_NEW_CONSOLE, pEnv, NULL,&startupinfo,&pinfo))
{
return false;
}

CreateProcess不返回了，查看线程的调用堆栈时：
ntoskrnl.exe+0x584d
ntoskrnl.exe+0x96ff6
ntoskrnl.exe+0x699f
ntdll.dll!KiFastSystemCallRet
ntdll.dll!RtlEnterCriticalSection+0x46
ntdll.dll!LdrGetDllHandleEx+0x235
ntdll.dll!LdrGetDllHandle+0x18
!LoadLibraryExW+0x22e
!GetFileVersionInfoSizeW+0x31
!SdbTagIDToTagRef+0x609
!SdbGetStringTagPtr+0x4c5
!SdbGetStringTagPtr+0x3e3
!SdbGetStringTagPtr+0x38a
!SdbGetStringTagPtr+0x2d5
!SdbGetStringTagPtr+0x1e4
!SdbGetNextChild+0x120
!ApphelpCheckRunApp+0x217
!ApphelpCheckRunApp+0x29
!GetNlsSectionName+0x1504
!GetNlsSectionName+0x1093
!CreateProcessInternalA+0xf1
!CreateProcessA+0x2c

[ScanerKi]

GetNlsSectionName那些调用不是我来调的，是windows自己调的其实可能挂在 RtlEnterCriticalSection这个里面了，看函数是在进入临界区时候挂住了

[赵4老师]

进入临界区挂住的原因十有八九是该临界区之前在另一个地方已经进入。
用handle.exe查看该临界区被谁占用。
http://technet.microsoft.com/zh-CN/sysinternals