Skip to content
GitLab
Open
Issue created by Administrator@rootContributor

CRASH notepad under drcachesim on win11

Created by: PBearson

I am trying to instrument some Windows applications using DynamoRIO. As an example, I have tried to run drcachesim on Notepad like this:

drrun.exe -verbose -t drcachesim -- notepad.exe

However, DynamoRIO seems to just get stuck waiting for Notepad to terminate, even though Notepad never actually appears to launch on my screen. The output from the -verbose flag is below:

INFO: reading tool config file C:\dynamorio\DynamoRIO-Windows-9.0.1/tools/drcachesim.drrun32
INFO: client 0 path: C:\dynamorio\DynamoRIO-Windows-9.0.1\tools\lib32\release\drmemtrace.dll
INFO: client 1 path: C:\dynamorio\DynamoRIO-Windows-9.0.1\tools\lib32\release\drmemtrace.dll
INFO: targeting application: "C:\Windows\system32\notepad.exe"
INFO: app cmdline:  "notepad.exe"
INFO: native tool cmdline:  "C:\dynamorio\DynamoRIO-Windows-9.0.1/tools/bin32/drcachesim.exe" "-dr" "C:\dynamorio\DynamoRIO-Windows-9.0.1" "-dr_ops" "" "-tracer" "C:\dynamorio\DynamoRIO-Windows-9.0.1/tools/lib32/release/drmemtrace.dll" "-tracer_alt" "C:\dynamorio\DynamoRIO-Windows-9.0.1/tools/lib32/release/drmemtrace.dll" "--" "notepad.exe"
INFO: configuration directory is "C:\Users\peabr/dynamorio"
INFO: created child with pid 21240 for C:\dynamorio\DynamoRIO-Windows-9.0.1/tools/bin32/drcachesim.exe
INFO: waiting forever for app to exit...

I did some digging with Process Monitor and found that Notepad actually does get launched, only to almost immediately terminate with exit code -1073741819. You can see this in the screenshot below.

image

Additional System / Software Details

  • DynamoRIO version: Windows 9.0.1
  • OS: Windows 11 Home, Version 10.0.22621 Build 22621