Problem with MemoryDllOpen func on windows 2012 servers

[highfeeling]

Hi all,

since 2011, I published a tool called Overmon (http://www.overmon.fr)

This tools is currently used by more than 700 french companies.

Now, I have some users who complained about regular crashes which occurs on new Windows 2012 servers.

After investigating, I discover the problem is localized into "core" MemoryDllOpen function :

Func MemoryDllOpen($DllBinary)
If Not IsDllStruct($_MDCodeBuffer) Then MemoryDllInit()
Local $Ret = DllCall($_MDKernel32Dll, "hwnd", "LoadLibraryA", "str", "kernel32.dll")
Local $GetProcAddress = DllCall($_MDKernel32Dll, "uint", "GetProcAddress", "hwnd", $Ret[0], "str", "GetProcAddress")
Local $LoadLibraryA = DllCall($_MDKernel32Dll, "uint", "GetProcAddress", "hwnd", $Ret[0], "str", "LoadLibraryA")
Local $DllBuffer = DllStructCreate("byte[" & BinaryLen($DllBinary) & "]")
DllStructSetData($DllBuffer, 1, $DllBinary)
MemoryFuncSet(DllStructGetPtr($_MDCodeBuffer) + $_MDLoadOffset)
FileWriteLine($MainLocalLogFile, @YEAR & "/" & @MON & "/" & @MDAY & " " & @HOUR & "-" & @MIN & "-" & @SEC & " : " & ". DEBUG008")
Local $Module = DllCall($_MDKernel32Dll, "uint", $_MFHookApi, "uint", $LoadLibraryA[0], "uint", $GetProcAddress[0], "ptr", DllStructGetPtr($DllBuffer))
FileWriteLine($MainLocalLogFile, @YEAR & "/" & @MON & "/" & @MDAY & " " & @HOUR & "-" & @MIN & "-" & @SEC & " : " & ". DEBUG009")
$DllBuffer = 0
Return $Module[0]
EndFunc

Here is the line which crash :

Local $Module = DllCall($_MDKernel32Dll, "uint", $_MFHookApi, "uint", $LoadLibraryA[0], "uint", $GetProcAddress[0], "ptr", DllStructGetPtr($DllBuffer))

Can you tell me please if you are aware about such problems on Win2012 servers ?

Seb

P.S. : Obviously, I use last version of AutoIT (v3.3.8.1)

[UEZ]

The problem is UAC DEP. Add the program to the exception list and it should work.

Br,

UEZ

Edited March 26, 2013 by UEZ

[KaFu]

The problem is that you do not use the latest version of that Ward's which addresses the UAC DEP issue mentioned by UEZ.

Edit: Read, think, post ...

Edited March 26, 2013 by KaFu

[UEZ]

The memory UDF needs still some modification to work properly when DEP is enabled.

One workaround is to add the exe to the exception list as already said or disable the DEP policy for the current process:

DllCall("Kernel32.dll", "long", "SetProcessDEPPolicy", "long", False)

Br,

UEZ

Edited March 26, 2013 by UEZ

[JFX]

There is also trancexx's subrogation which works great.