All geek questions in one place

Strange threads in a Win7 WOW64 application

We observe threads 4-6 in Windows 7 x64 in an application with 3 threads and behave normally on any Windows (32 or 64 bit) prior to Windows 7.

Process Explorer shows the following "unknown" thread:

ntdll.dll!EtwDeliverDataBlock+offset

after a random interval, the following streams appear:

 ntdll.dll!TpCallbackIndependent+offset ntdll.dll!TpCallbackIndependent+offset

after the application cannot create the stream (error code 8, a rather hot spot ...).

It seems to me that some kind of system DLL is creating ETW threads or something like that. Does anyone know what these threads are for and how to manage them?

+4
source share
1 answer

TP threads are part of the Windows threadpool APIs and were created because your application (or the DLL used by your application) used the Windows threadpool API. It also seems that your application (or one of the DLLs used by your application) uses ETW APIs that also use a couple of threads. You really have no way to manage these flows.

I seriously doubt that these threads are causing a memory error. Most likely, the problem is that there is not enough continuous memory in your process to reserve a room for a new thread.

+5
source

Source: https://habr.com/ru/post/1304671/

More articles:


All Articles