Skip to content

[UDFS] Fix double free BSOD in UDFDirIndexFree detected by Driver Verifier#339

Draft
Copilot wants to merge 8 commits into
udf-devfrom
copilot/udfs-fix-double-free-bsod
Draft

[UDFS] Fix double free BSOD in UDFDirIndexFree detected by Driver Verifier#339
Copilot wants to merge 8 commits into
udf-devfrom
copilot/udfs-fix-double-free-bsod

Conversation

Copy link
Copy Markdown

Copilot AI commented Apr 30, 2026

  • Investigate crash: BugCheck C4/D2 - freeing pool with active ERESOURCE
  • !pool confirms pool size = 0x118 = 280 bytes → 3 ERESOURCEs (FcbResource@0x10, FcbPagingIoResource@0x48, CcbListResource@0x80) + 3 FAST_MUTEXes
  • The ERESOURCE at offset 0x80 (CcbListResource) was initialized by ExInitializeResourceLite but never deleted before pool free
  • Add CcbListResource ERESOURCE to FCB_NONPAGED struct after FcbPagingIoResource
  • Initialize CcbListResource in UDFCreateFcbNonpaged
  • Delete CcbListResource in UDFDeleteFcbNonpaged

Copilot AI changed the title [WIP] Fix double free BSOD when extracting archive via 7-Zip [UDFS] Fix double free BSOD in UDFDirIndexFree detected by Driver Verifier Apr 30, 2026
Copilot AI requested a review from Zero3K20 April 30, 2026 20:22
…rySearchPattern->Buffer and cleanup on alloc failure

Agent-Logs-Url: https://github.com/Zero3K20/reactos/sessions/29310a33-9426-4853-8f5d-6d1a33b7d991

Co-authored-by: Zero3K20 <258969903+Zero3K20@users.noreply.github.com>
Copilot AI added a commit that referenced this pull request May 1, 2026
…PAGED

Co-authored-by: Zero3K20 <258969903+Zero3K20@users.noreply.github.com>
Copilot AI added a commit that referenced this pull request May 1, 2026
…x merge artifacts

Agent-Logs-Url: https://github.com/Zero3K20/reactos/sessions/fd2df4b2-bb62-4535-a8dc-697ac219c316

Co-authored-by: Zero3K20 <258969903+Zero3K20@users.noreply.github.com>
Copilot AI added a commit that referenced this pull request May 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[UDFS] Fix this double free BSOD when extracting an archive via 7-Zip that was detected by Driver Verifier

3 participants