question

JoshuaHudson-9262 avatar image
0 Votes"
JoshuaHudson-9262 asked JoshuaHudson-9262 published

Hang in CreateFile caused by MsSense.exe

We've got this semi-reproducable hang in CreateFileW with CREATE_ALWAYS that is clearly caused by MsSense.exe getting stuck and holding the file open.

This is not caused by a bug in the code. This is not a spin. This is a straight up hang.

Investigation is still proceeding to determine if a code workaround is even possible; however this should not happen. CreateFileW should not get stuck for minutes at a time while MsSense.exe is holding the handle open.

It's problems like these that make software support teams tell customers to turn off antivirus.

Actual stacktrace:


ntoskrnl.exe!KeSynchronizeExecution+0x5bf6
ntoskrnl.exe!KeWaitForMultipleObjects+0x109d
ntoskrnl.exe!KeWaitForMultipleObjects+0xb3f
ntoskrnl.exe!KeWaitForSingleObject+0x377
ntoskrnl.exe!FsRtlCancellableWaitForMultipleObjects+0xcb
ntoskrnl.exe!FsRtlCancellableWaitForSingleObject+0x27
NTFS.sys+0x11190f
NTFS.sys+0xebf0c
FLTMGR.SYS!FltIsCallbackDataDirty+0x1b6
FLTMGR.SYS!FltQueryInformationFile+0x6e5
ntoskrnl.exe!SeQueryInformationToken+0x773f
ntoskrnl.exe!ObWaitForMultipleObjects+0xf2f
ntoskrnl.exe!ObOpenObjectByNameEx+0x1dd
ntoskrnl.exe!NtCreateFile+0x8f0
ntoskrnl.exe!NtCreateFile+0x79
ntoskrnl.exe!setjmpex+0x6903
ntdll.dll!NtCreateFile+0x14
KERNELBASE.dll!CreateFileW+0x38f
KERNELBASE.dll!CreateFileW+0x66
setupxyz.dll!GcFinal+0xac13
setupxyz.dll!GcFinal+0x114cb
KERNEL32.DLL!BaseThreadInitThunk+0x14
ntdll.dll!RtlUserThreadStart+0x21

windows-10-security
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

0 Answers