When looking at XP's CreateProcessW (or rather, CreateProcessInternalW) I
noticed something strange about the way it creates a process.  It seems that
NT is sort of capable of a fork() command.  The function NtCreateProcess
appears to create a "blank" process, into which you can put anything you
want.  After NtCreateProcess, kernel32 maps the EXE into that new process's
memory space, creates a thread, and finally calls NtResumeThread to start
its execution.

If this long, nasty, scattered function could be reverse engineered, it
should be possible to create a true fork() for NT, instead of doing the
normal cygwin "hack" method.

-- Barubary


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

Reply via email to