Process Hacker Discussion Forum

 
440bx
Member
Posts: 63
Joined: 02 Jul 2021 23:33

LdrShutdownProcess prototype

14 Aug 2021 16:27

the prototype of LdrShutdownProcess in ntldr.h and in ReactOS shows this API as returning an NTSTATUS.

Inspection of the assembly code (disassembly of ntdll) shows that LdrShutdownProcess returns nothing (void). The prototype found at ntinternals
http://undocumented.ntinternals.net/ind ... ocess.html
is correct (though, it says that it is called by kernel32 which is no longer the case. It is called by ntdll's RtlExitUserProcess)

ETA:

Exactly the same applies to LdrShutdownThread
 
User avatar
dmex
Admin
Posts: 1693
Joined: 17 Jan 2011 05:43

Re: LdrShutdownProcess prototype

15 Aug 2021 23:18

Thanks, these have been updated with the noreturn type :thumbup:
 
440bx
Member
Posts: 63
Joined: 02 Jul 2021 23:33

Re: LdrShutdownProcess prototype

17 Aug 2021 01:13

Good to hear that. I'm probably not using the latest .h files.