Process Hacker Forums

It seems like PH leaks GDI handles gradually leaks GDI handles, to the point where, after the program has been running for half an hour or an hour or so, it does not display windows properly anymore (they either disappear, or become black, etc.), and the only solution is to quit it and restart.

This didn't use to happen with previous versions that I had months ago, so I'm not sure what changed or how to track it down...

Try using GDI view:
http://www.nirsoft.net/utils/gdi_handles.html

32bit: http://www.nirsoft.net/utils/gdiview.zip
64bit: http://www.nirsoft.net/utils/gdiview-x64.zip

When you see the issue, right-click PH and screenshot the properties:

I see > 4k under All GDI, but the others are all low.

wfunction wrote:

I see > 4k under All GDI, but the others are all low.

Do you have any Tray icons enabled?

"If you have a problem that the 'All GDI' value is increased, while there is no leak with the other GDI values, it means that you probably have a leak in the creation of icons or cursors"

Yup! I/O, Commit, Disk, and Network histories.
But when I disable them the All GDI handles value still seems to increase...

I believe I tracked it down to the call to PhGetFileShellIcon() in monitor.c in the FirewallMonitorPlugin. The icon seems to be leaked there... can you confirm?

wfunction wrote:

I believe I tracked it down to the FirewallMonitorPlugin.

It probably would have helped to mention you were using those plugins

Plugins-Extra plugins are 3rd party and the issues are tracked on Github:
https://github.com/dmex/plugins-extra/issues/6

Was this ever looked into?