Wikipedia

Microsoft-specific exception handling mechanisms

This is an old revision of this page, as edited by AndrewN (talk | contribs) at 02:58, 30 July 2010 (Reverted edits by Marc.ochsenmeier (talk) to last version by VolkovBot). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Microsoft Windows OS family employs some exception handling mechanisms that are based on the operation system specifics.

Structured Exception Handling

Microsoft Structured Exception Handling is the native exception handling mechanism for Windows and a forerunner technology to VEH.[1] It features the finally mechanism not present in standard С++ exceptions (but present in most imperative languages introduced later).

SEH mechanism is per-thread.

Usage

See also: Exception handling syntax

Microsoft supports SEH as a programming technique at compiler level only. MS Visual C++ compiler features 3 non-standard keywords: __try, __except and __finally — for this purpose. Some other exception handling aspects are backed up by a number of Win32 API functions[2] including RaiseException to raise SEH exceptions manually.

Implementation

Each thread of execution in Windows has a link to an undocumented _EXCEPTION_REGISTRATION_RECORD list at the start of its Thread Information Block. The __try statement essentially calls a compiler-defined EH_prolog function. That function allocates an _EXCEPTION_REGISTRATION_RECORD on the stack pointing to __except_handler3 function in msvcrt.dll[3], then adds the record to the list's head. At the end of the __try block a compiler-defined EH_epilog function is called that does the reverse operation. Either of these compiler-defined routines can be inline. All the programmer-defined __except and __finally blocks are called from within __except_handler3. If such blocks are present, _EXCEPTION_REGISTRATION_RECORD being created is extended by a few msvcrt-specific fields used by __except_handler3[4].

In a case of an exception in a user mode code, the operating system[5] parses the thread's _EXCEPTION_REGISTRATION_RECORD list and calls each exception handler in sequence until a handler signals it has handled the exception (by return value) or the list is exhausted. The last one in the list is always the kernel32!UnhandledExceptionFilter which displayes the General protection fault error message[6]. Then the list is traversed once more giving handlers a chance to clean up any resources used. Finally, the execution returns to kernel mode[7] where the process is either resumed or terminated.

  • Microsoft Corp. (11/12/2009). "Structured Exception Handling". MSDN Library. Retrieved 2009-11-17. {{cite web}}: Check date values in: |date= (help)
  • Matt Pietrek (Jan 1997). "A Crash Course on the Depths of Win32™ Structured Exception Handling". MSJ. 12 (1).
  • Igor Skochinsky (Monday, March 6 2006 12:02.38 CST). "Reversing Microsoft Visual C++ Part I: Exception Handling". OpenRCE. Retrieved 2009-11-17. {{cite web}}: Check date values in: |date= (help)

Vectored Exception Handling

Vectored Exception Handling was introduced with Windows XP. [8] Vectored Exception Handling is made available to Windows programmers using languages such as C++ and Visual Basic. VEH does not replace Structured Exception Handling (SEH), rather VEH and SEH coexist, with VEH handlers having priority over SEH handlers.[8][1] Compared with SEH, VEH works more like a traditional notification callback scheme.[9]

Use of VEH

See also: Exception handling syntax

Use AddVectoredExceptionHandler API

References

  1. ^ a b "Vectored Exception Handling in Windows Server 2003 (Through Internet Archive)". Cite error: The named reference "devx" was defined multiple times with different content (see the help page).
  2. ^ Microsoft Corp. (11/12/2009). "Structured Exception Handling Functions". MSDN Library. Retrieved 2009-11-17. {{cite web}}: Check date values in: |date= (help)
  3. ^ ntdll.dll and kernel32.dll have this function compiled-in instead
  4. ^ Peter Kleissner (February 2009). "Windows Exception Handling". Retrieved 2009-11-21., Compiler based Structured Exception Handling section
  5. ^ More specifically, ntdll!RtlDispatchException system routine called from ntdll!KiUserExceptionDispatcher which is in turn called from the nt!KiDispatchException kernel function. (See Ken Johnson (November 16th, 2007, 7:00 am). "A catalog of NTDLL kernel mode to user mode callbacks, part 2: KiUserExceptionDispatcher". {{cite web}}: Check date values in: |date= (help) for details)
  6. ^ The message can be silenced by altering the process's error mode; the default last handler can be overwritten
  7. ^ ntdll!KiUserExceptionDispatcher calls either nt!ZwContinue or nt!ZwRaiseException
  8. ^ a b "New Vectored Exception Handling in Windows XP".
  9. ^ "Windows Server 2003 Discover Improved System Info, New Kernel, Debugging, Security, and UI APIs".
 

This Microsoft Windows article is a stub. You can help Wikipedia by expanding it.

Retrieved from "https://en.wikipedia.org/w/index.php?title=Microsoft-specific_exception_handling_mechanisms&oldid=376198075"