1874886 - Windows Error Reporting does not work for child processes when Win32k lockdown is enabled

Status: NEW

(Toolkit :: Crash Reporting, enhancement)

Description

[Gabriele Svelto [:gsvelto]]

As per title, the WER runtime exception module currently uses win32k calls and fails to work when the crashed process uses win32 lockdown. To fix this we need to remove the affected calls and change how the module notifies the main process:

• The runtime exception module will only identify what kind of process caused the crash, write the exception information to a global shared mapping and pass it on to the main process
• The responsibility for writing the minidump and fetching the crash annotations should move entirely to the main process
• The main process is responsible for killing the crashed process once the crash report has been written, however we can do the same in the runtime exception module just to be extra sure

All the communication between the runtime exception module and the main process will use handles instead of PIDs, to prevent issues related to PID reuse.