Hi, there.

i find a bug in win32k.sys.

you know M$ release hotfixes in two grades, one kind is GDR, another is QFE.

with latest SP3QFE-win32k.sysES for windows XP, the message table resouces, however, has some entries added.

it's al-okey in an english version of that, but in other languages, it's kinda corrupted.

let me explain it:

.....

236, "show status"

237, "EnableHexNumpad"

243, "Embedded Standard"

244, "Embedded POSReady 2009"

606, "DdeSendTimeout"

607, "LowLevelHooksTimeout"

.....

look, the new entries 243 and 244 has been added. however, for a non-english win32k.sys, the translation is directly copy-and-pasted without any confirmation.

yeah you may got it. here is what's it like in a non-english win32k.sys

.....

236, "show status"

237, "EnableHexNumpad"

243, "DdeSendTimeout"

244, "LowLevelHooksTimeout"

606, "MESSAGE NEXT TWO"

607, "MESSAGE NEXT TWO"

.....

so then things went messed up.

i post this thread to let you know about the issue,

and i hope someone can help me send a feedback or a bugreport to Microsoft, 'cauze i failed to find how(getting Microsoft Connect then confused about what next... oops)

TIA.

http://support.microsoft.com/common/intern...ow&rdpath=1

Select China, and go through the steps to find the support options. Since it appears to be a bug in a hotfix, you should be able to create a case for free.

Hello,

In the previous versions of "win32k.sys" in Portuguese Brazilian language (PTB) this bug appears in QFE brand.

The bug was fixed in the new version of the file:

MS09-006: Vulnerabilities in Windows Kernel could allow remote code execution

http://support.microsoft.com/kb/958690/

The error doesn't appear anymore in QFE PTB version; the translation was fixed.

Best regards,

Anderton.