堆栈内存溢出
  繁体   English   中英

ATL COM dll中的缓冲区溢出

[英]Buffer overrun in ATL COM dll

 原文  2012-02-17 16:59:32  9   1    c++/ visual-studio/ dll/ com/ atl

问题描述

我正在尝试使用ATL创建一个与我最初在C＃中拥有的另一个匹配的COM dll。 该dll通常由第三方dll调用，而我没有此DLL的源代码，因此我希望UUID与progID相同。 我也有一个测试应用程序，该应用程序在dll中调用方法，这就是我一直对其进行测试的方式。 测试应用程序定义的接口是： 

STDMETHOD(GetSwitchCriteria)(double* intensity, double* minMass, double* maxMass, 
    BOOL* selectIntensity, long* numOfDepCycles) = 0;
STDMETHOD(GetChargeStateParam)(short* minCharge, short* maxCharge, BOOL* doChargeState) = 0;
STDMETHOD(GetInclusionList)(double* intensity, double* theList, short* numOfItems) = 0;
STDMETHOD(GetExclusionList)(long* exRTWindow, double* theMassList, long* theRTList, 
    short* numOfItems) = 0;
STDMETHOD(GetOtherCriteria)(long* smartFilterTime, double* isoExclusionWin,
    double* massTolerance, BOOL* isPPM) = 0;
STDMETHOD(GetIsotopeMatchParam)(double* theMassList, double* theAbundanceList,
    short* numOfItems, double* abTolerance, double* maTolerance) = 0;

// called at the start of each IDA run
STDMETHOD(OnInitIDA)() = 0;
// called at the end of each survey scan
STDMETHOD(OnScreenSurveySpec)() = 0;
// called at the time of switch
STDMETHOD(OnPrepareNextScan)(double* selectedMasses, double* selectedIntensities, long* selectedCharges, int itemCount) = 0;

在我使用ATL的新dll中，我试图模仿这一点，其定义如下： 

STDMETHOD(GetSwitchCriteria)(DOUBLE* intensity, DOUBLE* minMass, DOUBLE* maxMass, VARIANT_BOOL* selectIntensity, LONG* numOfDepCycles);
STDMETHOD(GetChargeStateParam)(SHORT* minCharge, SHORT* maxCharge, VARIANT_BOOL* doChargeState);
STDMETHOD(GetInclusionList)(DOUBLE* intensity, DOUBLE* theList, SHORT* numOfItems);
STDMETHOD(GetExclusionList)(LONG* exRTWindow, DOUBLE* theMassList, LONG* theRTList, SHORT* numOfItems);
STDMETHOD(GetOtherCriteria)(LONG* smartFilterTime, DOUBLE* isoExclusionWin, DOUBLE* massTolerance, VARIANT_BOOL* isPPM);
STDMETHOD(GetIsotopeMatchParam)(DOUBLE* theMassList, DOUBLE* theAbundanceList, DOUBLE* abTolerance, DOUBLE* maTolerance);
STDMETHOD(OnInitIDA)(void);
STDMETHOD(OnScreenSurveySpec)(void);
STDMETHOD(OnPrepareNextScan)(DOUBLE* selectedMasses, DOUBLE* selectedIntensities, LONG* selectedCharges, LONG itemCount);

最初，我使用BOOL作为某些参数，但是当我在TLB文件中查找C＃dll时，我注意到它使用了VARIANT_BOOL。

当我调用两个没有参数的方法时，我得到的HRESULT为0。OnPrepareNextScan方法也是如此。 但是，当我打电话给其他人时，我得到一个例外，缓冲区溢出，我不确定为什么会这样。 有谁知道为什么会这样或我如何调查呢？

这是否可能是由于两个接口中定义的类型之间的类型不兼容，也可能是我创建用于该方法的变量时使用的类型之间的不兼容？ 用于调用方法之一的代码示例为： 

short minCharge = 0;
short maxCharge = 0;
BOOL doChargeState = FALSE;

result = m_pUserIDA->GetChargeStateParam(&minCharge, &maxCharge, &doChargeState);
    std::cout << "HRESULT of GetChargeStateParam: " << result << std::endl;

尝试了下面提到的LONGLONG解决方案，但似乎没有帮助。

我以为我应该从C＃dll发布原始接口。 

[Guid("76F452FF-7A89-11d4-8A2C-00B0D023C6A0")]
[InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
public unsafe interface IUserIDA
{
    [DispId(1)]
    void GetSwitchCriteria(ref double intensity, ref double minMass, ref double maxMass, ref bool selectIntensity, ref long numOfDepCycles);

    [DispId(2)]
    void GetChargeStateParam(ref short minCharge, ref short maxCharge, ref bool doChargeState);

    [DispId(3)]
    void GetInclusionList(ref double intensity, ref double theList, ref short numOfItems);

    [DispId(4)]
    void GetExclusionList(ref long exRTWindow, ref double theMassList, ref long theRTList, ref short numOfItems);

    [DispId(5)]
    void GetOtherCriteria(ref long smartFilterTime, ref double isoExclusionWin, ref double massTolerance, ref bool isPPM);

    [DispId(6)]
    void GetIsotopeMatchParam(ref double theMassList, ref double theAbundanceList, ref short numOfItems, ref  double abTolerance, ref double maTolerance);

    [DispId(7)]
    void OnInitIDA();

    [DispId(8)]
    void OnScreenSurveySpec();

    [DispId(9)]
    void OnPrepareNextScan(double* selectedMasses, double* SelectedIntensities, long* selectedCharges, int itemCount);
}

最后一种方法OnPrepareNextScan是唯一可行的方法，您可以看到它是使用普通指针而不是.NET ref语句定义的，这可能是问题吗？

我以为我可能还会为每个文件都包含Type Lib文件，也许它们之间的差异将使问题出在哪里，以及两者之间的任何区别：

原始的C＃dll： 

// Generated .IDL file (by the OLE/COM Object Viewer)
// 
// typelib filename: AnalystIDA.dll

[
 uuid(7ED40FB0-D178-47FA-9EF3-B434E0803D5F),
 version(1.0),
 custom(90883F05-3D28-11D2-8F17-00A0C9A6186D, "Analyst_UserIDA, Version=1.0.0.0,     Culture=neutral, PublicKeyToken=de4cf4f15e545467")

]
library Analyst_UserIDA
{
// TLib :     // TLib : mscorlib.dll : {BED7F4EA-1A96-11D2-8F08-00A0C9A6186D}
importlib("mscorlib.tlb");
// TLib : OLE Automation : {00020430-0000-0000-C000-000000000046}
importlib("stdole2.tlb");

// Forward declare all types defined in this typelib
interface IUserIDA;
interface _Utility;

[
  uuid(CDD947DD-7B9E-382E-9F6F-55218F927C3A),
  version(1.0),
  custom(0F21F359-AB84-41E8-9A78-36D110E6D2F9, "Analyst_UserIDA.Utility")
]
coclass Utility {
    [default] interface _Utility;
    interface _Object;
};

[
  odl,
  uuid(76F452FF-7A89-11D4-8A2C-00B0D023C6A0),
  version(1.0),
  oleautomation,
  custom(0F21F359-AB84-41E8-9A78-36D110E6D2F9, "Analyst_UserIDA.IUserIDA")    

]
interface IUserIDA : IUnknown {
    HRESULT _stdcall GetSwitchCriteria(
                    [in, out] double* intensity, 
                    [in, out] double* minMass, 
                    [in, out] double* maxMass, 
                    [in, out] VARIANT_BOOL* selectIntensity, 
                    [in, out] int64* numOfDepCycles);
    HRESULT _stdcall GetChargeStateParam(
                    [in, out] short* minCharge, 
                    [in, out] short* maxCharge, 
                    [in, out] VARIANT_BOOL* doChargeState);
    HRESULT _stdcall GetInclusionList(
                    [in, out] double* intensity, 
                    [in, out] double* theList, 
                    [in, out] short* numOfItems);
    HRESULT _stdcall GetExclusionList(
                    [in, out] int64* exRTWindow, 
                    [in, out] double* theMassList, 
                    [in, out] int64* theRTList, 
                    [in, out] short* numOfItems);
    HRESULT _stdcall GetOtherCriteria(
                    [in, out] int64* smartFilterTime, 
                    [in, out] double* isoExclusionWin, 
                    [in, out] double* massTolerance, 
                    [in, out] VARIANT_BOOL* isPPM);
    HRESULT _stdcall GetIsotopeMatchParam(
                    [in, out] double* theMassList, 
                    [in, out] double* theAbundanceList, 
                    [in, out] short* numOfItems, 
                    [in, out] double* abTolerance, 
                    [in, out] double* maTolerance);
    HRESULT _stdcall OnInitIDA();
    HRESULT _stdcall OnScreenSurveySpec();
    HRESULT _stdcall OnPrepareNextScan(
                    [in, out] double* selectedMasses, 
                    [in, out] double* SelectedIntensities, 
                    [in, out] int64* selectedCharges, 
                    [in] long itemCount);
};

[
  uuid(5B2DBDD4-B763-428A-B48F-2E148138E7A4),
  version(1.0),
  custom(0F21F359-AB84-41E8-9A78-36D110E6D2F9, "Analyst_UserIDA.UserIDAObject")
]
coclass UserIDAObject {
    interface _Object;
    [default] interface IUserIDA;
};

[
  odl,
  uuid(8094073C-362D-37BB-9791-E9D163271C73),
  hidden,
  dual,
  oleautomation,
  custom(0F21F359-AB84-41E8-9A78-36D110E6D2F9, "Analyst_UserIDA.Utility")    

]
interface _Utility : IDispatch {
};
};

我的新dll： 

// Generated .IDL file (by the OLE/COM Object Viewer)
// 
// typelib filename: AnalystIDA.dll

[
 uuid(7ED40FB0-D178-47FA-9EF3-B434E0803D5F),
 version(1.0),
 helpstring("AnalystIDA 1.0 Type Library"),
 custom(DE77BA64-517C-11D1-A2DA-0000F8773CE9, 117441012),
 custom(DE77BA63-517C-11D1-A2DA-0000F8773CE9, 1329510523),
 custom(DE77BA65-517C-11D1-A2DA-0000F8773CE9, "Created by MIDL version 7.00.0500 at  Fri     Feb 17 15:28:38 2012
")

]
library AnalystIDALib
{
// TLib :     // TLib : OLE Automation : {00020430-0000-0000-C000-000000000046}
importlib("stdole2.tlb");

// Forward declare all types defined in this typelib
interface IUserIDA;

[
  uuid(5B2DBDD4-B763-428A-B48F-2E148138E7A4),
  helpstring("UserIDAObject Class")
]
coclass UserIDAObject {
    [default] interface IUserIDA;
};

[
  odl,
  uuid(76F452FF-7A89-11D4-8A2C-00B0D023C6A0),
  helpstring("IUserIDA Interface"),
  dual,
  nonextensible,
  oleautomation
]
interface IUserIDA : IDispatch {
    [id(0x00000001), helpstring("method GetSwitchCriteria")]
    HRESULT GetSwitchCriteria(
                    [in, out] double* intensity, 
                    [in, out] double* minMass, 
                    [in, out] double* maxMass, 
                    [in, out] VARIANT_BOOL* selectIntensity, 
                    [in, out] long* numOfDepCycles);
    [id(0x00000002), helpstring("method GetChargeStateParam")]
    HRESULT GetChargeStateParam(
                    [in, out] short* minCharge, 
                    [in, out] short* maxCharge, 
                    [in, out] VARIANT_BOOL* doChargeState);
    [id(0x00000003), helpstring("method GetInclusionList")]
    HRESULT GetInclusionList(
                    [in, out] double* intensity, 
                    [in, out] double* theList, 
                    [in, out] short* numOfItems);
    [id(0x00000004), helpstring("method GetExclusionList")]
    HRESULT GetExclusionList(
                    [in, out] long* exRTWindow, 
                    [in, out] double* theMassList, 
                    [in, out] long* theRTList, 
                    [in, out] short* numOfItems);
    [id(0x00000005), helpstring("method GetOtherCriteria")]
    HRESULT GetOtherCriteria(
                    [in, out] long* smartFilterTime, 
                    [in, out] double* isoExclusionWin, 
                    [in, out] double* massTolerance, 
                    [in, out] VARIANT_BOOL* isPPM);
    [id(0x00000006), helpstring("method GetIsotopeMatchParam")]
    HRESULT GetIsotopeMatchParam(
                    [in, out] double* theMassList, 
                    [in, out] double* theAbundanceList, 
                    [in, out] double* abTolerance, 
                    [in, out] double* maTolerance);
    [id(0x00000007), helpstring("method OnInitIDA")]
    HRESULT OnInitIDA();
    [id(0x00000008), helpstring("method OnScreenSurveySpec")]
    HRESULT OnScreenSurveySpec();
    [id(0x00000009), helpstring("method OnPrepareNextScan")]
    HRESULT OnPrepareNextScan(
                    [in, out] double* selectedMasses, 
                    [in, out] double* selectedIntensities, 
                    [in, out] long* selectedCharges, 
                    [in] long itemCount);
};
};

另一个编辑：我注意到ProgID Analyst_UserIDA.UserIDAObject没有出现在我的新dll的类型lib中。 这是为了在测试应用程序中创建UserIDAObject的实例：IUserIDAPtr m_pUserIDA; :: CoInitialize（m_pUserIDA）; m_pUserIDA.CreateInstance（_T（“ Analyst_UserIDA.UserIDAObject”））;

更多进步/困惑：我决定通过创建一个将调用此dll的C＃项目来查看DLL是否存在问题。 当我这样做时，我的工作方式出现了问题。 我还注意到，最初看来可行的方法没有效果。 我向其中之一添加了一个sleep语句，当我的测试应用程序调用该语句时，它似乎从未执行过。

1 个解决方案

解决方案1
 0  2012-02-17 19:31:41

请注意，在Win32中， LONG是32位整数，而在C＃中， long是64位整数。 这可能会导致您描述的问题。

解决方案是，每当C＃使用long时，都使用__int64或LONGLONG 。

暂无
暂无

声明:本站的技术帖子网页，遵循CC BY-SA 4.0协议，如果您需要转载，请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

相关问题 与PHP交流ATL COM dll C ++ COM ATL DLL 缓冲区溢出？ ATL 结构在来自 dll 的 COM 对象上中断 删除/编辑ATL COM DLL属性/方法 从MFC调用ATL COM dll 旧的C代码到ATL / COM DLL 在ATL COM dll中调用的方法错误 从浏览器运行ATL COM DLL（调用方法） WinAPI-通过COM ATL DLL调用时，GetLastError始终返回0
相关标签
 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM