DebugActiveProcess question

[Cptkli]

hello, after i used DebugActiveProcess how can i have the handle of the thread who caused a debugging event? I am lost :cool: Thank you!

[Duncan Edwards Jones]

It is in DEBUG_EVENT_HEADER.dwThreadId, which is passed into WaitForDebugEvent() '--8<------------------------ Ex Datis: Duncan Jones Merrion Computing Ltd

[klington]

dwThreadId is a DWORD value. Is it possible to convert DWORD to HANDLE?

[Duncan Edwards Jones]

You can get a handle to the thread on the CREATE_THREAD_DEBUG_EVENT event - the DEBUG_CREATE_THREAD_DEBUG_INFO structure's .Handle member. Then create a collection keyed by dwThreadId and look up the handle using that? '--8<------------------------ Ex Datis: Duncan Jones Merrion Computing Ltd

[klington]

ok :cool: This works fine: case CREATE_PROCESS_DEBUG_EVENT: myHandle=DebugEv.u.CreateProcessInfo.hThread; strangely not this case CREATE_THREAD_DEBUG_EVENT: myHandle=DebugEv.u.CreateThread.hThread; Am i doing something wrong?