fix #1501: handle the case where NtQueryInformationProcess fails when…

… dealing with 'Registry' win 10 pseudo process
giampaolo · May 14, 2019 · 6d4ad49 · 6d4ad49
1 parent f98d627
commit 6d4ad49
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/HISTORY.rst b/HISTORY.rst
@@ -12,6 +12,9 @@ XXXX-XX-XX
 **Bug fixes**
 
 - 1276_: [AIX] can't get whole cmdline().  (patch by Arnon Yaari)
+- 1501_: [Windows] Process cmdline() and exe() raise unhandled "WinError 1168
+  element not found" exceptions for "Registry" and "Memory Compression" psuedo
+  processes on Windows 10.
 
 5.6.2
 =====

diff --git a/psutil/arch/windows/process_info.c b/psutil/arch/windows/process_info.c
@@ -772,6 +772,14 @@ psutil_cmdline_query_proc(long pid, WCHAR **pdata, SIZE_T *psize) {
         0,
         &bufLen);
 
+    // 0xC0000225 == STATUS_NOT_FOUND, see:
+    // https://github.com/giampaolo/psutil/issues/1501
+    if (status == 0xC0000225) {
+        AccessDenied("NtQueryInformationProcess(ProcessBasicInformation) -> "
+                     "STATUS_NOT_FOUND translated into PermissionError");
+        goto error;
+    }
+
     if (status != STATUS_BUFFER_OVERFLOW && \
             status != STATUS_BUFFER_TOO_SMALL && \
             status != STATUS_INFO_LENGTH_MISMATCH) {