Date: Thu, 10 Jun 1999 10:59:00 +0300 (IDT)
From: Eli Zaretskii <eliz AT is DOT elta DOT co DOT il>
X-Sender: eliz AT is
To: salvador <salvador AT inti DOT gov DOT ar>
cc: djgpp AT delorie DOT com
Subject: Re: Open file created by child: problems under W95 (most machines)
In-Reply-To: <375E778B.1859BDBD@inti.gov.ar>
Message-ID: <Pine.SUN.3.91.990610105835.17697J-100000@is>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Reply-To: djgpp AT delorie DOT com
X-Mailing-List: djgpp AT delorie DOT com
X-Unsubscribes-To: listserv AT delorie DOT com
Precedence: bulk


On Wed, 9 Jun 1999, salvador wrote:

> 1) The file is opened (mode 91, what's the meanining of the flags?)

These flags are those passed to the OS when the file is open.  For
example, see the definition of the access mode and flags passed in the
BX register to function 6Ch of Int 21h.  As far as I could see, 91h
means O_NOINHERIT|SH_DENYRW|O_WRONLY.  So it seems that somebody holds
that file open for writing, and denies everybody else to either read
or write the file.

> 2) regedit.exe is opened *twice* (mode 0 and mode A0).

Interesting.  When I run regedit, I only see its executable open once,
with the A0h mode (which means O_NOINHERIT|SH_DENYWR), even if I
continuously run the program that reports open files while regedit
shuts down.  Mode 0 is O_RDONLY, FWIW.

If you compare the open files reported when you can and cannot open
the file, do you see a name of some other .exe file that runs during
that time, besides regedit?