BOOLEAN

DbgkForwardException(

    IN PEXCEPTION_RECORD ExceptionRecord,

    IN BOOLEAN DebugException,

    IN BOOLEAN SecondChance

    )



/*++



Routine Description:



    This function is called forward an exception to the calling process's

    debug or subsystem exception port.



Arguments:



    ExceptionRecord - Supplies a pointer to an exception record.



    DebugException - Supplies a boolean variable that specifies whether

        this exception is to be forwarded to the process's

        DebugPort(TRUE), or to its ExceptionPort(FALSE).



Return Value:



    TRUE - The process has a DebugPort or an ExceptionPort, and the reply

        received from the port indicated that the exception was handled.



    FALSE - The process either does not have a DebugPort or

        ExceptionPort, or the process has a port, but the reply received

        from the port indicated that the exception was not handled.



--*/



{

    PEPROCESS Process;

    PVOID Port;

    DBGKM_APIMSG m;

    PDBGKM_EXCEPTION args;

    NTSTATUS st;

    BOOLEAN LpcPort;



    PAGED_CODE();



    args = &m.u.Exception;



    //

    // Initialize the debug LPC message with default information.

    //



    DBGKM_FORMAT_API_MSG(m,DbgKmExceptionApi,sizeof(*args));



    //

    // Get the address of the destination LPC port.

    //



    Process = PsGetCurrentProcess();

    if (DebugException) {

        if (PsGetCurrentThread()->CrossThreadFlags&PS_CROSS_THREAD_FLAGS_HIDEFROMDBG) {

            Port = NULL;

        } else {

            Port = Process->DebugPort;

        }

        LpcPort = FALSE;

    } else {

        Port = Process->ExceptionPort;

        m.h.u2.ZeroInit = LPC_EXCEPTION;

        LpcPort = TRUE;

    }



    //

    // If the destination LPC port address is NULL, then return FALSE.

    //



    if (Port == NULL) {

        return FALSE;

    }



    //

    // Fill in the remainder of the debug LPC message.

    //



    args->ExceptionRecord = *ExceptionRecord;

    args->FirstChance = !SecondChance;



    //

    // Send the debug message to the destination LPC port.

    //



    if (LpcPort) {

        st = DbgkpSendApiMessageLpc(&m,Port,DebugException);

    } else {

        st = DbgkpSendApiMessage(&m,DebugException);

    }





    //

    // If the send was not successful, then return a FALSE indicating that

    // the port did not handle the exception. Otherwise, if the debug port

    // is specified, then look at the return status in the message.

    //



    if (!NT_SUCCESS(st) ||

        ((DebugException) &&

        (m.ReturnedStatus == DBG_EXCEPTION_NOT_HANDLED || !NT_SUCCESS(m.ReturnedStatus)))) {

        return FALSE;



    } else {

        return TRUE;

    }

}

CsrCreateProcess:

	...

	/* Set the Exception port to us */

	Status = NtSetInformationProcess(hProcess, ProcessExceptionPort, &CsrApiPort, sizeof(HANDLE));