Comment by sedatk
1 day ago
> NT kernel ABI isn’t even all that stable itself
Can you give an example where a breaking change was introduced in NT kernel ABI?
1 day ago
> NT kernel ABI isn’t even all that stable itself
Can you give an example where a breaking change was introduced in NT kernel ABI?
https://j00ru.vexillium.org/syscalls/nt/64/
(One example: hit "Show" on the table header for Win11, then use the form at the top of the page to highlight syscall 8c)
Changes in syscall numbers aren't necessarily breaking changes as you're supposed to use ntdll.dll to call kernel, not direct syscalls.
That was his point exactly.
1 reply →
The syscall numbers change with every release: https://j00ru.vexillium.org/syscalls/nt/64/
Syscall numbers shouldn't be a problem if you link against ntdll.dll.
So now you're talking about the ntdll.dll ABI instead of the kernel ABI. ntdll.dll is not the kernel.
2 replies →
...isn't that the point of this entire subthread? The kernel itself doesn't provide the stable ABI, userland code that the binary links to does.
3 replies →