gecko/build/win32/crashinjectdll/crashinjectdll.cpp

#include <stdio.h>
#include <Windows.h>

// make sure we only ever spawn one thread
DWORD tid = -1;

DWORD WINAPI CrashingThread(
  LPVOID lpParameter
)
{
  // not a very friendly DLL
  volatile int* x = (int *)0x0;
  *x = 1;
  return 0;
}

BOOL WINAPI DllMain(
  HANDLE hinstDLL, 
  DWORD dwReason, 
  LPVOID lpvReserved
)
{
  if (tid == -1)
    // we have to crash on another thread because LoadLibrary() will
    // catch memory access errors and return failure to the calling process
    CreateThread( 
                 NULL,                   // default security attributes
                 0,                      // use default stack size  
                 CrashingThread  ,       // thread function name
                 NULL,                   // argument to thread function 
                 0,                      // use default creation flags 
                 &tid);                  // returns the thread identifier 
  return TRUE;
}