difference 32- vs 64-bits

Question

difference 32- vs 64-bits

Closed this issue 6 years ago · 32 comments

On a Win7-32 machine a cwmi query of Win32_Processor doesn't find any value for ProcessorID; but on a Win7-64 machine it does. Yet on both machines the Go wmi package gets a value in both cases. I also checked the Python WMI package that uses PyWin32, and that finds the ProcessorID on both too.

mark-summerfield commented 6 years ago

Yes.

Answer 1 · 2019-04-01T14:14:11.000Z

I had no issues running the following on a Windows x86 SP1 machine using python 3.4.

>>> import cwmi
>>> cwmi.query('SELECT * FROM Win32_Processor')

What version of python are you using?

Answer 2 · 2019-04-01T14:24:48.000Z

3.7 (not sure of the minor, probably 3.7.2)

Answer 3 · 2019-04-01T14:54:37.000Z

Same test machine, using python 3.7.3, did not reproduce the issue either. I'm unsure what (if any) special permissions are required for that query though. I was running as a user who is part of the administrators group, but the python process was not run as administrator.

Answer 4 · 2019-04-01T15:06:14.000Z

I just ran it as an ordinary user (but like you, part of the admin group).

Answer 5 · 2019-04-01T15:19:22.000Z

Was ProcessorID the only field that appeared to be missing?

Answer 6 · 2019-04-01T15:42:19.000Z

Yes, the others I retrieved (about 5 of them) all came back same as WMI & Go's wmi. Also another query of the base board works fine.

Answer 7 · 2019-04-02T16:18:35.000Z

Unsure if encoding is the issue here, but I created this branch to address this possibility. Please test this branch https://github.com/fireeye/cWMI/tree/fix/bstr_encoding and let me know if that fixes this issue.

Answer 8 · 2019-04-02T16:56:29.000Z

I tried it on my Win7-32 system but it doesn't work:

   with cwmi.WMI(computer) as wmi:
 File "C:\bin\python\lib\site-packages\cwmi\wmi.py", line 2006, in __enter__
   self.init()
 File "C:\bin\python\lib\site-packages\cwmi\wmi.py", line 2013, in init
   super(WMI, self).init()
 File "C:\bin\python\lib\site-packages\cwmi\com.py", line 184, in init
   winapi.CoInitializeEx(None, self._coinit)
 File "C:\bin\python\lib\site-packages\cwmi\winapi.py", line 716, in CoInitializeEx
   return _CoInitializeEx(reserved, co_init)
 File "C:\bin\python\lib\site-packages\cwmi\winapi.py", line 682, in RAISE_NON_ZERO_ERR
   raise ctypes.WinError(result)
SError: [WinError -2147417850] Cannot change thread mode after it is set.

I'm using a locally installed (not system-wide) WinPython. The application I'm using does not use threads (at least I don't import threading; but it does use subprocesses).

Answer 9 · 2019-04-02T17:05:56.000Z

Are you using cwmi with something that has potentially called CoInitialize()? That looks similar to #1

Answer 10 · 2019-04-03T06:30:19.000Z

I don't know! But possibly since in that program I have two functions, one using WMI and the other using cwmi so I can compare their output. Maybe WMI does that?

Answer 11 · 2019-04-03T12:24:11.000Z

That is likely. Try switching calling into cwmi first then WMI. That may resolve the COM initialization issue.

Answer 12 · 2019-04-03T16:49:01.000Z

Tried that and now cwmi works. However, it still doesn't find the Win32_Processor ProcessorID; yet both WMI.py and the Go wmi libraries find it.

Answer 13 · 2019-04-03T17:11:32.000Z

Thus far I am unable to reproduce the issue. If you're okay with it, would you post the value for the other sources give? The reason I ask is that I have tried encoding null bytes into the string, and those appear to work fine - even without the fix in the branch.

Answer 14 · 2019-04-03T18:00:24.000Z

Oh, did you use the branch that attempted to fix the (possible) BSTR issue? https://github.com/fireeye/cWMI/tree/fix/bstr_encoding

Answer 15 · 2019-04-03T18:14:43.000Z

Yes, I used the bstr_encoding version.
Here are my results on Windows 7-32 bits:

Python 3.7.2 cwmi
Win32_BaseBoard/Manufacturer: Acer
Win32_BaseBoard/Name: BaseBoard
Win32_BaseBoard/Version: V3.05(DDR2)
Win32_BaseBoard/Product: AOD255
Win32_Processor/Manufacturer: GenuineIntel
Win32_Processor/Name: Intel(R)Atom(TM)CPUN450@1.66GHz
Win32_Processor/SocketDesignation: CPU

Py 3.7.2 WMI
Win32_BaseBoard/Manufacturer: Acer
Win32_BaseBoard/Name: BaseBoard
Win32_BaseBoard/Version: V3.05(DDR2)
Win32_BaseBoard/Product: AOD255
Win32_Processor/Manufacturer: GenuineIntel
Win32_Processor/Name: Intel(R)Atom(TM)CPUN450@1.66GHz
Win32_Processor/ProcessorID: BFE9FBFF000106CA
Win32_Processor/SocketDesignation: CPU

Go 1.10.8
Win32_BaseBoard/Manufacturer: Acer
Win32_BaseBoard/Name: BaseBoard
Win32_BaseBoard/Version: V3.05(DDR2)
Win32_BaseBoard/Product: AOD255
Win32_Processor/Manufacturer: GenuineIntel
Win32_Processor/Name: Intel(R)Atom(TM)CPUN450@1.66GHz
Win32_Processor/ProcessorID: BFE9FBFF000106CA
Win32_Processor/SocketDesignation: CPU

Answer 16 · 2019-04-03T21:16:14.000Z

Are you using the helper cwmi.query()? Can you show me how you are using cwmi? If I had an idea how the it was being used I may have a better idea of what the issue might be.

Answer 17 · 2019-04-04T06:46:47.000Z

Here's an extract:

# Win32_Processor query
with cwmi.WMI(r'root\cimv2') as wmi:
    query = 'SELECT Manufacturer,Name,ProcessorID,SocketDesignation FROM Win32_Processor'
    with wmi.ExecQuery('WQL', query, 0, None) as iterator:
        while True:
            try:
                with iterator.Next(cwmi.WBEM_INFINITE) as obj:
                    obj.BeginEnumeration(0)
                    while True:
                        try:
                            name, value, _, _ = obj.Next(0)
                            if not name.startswith('_'):
                                value = _value(value)
                                if value is not None:
                                    print(f'Win32_Processor/{name}: {value}')
                        except WindowsError:
                            break
                    obj.EndEnumeration()
            except WindowsError:
                break

def _value(value):
    value = cwmi.V_TO_TYPE(value)
    if value != 'NULL':
        value = re.sub(r'\s+', '', str(value)).strip()
        if value and value.replace(value[0], ''):
            return value
    # else return None

Now I'm wondering if the problem is with my own _value() function rather than with cwmi?

Answer 18 · 2019-04-04T21:15:32.000Z

Would you please try using the helper cwmi.query()?

Answer 19 · 2019-04-05T10:16:05.000Z

Looks like the problem is with my code?
Here's the code I used with cwmi.query():

import cwmi

query = ('SELECT Manufacturer,Name,ProcessorID,'
            'SocketDesignation FROM Win32_Processor')
result = cwmi.query(r'root\cimv2', query)
for key, value in result.items():
    print(key)
    for k, v in value.items():
        print(f'  {k}={v}')

And here's the output:

NULL
  __PATH=NULL
  __NAMESPACE=NULL
  __SERVER=NULL
  __DERIVATION=4151368
  __PROPERTY_COUNT=4
  __RELPATH=NULL
  __DYNASTY=NULL
  __SUPERCLASS=NULL
  __CLASS=Win32_Processor
  __GENUS=2
  Manufacturer=GenuineIntel
  Name=Intel(R) Atom(TM) CPU N450   @ 1.66GHz
  ProcessorId=BFE9FBFF000106CA
  SocketDesignation=CPU

Answer 20 · 2019-04-05T12:03:39.000Z

Okay. If you are using the branch I had created would you please switch to master and confirm that the output is the same.

Answer 21 · 2019-04-05T15:25:02.000Z

How do I do that? I just downloaded before?

Answer 22 · 2019-04-05T15:27:15.000Z

If you had checked out the https://github.com/fireeye/cWMI/tree/fix/bstr_encoding branch just checkout master. If you hadn't done that or just pip install cwmi then you're using master and you don't need to do anything. I had thought that you were using the fix branch.

Answer 23 · 2019-04-05T15:40:49.000Z

I just clicked the link you gave and used that for the bstr_encoding one. For the original one I used pip.

Answer 24 · 2019-04-05T15:43:36.000Z

In that case you can just force a reinstall using pip pip install --force-reinstall cwmi. Depending on your setup you may need to add the --upgrade option so pip install --force-reinstall --upgrade cwmi.

Answer 25 · 2019-04-05T18:07:38.000Z

I did the pip command: pip install --force-reinstall --upgrade cwmi. Then I ran exactly the same code as above using cwmi.query(). Here's the output:

NULL
  __PATH=NULL
  __NAMESPACE=NULL
  __SERVER=NULL
  __DERIVATION=4020088
  __PROPERTY_COUNT=4
  __RELPATH=NULL
  __DYNASTY=NULL
  __SUPERCLASS=NULL
  __CLASS=Win32_Processor
  __GENUS=2
  Manufacturer=GenuineIntel
  Name=Intel(R) Atom(TM) CPU N450   @ 1.66GHz
  ProcessorId=BFE9FBFF000106CA
  SocketDesignation=CPU

So as far as I can tell it is returning all the information it is supposed do.

Answer 26 · 2019-04-05T18:11:10.000Z

Thank you. The output looks like it is the same to me so I'm going to remove that branch - since it is not needed. Does the output match the other projects at this point? The output from cwmi.query() that is.

Answer 27 · 2019-04-05T18:12:21.000Z

Not sure what you're asking?

Answer 28 · 2019-04-05T18:14:07.000Z

Is the data from cwmi.query() the same as the python WMI project and Go wmi?

Answer 29 · 2019-04-06T20:05:17.000Z

Okay. I've removed that the fix branch as it appears to not of been needed.

Answer 30 · 2019-04-11T13:25:57.000Z

Do you still think this there is an issue?

Answer 31 · 2019-04-11T13:30:04.000Z

Sorry, I've lost track, so not sure.