| Previous | Next |
| STATUS_KERNEL_APC | STATUS_TIMEOUT |
STATUS_ALERTED
An explicit thread alert ended the wait
An alert is distinct from user APC execution and from timeout expiration. Kernel wait APIs that permit alerting can return this status when another component marks the thread alerted. The object being waited on may remain nonsignaled and the original operation may still be pending.
Alertable state machines should handle alert, APC, timeout, and object completion as separate branches. A retry loop also needs a cancellation or deadline policy; immediately repeating an infinite alertable wait can hide a persistent alert source or prevent orderly shutdown.
What to inspect
- Capture the wait routine, wait mode, alertable flag, alerting component, and state of the dispatcher object.
- Do not translate an alert into successful completion of the underlying operation.
- Clear or consume application shutdown state before reentering the wait.
- Use tracing to distinguish explicit alerts from APC delivery and ordinary timeouts.
References
- Microsoft Open Specifications: NTSTATUS values
- Microsoft WDK: KeWaitForSingleObject
- Microsoft WDK: KeDelayExecutionThread
- Microsoft Windows SDK metadata: ntstatus.h
Looking for a different code? Search another status or error code.