remove lock tag

I noticed that the tag for

IoInitializeRemoveLock is an ulong, while
IoAcquireRemoveLock and IoReleaseRemoveLockAndWait take a PVOID.

for the ulong i specify ' DvB' (the reverse of my initials), but what do i
speciy for the PVOID? a string pointer?

kind regards,
Bruno.


.

Relevant Pages

  • [EXPL] Windows Kernel APC Privilege Escalation (MS05-055, Exploit)
    ... PVOID PebBaseAddress; ... ULONG AffinityMask; ... mov eax, 0x9e ... ProcessId = GetCurrentProcessId; ...
    (Securiteam)
  • Re: remove lock tag
    ... >> IoAcquireRemoveLock and IoReleaseRemoveLockAndWait take a PVOID. ... >> for the ulong i specify ' DvB', ... Tag identifies _instance_ of acquiring the remove ...
    (microsoft.public.development.device.drivers)
  • RE: remove lock tag
    ... > IoAcquireRemoveLock and IoReleaseRemoveLockAndWait take a PVOID. ... > for the ulong i specify ' DvB', ... In IoAcquireRemoveLock, Tag identifies _instance_ of acquiring the remove ... a driver Dispatch routine typically sets this parameter ...
    (microsoft.public.development.device.drivers)
  • Re: Problem getting Remote Address of Connected Sockets using Gary Nab
    ... Are you sure that hObject is socket handle? ... > OUT PVOID SystemInformation, ... > IN ULONG SystemInformationLength, ... > ULONG RawCopyconst; ...
    (microsoft.public.win32.programmer.networks)
  • RegisterWaitForSingleObject & memory leaks
    ... lost some significant handles after all children stops!? ... BOOL (PHANDLE, HANDLE, PVOID, ... PVOID, ULONG, ULONG); ... DWORD ProcessId; ...
    (microsoft.public.win32.programmer.kernel)