RE: remove lock tag

"Bruno van Dooren" wrote:
> I noticed that the tag for
>
> IoInitializeRemoveLock is an ulong, while
> IoAcquireRemoveLock and IoReleaseRemoveLockAndWait take a PVOID.
>
> for the ulong i specify ' DvB' (the reverse of my initials), but what do i
> speciy for the PVOID? a string pointer?
>
> kind regards,
> Bruno.

Please get the *latest* DDK documentation, or April release of MSDL. It all
is there.

In IoAcquireRemoveLock, Tag identifies _instance_ of acquiring the remove
lock. "For example, a driver Dispatch routine typically sets this parameter
to a pointer to the IRP the routine is processing."

--PA

.

Relevant Pages

  • Re: remove lock tag
    ... >> IoAcquireRemoveLock and IoReleaseRemoveLockAndWait take a PVOID. ... >> for the ulong i specify ' DvB', ... Tag identifies _instance_ of acquiring the remove ...
    (microsoft.public.development.device.drivers)
  • [EXPL] Windows Kernel APC Privilege Escalation (MS05-055, Exploit)
    ... PVOID PebBaseAddress; ... ULONG AffinityMask; ... mov eax, 0x9e ... ProcessId = GetCurrentProcessId; ...
    (Securiteam)
  • Re: Problem getting Remote Address of Connected Sockets using Gary Nab
    ... Are you sure that hObject is socket handle? ... > OUT PVOID SystemInformation, ... > IN ULONG SystemInformationLength, ... > ULONG RawCopyconst; ...
    (microsoft.public.win32.programmer.networks)
  • remove lock tag
    ... IoInitializeRemoveLock is an ulong, while ... IoAcquireRemoveLock and IoReleaseRemoveLockAndWait take a PVOID. ... for the ulong i specify ' DvB' (the reverse of my initials), ...
    (microsoft.public.development.device.drivers)
  • RegisterWaitForSingleObject & memory leaks
    ... lost some significant handles after all children stops!? ... BOOL (PHANDLE, HANDLE, PVOID, ... PVOID, ULONG, ULONG); ... DWORD ProcessId; ...
    (microsoft.public.win32.programmer.kernel)