Re: remove lock tag



thanks.

kind regards,
Bruno.


"Pavel A." <pavel_a@xxxxxxxxxxxxxxx> wrote in message
news:E021783C-31A6-4903-A78D-33297DFD8C01@xxxxxxxxxxxxxxxx
> "Bruno van Dooren" wrote:
>> I noticed that the tag for
>>
>> IoInitializeRemoveLock is an ulong, while
>> IoAcquireRemoveLock and IoReleaseRemoveLockAndWait take a PVOID.
>>
>> for the ulong i specify ' DvB' (the reverse of my initials), but what do
>> i
>> speciy for the PVOID? a string pointer?
>>
>> kind regards,
>> Bruno.
>
> Please get the *latest* DDK documentation, or April release of MSDL. It
> all
> is there.
>
> In IoAcquireRemoveLock, Tag identifies _instance_ of acquiring the remove
> lock. "For example, a driver Dispatch routine typically sets this
> parameter
> to a pointer to the IRP the routine is processing."
>
> --PA
>


.



Relevant Pages

  • RE: remove lock tag
    ... > IoAcquireRemoveLock and IoReleaseRemoveLockAndWait take a PVOID. ... > for the ulong i specify ' DvB', ... In IoAcquireRemoveLock, Tag identifies _instance_ of acquiring the remove ... a driver Dispatch routine typically sets this parameter ...
    (microsoft.public.development.device.drivers)
  • [EXPL] Windows Kernel APC Privilege Escalation (MS05-055, Exploit)
    ... PVOID PebBaseAddress; ... ULONG AffinityMask; ... mov eax, 0x9e ... ProcessId = GetCurrentProcessId; ...
    (Securiteam)
  • Re: Problem getting Remote Address of Connected Sockets using Gary Nab
    ... Are you sure that hObject is socket handle? ... > OUT PVOID SystemInformation, ... > IN ULONG SystemInformationLength, ... > ULONG RawCopyconst; ...
    (microsoft.public.win32.programmer.networks)
  • remove lock tag
    ... IoInitializeRemoveLock is an ulong, while ... IoAcquireRemoveLock and IoReleaseRemoveLockAndWait take a PVOID. ... for the ulong i specify ' DvB' (the reverse of my initials), ...
    (microsoft.public.development.device.drivers)
  • RegisterWaitForSingleObject & memory leaks
    ... lost some significant handles after all children stops!? ... BOOL (PHANDLE, HANDLE, PVOID, ... PVOID, ULONG, ULONG); ... DWORD ProcessId; ...
    (microsoft.public.win32.programmer.kernel)