Re: About the NEITHER method to read and write data

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Maxim,

The topmost driver which handles the NEITHER IOCTLs must be runned in the
same process as the user mode caller.

Actually, topmost drivers *ALWAYS* receive IOCTLs in context of threads
that initiate them - if thread context eventually gets lost, it
happens at some later stage

Anton Bassov

Maxim S. Shatskih wrote:
The topmost driver which handles the NEITHER IOCTLs must be runned in the
same process as the user mode caller.

In fact, NEITHER is of limited use, for FSCTLs mainly.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@xxxxxxxxxxxxxxxx
http://www.storagecraft.com

"jackie" <jackie@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FD463A35-DBA0-4BA0-9BA1-F6B7104521FC@xxxxxxxxxxxxxxxx
When reading the NEITHER method in WDM, it is wierd to me how it works.
ProbeForRead or ProbeForWrite can verifythat a range of address truly belongs
to user mode. But what if the process context is changed? Wouldn't writing
to the same address in another process context be something wrong?

--
Jackie

.



Relevant Pages

  • Re: Virtual video capture device driver
    ... HwInitialize (which runs in context of system process) and use it in the ... then feed your driver with the data through it. ... > data from a user mode app and which ought to be rendered by the output ...
    (microsoft.public.development.device.drivers)
  • User mode/Kernel Mode context question
    ... in the correct user mode context, you can call a user mode function from ... the kernel mode and to be sure of the context. ... The OSR article was probably written in the era of INT 2E. ...
    (microsoft.public.development.device.drivers)
  • Re: OT: why no file copy() libc/syscall ??
    ... It is too simple to implement in user mode. ... The security context of the output depends on the user process. ... And this is the other reason for not doing it in Kernel mode. ...
    (Linux-Kernel)
  • Re: How to use ObReferenceObjectByHandle
    ... you can call ObReferenceObjectByHandle with handle send from user mode ... sending thread to receive correct handle from user mode to kernel ... >> Are you sure you are running in the context of the process where this ... > can it be done from win32 without a driver? ...
    (microsoft.public.win32.programmer.kernel)
  • Accessing Debug Registers in Linux
    ... I want to understand software debugging in OSs. ... Debuggers in Windows uses Debug API + Thread Context Functions to do ...
    (comp.lang.asm.x86)