Re: Copying a kernel routine



Bad idea in general, first if this is a modern processor it won't work since
the paged area will not have the execute bit. Second, the code is linked
to a location, how are you going to determine the reloc's (this is where a
full disassembler comes in handy). Third how do you know if the code does
not depend on external factors that you cannot control.

Why do you think you need this? What function do you think you will be able
to diddle at the binary level?


--
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply


"Hummingbird" <Hummingbird@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BCB81727-C855-4B33-9F06-FB7C62377923@xxxxxxxxxxxxxxxx
Hi everyone.

I wants to make some changes to a kernel routine and use it by myself
(which
means other drivers in the system can not use this new routine and those
chages will not affect other drivers)
What i am thinking is i can allocate a non-paged pool, and copy the whole
routine to this pool, modify it and call it by the pointer to the pool.

I don't know if i am right. And here is another problem: how can i know
the
size of the whole routine? Do i need a small disassembler in my driver or
something?

Many Thanks.


.



Relevant Pages

  • Re: Copying a kernel routine
    ... Don Burn (MVP, Windows DDK) ... Windows 2k/XP/2k3 Filesystem and Driver Consulting ... I wants to make some changes to a kernel routine and use it by myself ... What i am thinking is i can allocate a non-paged pool, ...
    (microsoft.public.development.device.drivers)
  • Re: Copying a kernel routine
    ... and copy the kernel routine into this address. ... Windows 2k/XP/2k3 Filesystem and Driver Consulting ... What i am thinking is i can allocate a non-paged pool, ...
    (microsoft.public.development.device.drivers)
  • Re: Copying a kernel routine
    ... Stay off the CR0 register or any other processor state. ... but that's means I have to copy the whole ntoskrnl.exe to the pool. ... Windows 2k/XP/2k3 Filesystem and Driver Consulting ... routine to this pool, modify it and call it by the pointer to the pool. ...
    (microsoft.public.development.device.drivers)
  • Re: Copying a kernel routine
    ... and copy the kernel routine into this address. ... Windows 2k/XP/2k3 Filesystem and Driver Consulting ... What i am thinking is i can allocate a non-paged pool, ...
    (microsoft.public.development.device.drivers)
  • RE: KB913648 Volume Shadow Copy Service update
    ... A driver installed on the system is using an excessive amount of non-paged ... Poolmon will list which pool ... VOLSNAP.SYS driver used to take and manage volume snapshots requires paged ... re-size the shadow storage size. ...
    (microsoft.public.windows.file_system)