Re: whether a driver is running in user- or kernel- mode

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Which particular output should I be looking at to tell whether it's in user-
or kernel-mode? I'm having trouble regarding this area. Would that be
observing the behaviour on DrvQueryInfo callbacks?

"J" wrote:

On Jun 9, 10:36 pm, ssylee <ssy...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I have taken my efforts to ensure that the driver that I'm looking at is
running in user-mode as shown inhttp://msdn.microsoft.com/en-us/library/ms801104.aspx. However, I'm still
puzzled from its behaviour of whether it is indeed running in user-mode. Is
there any specific way (perhaps with a debugger) to tell whether it's running
in user-mode or kernel-mode?


You can use WinDbg in verbose mode.

.



Relevant Pages

  • Re: whether a driver is running in user- or kernel- mode
    ... You can definitely have user-mode libraries without GDI. ... I've viewed the DLL with Dependency Walker, ... relevant to user-mode or kernel-mode DLLs or libraries that it's ... it does run in usermode. ...
    (microsoft.public.development.device.drivers)
  • Re: Inline assembler reference
    ... stuff that user-mode programmers are not even supposed to know about. ... for both kernel-mode and user-mode code ... couldn't do a proper optimization due to skill and design flaws. ... But the real point here is that all the compiler vendors making x64 ...
    (microsoft.public.win32.programmer.kernel)
  • Re: whether a driver is running in user- or kernel- mode
    ... You can definitely have user-mode libraries without GDI. ... I've viewed the DLL with Dependency Walker, ... relevant to user-mode or kernel-mode DLLs or libraries that it's ...
    (microsoft.public.development.device.drivers)
  • Why use copy_from_user/copy_to_user ?
    ... I misunderstood that one physical memory might have different ... user-mode VA and kernel-mode VA and that's why the system call should ...
    (comp.os.linux.development.system)