Re: Overwriting Files In Use

Rafael Rivera Jr. wrote:
> I have the need to overwrite code in one of my libraries that's
> currently in use by [n] amount of processes (e.g. memory mapped). I'm
> aware I cannot do this in user mode, therefore am looking for
> suggestions in the kernel mode.

<brainstorming>
Maybe opening that DLL for reading and changing in your
EPROCESS.ObjectTable it's HANDLE_TABLE_ENTRY.GrantedAccess mask for +w
in kernel-mode?
</brainstorming>

.

Relevant Pages

  • Re: Unexpected Error With CE.BIB file
    ... User mode applications can't run in kernel mode, ... you're trying to load hidparse.dll into your user mode ... but hidparse is included in the image with the K flag set. ...
    (microsoft.public.windowsce.platbuilder)
  • Re: Allocating and accessing physically contiguous memory in user mode in WinCE 6.0 Beta
    ... because most embedded systems are closed systems, ... User mode drivers are exactly what we have had for all versions prior to CE ... What is new in V6.0 is Kernel mode drivers, ...
    (microsoft.public.windowsce.platbuilder)
  • Re: Device Driver that uploads its own code?
    ... Anyway, if you need dynamically extend functionality of your application, ... but the code you pass from user mode is just unable ... to be run in kernel mode without special preprocessings. ... For example, if the driver ...
    (microsoft.public.win32.programmer.kernel)
  • Advisory: Arbitrary kernel mode memory writes in AVG
    ... Arbitrary kernel mode memory writes in AVG Antivirus ... The AVG Antivirus core kernel mode service driver provides ... data from addresses taken unchecked from the user mode application. ...
    (Bugtraq)
  • Re: Problems wth my own User Mode WDM Audio Driver on Windows 2003
    ... is purely user mode, based on WINMM and works fine. ... > just because you are running in kernel mode does not mean that you have ... > Please do not send e-mail directly to this alias. ... The data flow is too small. ...
    (microsoft.public.development.device.drivers)