Re: communication between Ring0 and Ring3

From: Steve Maillet \(eMVP\) (nospam1_at_EntelechyConsulting.com)
Date: 02/25/04


Date: Wed, 25 Feb 2004 08:42:52 -0500

That's not actually true. Kernel Mode simply allows full access to the
statically mapped virtual addresses without incurring an access violation.
There is still protection from access across process spaces, etc. and the
CPUs protection mechanisms are still used including privileged instruction
protections.

It's also not true that on all embedded systems that there is no way to add
code to a device. (Pocket PCs use Windows CE in FULL Kernel mode now so that
can be a concern for those devices) There is a measurable performance
increase as the system can take some shortcuts in the system call process
bypassing a few security and memory access permission checks.

-- 
Steve Maillet (eMVP)
Entelechy Consulting
smaillet_AT_EntelechyConsulting_DOT_com


Relevant Pages

  • Re: Licence and software protection
    ... Since your software is running in user-mode, any kernel-mode (Ring0) ... runs in kernel mode, in the same level cracking tools are running. ... fight against the protection routines because they are running in the same ... operation level, it has all the privileges enabled and almost everything is ...
    (borland.public.delphi.thirdpartytools.general)
  • Re: Licence and software protection
    ... Protection using Ring 0 are very unstable, ... Currently Themida is same than XProtector... ... > runs in kernel mode, in the same level cracking tools are running. ... but its not a regular software protector in the form ASprotect. ...
    (borland.public.delphi.thirdpartytools.general)
  • Re: Re:How To Suspend Thread In Kernel?
    ... antipiracy system!= protecting the system from hostile kernel mode ... It is a simple matter of kernel mode code having unrestricted ... security, IMO. ... kernel mode protection components, as I said few month ago ...
    (microsoft.public.win32.programmer.kernel)
  • Re: glInterleavedArrays locks vertex memory?
    ... After using glInterleavedArrays and glDrawArrays the vertex field is write protected. ... Driver: ForceWare 169.96, WinXP SP2 ... After that any write acess on the vertex field gives "access violation". ... no, I checked the page access protection using VirtualQueryWin32 API, and it clearly shows the protection changes from PAGE_READWRITE to PAGE_READONLY. ...
    (comp.graphics.api.opengl)