Prev: fltmgr.sys PDB and - fltkd WinDBG extension not working (windows XP) ...
Next: RPC memory leak under Vista
From: Arno Garrels on 12 Jan 2007 05:35
Arno Garrels wrote:
> Again, it works when called in current process!
> The exception is raised when current context is parent context,
> upon accessing the Buffer member of the UNICODE_STRING structure.
> In other words the same always works with PsGetCurrentProcess() as
> well as when the process is terminated.
> Accessing the Length member is no problem also it always contains
> the correct number of bytes. KeStackAttachProcess() as well as
> KeAttachProcess() do not change anything.

A check of the Buffer address with MmIsAddressValid() returns FALSE
indicating that a page fault will occur on read, what can I do?


> Arno Garrels
First  |  Prev  | 
Pages: 1 2
Prev: fltmgr.sys PDB and - fltkd WinDBG extension not working (windows XP) ...
Next: RPC memory leak under Vista