Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Home NTDEV
Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


RE: Creating threads in context of user process from the -kernel

A thread as associated with a process context, and cannot exist after the
process has terminated. If you need a thread running longer than the life
of your application, then create that thread in the context of the SYSTEM
process.

-----------------------------------------------------------------------
Dave Cox
Hewlett-Packard Co.
ESBU/SSMO (Santa Barbara)


-----Original Message-----
From: [email protected] [mailto:[email protected]]
Sent: Friday, February 25, 2000 9:52 AM
To: NT Developers Interest List
Subject: Re: [ntdev] Creating threads in context of user process from
the kernel


Once again. I DO NEED this thread after the application exits. I've just
stolen the context of the application and then don't need this application
anymore. A user works with the application not knowing about the spy kernel
thread. Non-MFC applications doesn't react on that fact that there are
additional threads appear. But MFC applications want to control all the
threads of the process, they don't react on the kernel threads while working
but they cause access violation when exiting.

Regards,
Max

----------
??: Jamey Kirby[SMTP:[email protected]]
?????: NT Developers Interest List
??????????: 25 ??????? 2000 ?. 20:22
????: NT Developers Interest List
????: [ntdev] RE: Creating threads in context of user process from the
kernel

If the thread is in the context of your application, when your application
goes away, so does your thread. Because you are not properly synchronizing
the removal of the thread, you are experiencing the problem you are seeing.
I have doen this myself. You need to terminate the thread when the
application terminates (in IRP_MJ_CLOSE or an IOCTL send by the application)
and re-cresate it in the process you need when you need it againt. Sorry to
dissapoint you.

This has been my experience.

Jamey


> -----Original Message-----
> From: [email protected] [mailto:[email protected]]On Behalf Of
> Max Lyadvinsky
> Sent: Friday, February 25, 2000 8:55 AM
> To: 'NT Developers Interest List'
> Subject: Re: [ntdev] RE: Creating threads in context of user process
> from the kernel
>
>
> This isn't the way, 'cause I need this system thread.
>
>
> ----------
> ??: Jamey Kirby[SMTP:[email protected]]
> ??????????: 25 ??????? 2000 ?. 19:26
> ????: NT Developers Interest List
> ????: [ntdev] RE: Creating threads in context of user
> process from the kernel
>
> YOu need to terminate tht thread in your driver first.
>
> > -----Original Message-----
> > From: [email protected]
> > [mailto:[email protected]]On Behalf Of Max Lyadvinsky
> > Sent: Friday, February 25, 2000 6:34 AM
> > To: NT Developers Interest List
> > Subject: [ntdev] Creating threads in context of user process from the
> > kernel
> >
> >
> > Dear All!
> >
> > I've encountered the following problem in my nt driver. Inside my
> > driver I create threads in the context of the user mode
> > application and when the application exits the access violation
> > occurs. This occurs just in MFC applications. The MFC application
> > tries to deallocate resources for each thread and faults.
> > I can work around this problem by terminating the main thread (in
> > CWinApp::ExitInstance) when exiting my MFC app, but in this case
> > global destructors are not called. Maybe there is a way to tell
> > the MFC app about the newly created kernel mode thread so that
> > the MFC application could exit without problems?
> >
> > Regards,
> > Max Lyadvinsky
> >
> >
> > ---
> > You are currently subscribed to ntdev as: [email protected]
> > To unsubscribe send a blank email to $subst('Email.Unsub')
> >
> >
>
> ---
> You are currently subscribed to ntdev as: [email protected]
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
>
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Writing WDF Drivers 7 Dec 2020 LIVE ONLINE
Internals & Software Drivers 25 Jan 2021 LIVE ONLINE
Developing Minifilters 8 March 2021 LIVE ONLINE