Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

Re: RE:: X64 APC Delivering

Don_Burn_1Don_Burn_1 Member Posts: 4,311
And the answer to your questions is the same as creating a process in
user space, use a user space helper application. You are essentially
creating an unstable solution by attempting to do this entirely in
kernel space. Mucking with many attributes of a user space process are
best done in user space.

Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting

> -----Original Message-----
> From: []
> Posted At: Wednesday, July 21, 2010 10:01 AM
> Posted To: ntdev
> Conversation: RE:: X64 APC Delivering
> Subject: RE: RE:: X64 APC Delivering
> I would like to do this because is the only way that i known to map a
dll to a
> user mode process address space from a kernel driver.
> Initially i would like to create a user mode thread from a kernel
driver but
> after a week of research i infer that it was not possible to do this
> the native api ZwCreateThread and ZwCreateProcess don't inform cssrss
> new thread / process just born.
> Is it possible with an I/O completion port to map a user mode dll in a
> process??? If the answer is yes can you give me some example code
> Thanks in advance .
> Greetings
> Andrea Allievi
> __________ Information from ESET Smart Security, version of virus
> database 5297 (20100721) __________
> The message was checked by ESET Smart Security.
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Developing Minifilters 29 July 2019 OSR Seminar Space
Writing WDF Drivers 23 Sept 2019 OSR Seminar Space
Kernel Debugging 21 Oct 2019 OSR Seminar Space
Internals & Software Drivers 18 Nov 2019 Dulles, VA