I Registered callback routine by PsSetCreateProcessNotifyRoutine routine to monitor process created/deleted in my Driver.
In this callback routine ZwOpenProcess is used. It works on all wint 10 OS version of 32 and 64 bit but only on latest Win10 32bit Ver 1903, Blue screen error occurred with Stack Overflow log while calling ZwOpenProcess routine.
STACKUSAGE_IMAGE: The module at base 0xFFFFFFFFA3020000 was blamed for the stack overflow. It is using 3304 bytes of stack.
Please suggest me, how to deal with this issue ?
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Developing Minifilters||29 July 2019||OSR Seminar Space|
|Writing WDF Drivers||23 Sept 2019||OSR Seminar Space|
|Kernel Debugging||21 Oct 2019||OSR Seminar Space|
|Internals & Software Drivers||18 Nov 2019||Dulles, VA|