The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
As far as i know, and have experienced, when i access user mode addresses for reading, i combine PorbeForRead + a try catch block to make the code 100% safe and no risk of getting BSOD.
but i was wondering, if i combine porbeforread + try catch, will this be able to catch any exception thrown from accessing a invalid or paged out address in user-mode from my driver? even if IRQL is higher or equal to DISPATCH_LEVEL?
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!|
|Developing Minifilters||24 May 2021||Live, Online|
|Writing WDF Drivers||14 June 2021||Live, Online|
|Internals & Software Drivers||27 September 2021||Live, Online|
|Kernel Debugging||TBD 2021||Live, Online|