The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
Hi, it seems !pte extension in WinDbg does not work as expected. For example if I pass it the address 0x00000000FFEE1000 it actually extends the lower part "FFEE1000" adding 8 "F" in front:
lkd> !pte 0x00000000FFEE1000
PXE at FFFFF6FB7DBEDFF8 PPE at FFFFF6FB7DBFFFF8 PDE at FFFFF6FB7FFFFFF8 PTE at FFFFF6FFFFFFF708
contains 00000000001E8063 contains 00000000001E7063 contains 00000000001E9063 contains 0000000000000000
pfn 1e8 ---DA--KWEV pfn 1e7 ---DA--KWEV pfn 1e9 ---DA--KWEV not valid
Is it actually the expected behavior ? Thanks.
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!|
|Kernel Debugging||13-17 May 2024||Live, Online|
|Developing Minifilters||1-5 Apr 2024||Live, Online|
|Internals & Software Drivers||11-15 Mar 2024||Live, Online|
|Writing WDF Drivers||26 Feb - 1 Mar 2024||Live, Online|