Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results
The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
Hi, I need to run my driver on multiple versions of system: Windows 7, Windows 8, Windows 8.1 and Windows 10.
To do this, in the project settings, I specified: Properties->Driver Settings->Target OS Version: Windows 7
If I specify Windows 8, 8.1 or 10, then when trying to run on Windows 7, a BSOD appears when executing: GsDriverEntry->__security_init_cookie
At the same time, I register a callback in the driver to intercept IRP_MJ_CREATE_NAMED_PIPE. In FLT_REGISTRATION, I set the FLTFL_REGISTRATION_SUPPORT_NPFS_MSFS flag.
This flag aviable starting from Windows 8. (On windows 7, I do not set the flag).
On Windows 10, this callback works, but on Windows 8.1 or on Windows server 2019, the callback does not work, as if it was not registered
If I switch Properties->Driver Settings->Target OS Version: Windows 10, then everything works stably, but does not run on Windows 7.
Can someone tell me what the problem is? Or how to solve it?
Upcoming OSR Seminars | ||
---|---|---|
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead! | ||
Internals & Software Drivers | 7 February 2022 | Live, Online |
Kernel Debugging | 21 March 2022 | Live, Online |
Developing Minifilters | 23 May 2022 | Live, Online |
Writing WDF Drivers | 12 September 2022 | Live, Online |
Comments
https://docs.microsoft.com/en-us/windows-hardware/drivers/develop/building-drivers-for-different-versions-of-windows#guidelines-that-apply-to-building-kernel-mode-drivers
See the comment about changing the buffer overflow library.
-scott
OSR