it seems that ZwClose overwrites the stack of my thread…?
After stepping over the function, all my variables where overwritten / became invalid.
-----Urspr?ngliche Nachricht-----
Von: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] Im Auftrag von Maxim S. Shatskih
Gesendet: Montag, 14. M?rz 2011 23:02
An: Windows System Software Devs Interest List
Betreff: Re:[ntdev] IRQL_NOT_LESS_OR_EQUAL (a)
Arg1: fffffffc, memory referenced
CONTAINING_RECORD for the field with offset 4 and NULL structure pointer.
–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com
NTDEV is sponsored by OSR
For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
No ZwClose does not overwrite your stack. Your driver has serious
problems in its code, these are your problems not Windows.
Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
“Spitzkopf, Andreas” wrote in message
news:xxxxx@ntdev:
> it seems that ZwClose overwrites the stack of my thread…?
> After stepping over the function, all my variables where overwritten / became invalid.
>
>
>
> -----Ursprüngliche Nachricht-----
> Von: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] Im Auftrag von Maxim S. Shatskih
> Gesendet: Montag, 14. März 2011 23:02
> An: Windows System Software Devs Interest List
> Betreff: Re:[ntdev] IRQL_NOT_LESS_OR_EQUAL (a)
>
> >Arg1: fffffffc, memory referenced
>
> CONTAINING_RECORD for the field with offset 4 and NULL structure pointer.
>
> –
> Maxim S. Shatskih
> Windows DDK MVP
> xxxxx@storagecraft.com
> http://www.storagecraft.com
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer