Finding nonpaged pool in memory

How would you go about finding and then walking the nonpaged pool in
\Device\PhysicalMemory? Somebody mentioned doing this with intent of
enumerating file objects. Could you use this technique to create a handle
to one of these arbitrary file objects? (Assuming you find one you want?)
I’ve been trying to find a safe way to get a handle to \Device\Video0 so I
can send it IOCTL_VIDEO_SET_OUTPUT_DEVICE_POWER_STATE from user mode, but so
far this has proved impossible. What function gets me a handle from a
pointer? (ObSomethingOrOther)

Thanks,
-brian


You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

OnOpenObjectByPointer

----- Original Message -----
From: “Argus”
To: “File Systems Developers”
Sent: Thursday, November 01, 2001 12:01 AM
Subject: [ntfsd] Finding nonpaged pool in memory

> How would you go about finding and then walking the nonpaged pool in
> \Device\PhysicalMemory? Somebody mentioned doing this with intent of
> enumerating file objects. Could you use this technique to create a handle
> to one of these arbitrary file objects? (Assuming you find one you want?)
> I’ve been trying to find a safe way to get a handle to \Device\Video0 so I
> can send it IOCTL_VIDEO_SET_OUTPUT_DEVICE_POWER_STATE from user mode, but so
> far this has proved impossible. What function gets me a handle from a
> pointer? (ObSomethingOrOther)
>
> Thanks,
> -brian
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>


You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com