Identify IRP originator

NTDEV
1

Hi All,
I have to identify a particular IRP originator program in my driver. I mean
to distinguish between two programs that will access the same device object
in my driver. I’d like to get an instance handle or some other unique ID of
the application from within my driver.
Is it possible ?
Any help is very welcome.
Regards,
Stas,
Powernet.

You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

2

passing the IRP to IoGetRequestorProcess() you will get the EPROCESS that
sent the IRP.

Matteo

----- Original Message -----
From: “stas”
To: “NT Developers Interest List”
Sent: Tuesday, April 10, 2001 1:55 PM
Subject: [ntdev] Identify IRP originator

> Hi All,
> I have to identify a particular IRP originator program in my driver. I
mean
> to distinguish between two programs that will access the same device
object
> in my driver. I’d like to get an instance handle or some other unique ID
of
> the application from within my driver.
> Is it possible ?
> Any help is very welcome.
> Regards,
> Stas,
> Powernet.
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@dolce.it
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

3

For user-mode initiated IRPs, Irp->Tail.Overlay.Thread is a thing.

Note that you’re NOT supposed to write to any IRP’s fiels except the
IoStatus - they are internal for the IO manager use to pass data from the
IRP origination code to IopCompleteRequest.

Max

----- Original Message -----
From: “stas”
To: “NT Developers Interest List”
Sent: Tuesday, April 10, 2001 3:55 PM
Subject: [ntdev] Identify IRP originator

> Hi All,
> I have to identify a particular IRP originator program in my driver. I
mean
> to distinguish between two programs that will access the same device
object
> in my driver. I’d like to get an instance handle or some other unique ID
of
> the application from within my driver.
> Is it possible ?
> Any help is very welcome.
> Regards,
> Stas,
> Powernet.
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>

—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

4

> I have to identify a particular IRP originator program in my driver.

What I put in all of my Dispatch routines is a print of:
PsGetCurrentProcessId ()
PsGetCurrentThreadId ()

You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com