IRP io_stack_location = 0

WINDBG
1

What does it mean when I run the !irp command and the io_stack_location is 0x00000000 ?

0: kd> !irp 85dc19b0
85dc19b0: Irp is active with 2 stacks 4 is current (= 00000000)
Mdl=85e177f0: No System Buffer: Thread 8b74c530: Irp is completed. Pending has been returned
cmd flg cl Device File Completion-Context
[0, 0] 0 0 00000000 00000000 00000000-00000000

Args: 00000000 00000000 00000000 00000000
[3, 0] 0 0 89ce54b8 00000000 00000000-00000000
\Driver\getntds
Args: 00000000 00000000 00000000 00000000

2

Tony
OSR

3

For a reference, MSDN doc:

https://msdn.microsoft.com/en-us/library/windows/hardware/ff547084(v=vs.85).aspx
“When a driver calls IoCompleteRequest, the I/O manager fills that driver’s I/O stack location with zeros before calling the next higher-level driver, if any, that has set up an IoCompletion routine to be called for the IRP.”

4

Thanks!