Is it possible to send message from User mode to Kernal?

NTFSD
1

Hello

Is there any body that knows if it is possible to send message from User mode to Kernal mode?

How do I do that if it is possible?

Thanks in advance
Mattias Bergkvist

2

Of course you can, I guess the question is what sort of message.
IOCTL/FSCTL are messages for instance.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply

wrote in message news:xxxxx@ntfsd…
> Hello
>
> Is there any body that knows if it is possible to send message from User
> mode to Kernal mode?
>
> How do I do that if it is possible?
>
> Thanks in advance
> Mattias Bergkvist
>

3

Thanks for the help Don

IOCTL/FSCTL are messages for instance.

Is there some example code for implementing this?

Or where can I read about it?

Thanks
Mattias Bergkvist

4

What type of driver are you doing? If this is for a file system driver then
this is the correct newsgroup, but you have a lot of learning to do since
these are some of the most complex drivers in Windows. If this is general
look at the IOCTL sample under src\general\ioctl in the WDK. If this is not
a file system driver we should move the discussion the NTDEV.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply

wrote in message news:xxxxx@ntfsd…
> Thanks for the help Don
>
>> IOCTL/FSCTL are messages for instance.
>
> Is there some example code for implementing this?
>
> Or where can I read about it?
>
> Thanks
> Mattias Bergkvist
>

5

DeviceIoControl is exactly intended for this.

–
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

wrote in message news:xxxxx@ntfsd…
> Hello
>
> Is there any body that knows if it is possible to send message from User mode
to Kernal mode?
>
> How do I do that if it is possible?
>
> Thanks in advance
> Mattias Bergkvist
>

6

> What type of driver are you doing?
File system driver is the driver I develop.

look at the IOCTL sample under src\general\ioctl
Yes I shall do that, thanks Don.

DeviceIoControl is exactly intended for this.
I shall look at that too, thanks Maxim.

Thanks
Mattias Bergkvist

7

Hi Mattias,

If I am correct, you need to communicate with your minifilter (I am guessing based on your previous threads about antivirus minifilter).
You can use the preferred way of communication for minifilters: Communication Port.
You can create a communication port from your driver using FltcreateCommunicationPort & then send message to it using FilterSendMessage.

You can also use the IOCTL method in which you send the IOCTL to your driver by DeviceIoControl.
You have to create a Control Device Object in your driver and a symbolic link to it.
Using this symbolic link, open a handle to your CDO from user app & send a IOCTL using DeviceIocontrol.

Regards,
Ayush Gupta

5, 50, 500, 5000 - Store N number of mails in your inbox. Click here.