Question about KeRegisterBugCheckReasonCallback

NTDEV
1

Hi,

in lack of a pre-SP1 XP I have to ask here. Is it necessary to check the SP-level or can I simply attempt to retrieve the function pointer to KeRegisterBugCheckReasonCallback and if it fails use the old method that would work on XP without SP and Windows 2000?

Cheers,

Oliver

May the source be with you, stranger :wink:

ICQ: #281645
URL: http://assarbad.info | http://windirstat.info | http://blog.assarbad.info

2

You should search this list for the potential hazards of
MmGetSystemRoutineAddress. See this explanation:
https://www.osronline.com/article.cfm?id=494

Basically you should only call MmGetSystemRoutineAddress if you know
it is going to succeed, meaning that you need to first test the os and
sp version and then get the function pointer.

On Dec 9, 2007 7:30 PM, Oliver Schneider wrote:
> Hi,
>
> in lack of a pre-SP1 XP I have to ask here. Is it necessary to check the SP-level or can I simply attempt to retrieve the function pointer to KeRegisterBugCheckReasonCallback and if it fails use the old method that would work on XP without SP and Windows 2000?
>
>
> Cheers,
>
> Oliver
> –
> ---------------------------------------------------
> May the source be with you, stranger :wink:
>
> ICQ: #281645
> URL: http://assarbad.info | http://windirstat.info | http://blog.assarbad.info
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>

–
Mark Roddy

3

Mark,

thanks!

I was aware of this, although I hadn’t thought far enough to recognize this as a problem in my case. When it was released, I read Hector’s (OSR) Memo from May this year, because we almost got caught by this problem in the company as well.

So apparently it doesn’t matter what route I take as I have to check the version in any case.

Thanks.

Oliver

-------- Original-Nachricht --------

Datum: Sun, 9 Dec 2007 22:07:31 -0500
Von: “Mark Roddy”
> An: “Windows System Software Devs Interest List”
> Betreff: Re: [ntdev] Question about KeRegisterBugCheckReasonCallback

> You should search this list for the potential hazards of
> MmGetSystemRoutineAddress. See this explanation:
> https://www.osronline.com/article.cfm?id=494
>
> Basically you should only call MmGetSystemRoutineAddress if you know
> it is going to succeed, meaning that you need to first test the os and
> sp version and then get the function pointer.
>
> On Dec 9, 2007 7:30 PM, Oliver Schneider wrote:
> > Hi,
> >
> > in lack of a pre-SP1 XP I have to ask here. Is it necessary to check the
> SP-level or can I simply attempt to retrieve the function pointer to
> KeRegisterBugCheckReasonCallback and if it fails use the old method that would
> work on XP without SP and Windows 2000?
> >
> >
> > Cheers,
> >
> > Oliver
> > –
> > ---------------------------------------------------
> > May the source be with you, stranger :wink:
> >
> > ICQ: #281645
> > URL: http://assarbad.info | http://windirstat.info |
> http://blog.assarbad.info
> >
> >
> > —
> > NTDEV is sponsored by OSR
> >
> > For our schedule of WDF, WDM, debugging and other seminars visit:
> > http://www.osr.com/seminars
> >
> > To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
> >
>
>
>
> –
> Mark Roddy
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer

–
---------------------------------------------------
May the source be with you, stranger :wink:

ICQ: #281645
URL: http://assarbad.info | http://windirstat.info | http://blog.assarbad.info