RE: Re[2]: NtCreateSection() - relation between parent an d child process

As I said before, at Number Nine we hooked the GDI with graphics drivers, no
problem. If I remember correctly, font software such as the Adobe Type
Manager did that too. It’s not a question of being production software, it’s
a question of doing it properly.


-----Original Message-----
[]On Behalf Of Robert Newton
Sent: Tuesday, January 27, 2004 1:01 PM
To: Windows System Software Devs Interest List
Subject: Re[2]: [ntdev] NtCreateSection() - relation between parent and
child process

These are all examples of system diagnostic tools where I think most
people would agree that hooking makes complete sense. It begs the
question though of whether or not a general purpose driver can engage
in hooking safely. If every general purpose driver starts hooking who
knows what, how
do you deal with a plug and play world and drivers that are being
loaded and unloaded without any knowledge of each other.


Questions? First check the Kernel Driver FAQ at

You are currently subscribed to ntdev as:
To unsubscribe send a blank email to

The contents of this e-mail are intended for the named addressee only. It
contains information that may be confidential. Unless you are the named
addressee or an authorized designee, you may not copy or use it, or disclose
it to anyone else. If you received it in error please notify us immediately
and then destroy it.