I’m using 3th party sys files.
Works, but not perfect.
I would like to patch.
What I thought.
I am writing another sys.
My Sys rewrite of the original sys entry address.
Perform the job, and then call the original.
Possible?
driver can write another driver memory?
If everything can be prefixed as you describe, create a filter driver to
perform the operations you need to modify. Modifying the entry
addresses is a crappy hack.
Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
-----Original Message-----
From: xxxxx@csobolyo.hu [mailto:xxxxx@csobolyo.hu]
Posted At: Sunday, April 25, 2010 3:44 PM
Posted To: ntdev
Conversation: .sys patch
Subject: .sys patchI’m using 3th party sys files.
Works, but not perfect.
I would like to patch.What I thought.
I am writing another sys.
My Sys rewrite of the original sys entry address.
Perform the job, and then call the original.Possible?
driver can write another driver memory?
__________ Information from ESET Smart Security, version of virus
signature
database 5059 (20100425) __________The message was checked by ESET Smart Security.
Filters can be placed above a specific device or above a class of
devices. In that sense they are more flexible than your approach which
will modify the operations of all devices controlled by the driver. The
WDK has samples for each.
Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
-----Original Message-----
From: Csobolyó János [mailto:xxxxx@csobolyo.hu]
Sent: Monday, April 26, 2010 1:30 AM
To: Don Burn
Subject: Re: [ntdev] .sys patchHello Don,
Sunday, April 25, 2010, 10:07:23 PM, you wrote:
> If everything can be prefixed as you describe, create a filter
driver to
> perform the operations you need to modify. Modifying the entry
> addresses is a crappy hack.> Don Burn (MVP, Windows DKD)
> Windows Filesystem and Driver Consulting
> Website: http://www.windrvr.com
> Blog: http://msmvps.com/blogs/WinDrvrHi Don
Is completely does not mean, the filter driver is operational.
I looked at:
\ WinDDK \ src \ general \ toaster \ kmdf \ filter \ generic \ …
example.
This device is placed above all?
Or where I can specify which device should apply?–
Best regards,
Csobolyó János mailto:xxxxx@csobolyo.hu__________ Information from ESET Smart Security, version of virus
signature
database 5061 (20100426) __________The message was checked by ESET Smart Security.
Hello Don,
Sunday, April 25, 2010, 10:07:23 PM, you wrote:
If everything can be prefixed as you describe, create a filter driver
to
perform the operations you need to modify. Modifying the entry
addresses is a crappy hack.
Don Burn (MVP, Windows DKD)
Windows Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Hi Don
Is completely does not mean, the filter driver is operational.
I looked at:
\ WinDDK \ src \ general \ toaster \ kmdf \ filter \ generic \ …
example.
This device is placed above all?
Or where I can specify which device should apply?
–
Best regards,
Csobolyó János mailto:xxxxx@csobolyo.hu
__________ Information from ESET Smart Security, version of virus
signature database 5061 (20100426) __________
The message was checked by ESET Smart Security.