NetShareAdd() In Kernel Mode

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Drivers
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Problem with WIA TWAIN compability driver I have written a WIA driver for a scanner. When I scan using the WIA scanner wizard, I can prescan and select the area I want to scan. The precan look very nice. If I scan to a file I have to set the height field in th BITMAPINFOHEADER negative, or else my scan will be upside down. I can live with that. But, when scanning directly to memory, eg. through the WIA TWAIN driver I have no way of doing a similar trick with the height field. So my scans are all opside down when acquired through the Microsoft supplied WIA TWAIN driver. How do I avoid this in my WIA driver? There is a header for memory transfers, which is not documented - as far as I can see. Is it possible to set the height field in that header? regards, Chr. Tag: NetShareAdd() In Kernel Mode Tag: 60757
  - 2
    - OID_TAPI_GET_ID question. The win2003 DDK tells for the OID_TAPI_GET_ID: IN DeviceClass = "ndis" // case insensitive IN ulSelect = LINECALLSELECT_CALL IN hdCall = ActiveCallHandle OUT DeviceID = ConnectionWrapperID Is this correct? I am asking this because the IsdnWan sample in the same DDK responds to the OID with: DeviceID.hDevice = (ULONG) (ULONG_PTR) (pBChannel->htCall); Which seems to the be the call handle not the ConnectionWrapperID. What is the proper way to treat the this OID request? Tag: NetShareAdd() In Kernel Mode Tag: 60749
  - 3
    - Process execution interception Hi, Introduction: *********** I am writing a kernel level process execution watchdog, this watchdog intercept process creation and DLL loading and verify that the PE is allowed to run. The verification process should be done at the application layer, hence, the hook driver will intercept the call in the kernel and will ask the application layer if the PE is allowed to run. Some questions concerning the flow just described ****************************************** preventing a PE from being loaded involve hooking to the Kernel service table and injecting a ZwOpenFile detour that will verify with the application layer if a certain PE is allowed to run, the context that originally called ZwOpenFile should block until a responce is returned... [*] Concerning the ZwOpenFile calling thread, does it a Kernel thread or an application thread? does the thread is related to the kernel thread pool? In that case shouldn't blocking a thread related to the kernel thread pool cause threads depletion? What would be the best way to implement such a mechanism? I would rather make the kernel layer as thin as possible... ( does this the correct approach? ) [*] Is there an API better then ZwOpenFile to intercept for receving DLL, EXE execution/loading ? -- Nadav http://www.sophin.com Tag: NetShareAdd() In Kernel Mode Tag: 60748
  - 4
    - Writing to file Hi, I tried to use the following call to open a file (and to be able to continue my writing to it): status = ZwCreateFile(&hfile,GENERIC_WRITE | FILE_APPEND_DATA, &oa, &iostatus, NULL,FILE_ATTRIBUTE_NORMAL,FILE_SHARE_READ | FILE_SHARE_DELETE,FILE_OPEN,FILE_SYNCHRONOUS_IO_NONALERT,NULL,0); Unfortunately, if the file already exists hfile remains invalid. Can't I open a file that way? Thanks Peter Tag: NetShareAdd() In Kernel Mode Tag: 60747
  - 5
    - 64bit drivers for Win Pro x64 Hi, Is there a reliable(?) source of drivers for devices for XP Pro 64bit? I'm looking for 56k modem drivers/ADSL modem drivers/printer/you get the general idea! Thx Tag: NetShareAdd() In Kernel Mode Tag: 60746
  - 6
    - some question about alloc_text hi all alloc_text( "textsection", function1, ... ) Does the name of textsection is fix or not ?? How to name it?? In the DDK's serial sample code say // INIT - only needed during init and then can be disposed // PAGESRP0 - always paged / never locked // PAGESER - must be locked when a device is open, else paged // INIT is used for DriverEntry() specific code // PAGESRP0 is used for code that is not often called and has nothing // to do with I/O performance. An example, IRP_MJ_PNP/IRP_MN_START_DEVICE // support functions // PAGESER is used for code that needs to be locked after an open for both // performance and IRQL reasons. why PAGESRP0 will page out ,but PASESER did't ?? Does PAGESER0 is the same named as "PAGE"?? Sorry for ask a studip question^^""" Tag: NetShareAdd() In Kernel Mode Tag: 60739
  - 7
    - Can software pose as a USB device? Hello. I'm new in Windows driver development and I'd like to know if a software can behave like a USB device (is emulate the right word?). The OS should be able to detect this software as a new device when I run it. I have 4 questions: 1. Are there interrupts that signal the OS that a device has been plugged? 2. How can I make data (vendor ID and device ID) from the USB-emulator available to the OS (for installation)? 3. How can I make data from the USB-emulator available to the driver? 4. How can I get data from the driver? I guess questions 2-4 have one answer. I'm working in a company that develops drivers for USB devices and I'm planning to make a tool that allows me to "switch" between "hardware devices" without physically doing it. I guess that makes me lazy. ;) Thanks, Ilian Tag: NetShareAdd() In Kernel Mode Tag: 60727
  - 8
    - Do I hit the limit of ATA_PASS_THROUGH and need to write my driver Hi there, I did successfully pass several ATA commands to HDD which include IDENTIFY DEVICE, SEEK all the SMART commands. I can read one sector with READ SECTORS command successfully, but I would get error if I read more than one sector. Also all the write commands fail. Now my question is is this the limitation posed by windows atapi driver? Or there is something wrong on my code? Second question, if I have to write my own driver that allows me to pass all the ATA commands to HDD, can I just write a miniport driver? What would be a good starting point?(What I am trying to achive here is to write a ATA/SATA testing application. I really would like to avoid writing my driver if possible.) Thanks much in advance for any advice you can give! Tag: NetShareAdd() In Kernel Mode Tag: 60722
  - 9
    - should I queue IRPs in a filter driver Hi, I have a filter driver layered above the disk class driver. This filter driver filters all IRPs to a particular hard drive. I have a kernal driver. When the driver needs to start some disk operation, it needs to stop any IRPs to the hard drive (holding the IRPs). Although the kernel drive only needs about 100millisecond to finish the operation, after tells the filter driver to hold any IRPs, the process could be preemptied and could take longer time for the kernel driver to finish the operation and infom the filter driver to allow incoming IRPs to pass down the disk class driver (terminate the holding). I currently tested a simple logic: whenever the kernel driver wants to do an operation, it singals an event in the filter driver and wait for any pending IRPs to finish, and whenever it has done, it resets the event in non-signal state. In the filter driver, before pass down any IRPs to the disk class driver, it waits for the event object being in non-signaled status. Testing on XP SP2 works normal with hard drive busy (continuing run chkdsk application and copy a huge file (half G)). My question is: 1) should I use the current implementation? 2) If I implement a custom queuing for the holding IRPs and when the kernel driver has finished operation, flash the custom-queued IRPs to the lower level driver. will this give much improvement on the overall system performance? 3) is there a better solution? Thanks Robert -- Robert Tag: NetShareAdd() In Kernel Mode Tag: 60718
  - 10
    - Print Monitor and MS Word Hi all, At my place of work, we decided to monitor our print servers and log details (number of pages and copies, job size, user, computer, etc.) of every job sent to the print server. We've successfully written an application that runs on each PC and constantly monitors the print spooler for new print jobs. Everything seemed okay until we noticed that Word (all the versions we tried) would only come up with one (1) copy each time a job was sent to the printer even if the number of copies exceeded one! We turned off Background Printing, but that didn't help. This isn't very good as our reporting can no longer be seen as accurate. If anyone has got ideas on monitoring the print spooler and getting the right number of print job copies from MS Word, I'd be glad to hear it. Thanks in advance. Please not that all other applications work perfectly. PBK Tag: NetShareAdd() In Kernel Mode Tag: 60714
  - 11
    - printer driver settings Hi I've a little problem to understand what DrvConvertDevMode, DrvDocumentPropertySheets and DrvDevicePropertySheets have to do. So lets start with the question about DrvConvertDevMode. If you get the parameter CDM_DRIVER_DEFAULT, what does this mean? You have to return the default values. Are the default values the "manufacturer default values", so fixed values, that I can specify, or is this the values, that someone set, by configuring the printer? (so the default settings for this machine, the all users settings?). Next question, about DrvDocumentPropertySheets... what's the "internal DEVMODE structure" ? Is this the default structure for this user? Or for the calling application? Or are this just the current settings for the current process? Do I have to store them somewhere? Why? And a more general question... who is responsible for storing the systemwide default settings? Is this my driver? Is the "internal DEVMODE structure" what represents those settings? And the last question: I always thought, that this is the way it has to go: 1) the application sets the current DEVMODEW structure by calling DrvDocumentPropertySheets with DM_IN_BUFFER 2) the application lets the driver to show the propertypages by calling DrvDocumentPropertySheets with other parameters and 3) the application reads the changed DEVMODEW structure by calling DrvDocumentPropertySheets with DM_OUT_BUFFER ... but then I saw the line 855 in docprop.c (msplot sample of the ddk 3790) -> pPI->pPlotDMOut = (PPLOTDEVMODE)pDPHdr->pdmOut; ... it stores a pdmOut Pointer... and when applying changes, it directly stores the data into this buffer... but I never saw this documented... can someone explain me how this works? thanks a lot MR - Rudolf Meier Tag: NetShareAdd() In Kernel Mode Tag: 60713
  - 12
    - Debug Language monitor Hi, I made my own language monitor. I put some DebugBreak in my code to debug my monitor. When I print with Microsoft Word, The process stop well at my breakpoint, but I try to make a test application and it seems that my language monitor is not loaded by the spooler because the process don't stop. My code is like that: OpenPrinter StartDocPrinter StartPagePrinter WritePrinter EndPagePrinter EndDocPrinter ClosePrinter. What's happen ? Tag: NetShareAdd() In Kernel Mode Tag: 60709
  - 13
    - How to Port Inline Assembly code to AMD64 Hi, Can anyone tell me How to port the inline assembly code to AMD64?? I have a 32-bit C++ Library where inline assembly code has been used. On MSDN I have found that Intrinsic functions are to be used. So, can anyone help me How to change simple inline assembly code using intrinsic functions. Can I use the same code(with intrinsic functions )on 32-bit machine too.?? If not then How can I have the same code base with inline assembly code which can run on 32-bit as well as on AMD64. thanx manoj Tag: NetShareAdd() In Kernel Mode Tag: 60708
  - 14
    - Install USB filter driver? Hi friends! I'm a newbie to driver development and I have a rather simple question for you I guess. I want to make a USB filter that just log what device is atached to the port. I have compiled the files that came with WINDDK in the folder src\wdm\usb\filter. My question is: How do I install the driver? Do I need to define a .INF file? If I have to define a .INF file what should it contain if I don't have a specific device? Tag: NetShareAdd() In Kernel Mode Tag: 60704
  - 15
    - relation of SRBs and StreamClassStreamNotification function Hi all, In my pc camera driver, there must be a SRB_READ_DATA command function, such as "VideoReadData" named, to receive images captured from digital camera into SRB data buffer. This will make a pc camera preview function on PC. At VideoReadData function, I use the ExInterlockedInsertTailList API function to queue each incoming SRB. But I find that it must be after calling StreamClassStreamNotification, a new SRB is still passed into VideoReadData function. This will make SRB queue nonsense because there is only one SRB in the queue at a time. Is there any method or setting to queue more incoming SRBs at a time? Sample code as followings, typedef struct { LIST_ENTRY ListEntry; PHW_STREAM_REQUEST_BLOCK pSrb; ULONGLONG FrameNumber; } *P_SRB_EXTENSION; typedef struct { LIST_ENTRY PendingIoList; KSPIN_LOCK PendingIoListSpin; LIST_ENTRY CompletedReadSrbList; KSPIN_LOCK DispatchSpinLock; }*P_DEVICE_EXTENSION; int VideoReadData(PHW_STREAM_REQUEST_BLOCK pSrb) { P_DEVICE_EXTENSION pDevExt = (PS_PA_DEVICE_EXTENSION) pSrb->HwDeviceExtension; P_SRB_EXTENSION pSrbEx = (PS_PA_SRB_EXTENSION)pSrb->SRBExtension; ExInterlockedInsertTailList( &(pDevExt->PendingIoList), &(pSrbEx->ListEntry), &pDevExt->PendingIoListSpin); { //actions to fill in SRB data buffer ... ... ... } StreamNotification(pSrb,StreamRequestComplete); return 0; } Regards, Allen Tag: NetShareAdd() In Kernel Mode Tag: 60701
  - 16
    - WDM to WinCE porting Hi All, I have to port a WDM video capture driver to WinCE ...As you know WDM has got a stream class driver which will communicate to the undrlying miniport driver like tuner,decoder and crossbar...the problem i am facing is that WinCE doesnt have a video stream class driver and architectuers are also completely different ..here no irp's ,no dpc's ,even most of the API's used in WinCE is obsolete in WDM ...Is it advisable to try to make my own device specific IOCTL's,since i cannot go for the WDM specified IOCTL's ....or should i contact the chip manufacturer to get those IOCTL's...does anyone have any previous experience of porting WDM to WinCE....... i am at complete loss ......Any sort of useful suggestions higly appreciated ...dont tell me to ask in Platbuilder group ..i have tried several times but not much i got from there.. Best Regards Soorya Tag: NetShareAdd() In Kernel Mode Tag: 60698
  - 17
    - problem with 2 device objects Iam writing a serial port filter driver.I have 2 device objects,the extra device object is to track the IOCTLS from user mode application (as given in DDK docs) and can get the data from application. I stored the data from app in a global variable and tried to access it in my driver dispatch routines.But ended up getting DRIVER_IRQL_NOT_LESS_OR_EQUAL error.I tried by declaring the global variable in DEVICE EXTENSION,but then the variable data is not getting updated. Can anyone point me in right direction? Thanks. -Robert Tag: NetShareAdd() In Kernel Mode Tag: 60696
  - 18
    - System failed to go to hibernate with device support "USB select suspend function ". All, I have implement USB select suspend function for my USB camera. When our camera goes in to suspend on some notebook, the XP system will hang on "Prepare to Hibernae..." . In my minidriver side, I just can not get any of IRPs about change the power state, and I just can not get chance to cancel the IOCTL_INTERNAL_USB_SUBMIT_IDLE_NOTIFICATION irp. And system just failed to hibernate. My question: Before XP system goes into suspend, it will try to cancel the pending IRPs, but why the system failed to cancel the IDLE irp? Does anybody have the same problem to support USB select suspend function? Thanks. Tag: NetShareAdd() In Kernel Mode Tag: 60695
  - 19
    - Serial communication over ethernet Hello, I am trying to emulate Com Port using my NDIS driver and I don't how to proceed. Do I have to get a Virtual Com port, to write a filter driver between serial driver and my NDIS driver ? Regards Claire Bouvet Tag: NetShareAdd() In Kernel Mode Tag: 60694
  - 20
    - User Mode Video Capture Device, is it possible ? Hi ! I would like to know if it is possible to create a simulation of a video capture device in user-mode ? If not, how to make communicating a kernel-mode (TestCap like) capture driver with user-mode, win32 apps. ? My problem : Windows Media Encoder takes only files or Devices as sources for encoding. I have a multicast MPEG2 stream over a LAN. I would like to capture IP MPEG2 stream, decode it and send for encoding to a Windows Media Encoder... Have you any better idea than Driver Development ? Thanks in advance !!! Tag: NetShareAdd() In Kernel Mode Tag: 60692
  - 21
    - How to print strikeout line in EXCEL 2003. In my printer driver, strikeout line is printed in WORD 2003. But strikeout line is not printed correcltly in EXCEL 2003 with the same IFIMETRICS. (strikeout line is printed too lower) condition : device font - send the Font metrics to the printer. excel Printing process : DrvQueryFontData -> DrvTextOut -> DrvBitBlt(actually draw the strikeout line) Same problem occured though I changed the fwdStrikeoutPosition of IFIMETRICS structure. So I think there is the different method to print strikeout lien between WORD and EXCEL. If you know, let me know.. Tag: NetShareAdd() In Kernel Mode Tag: 60690
  - 22
    - Pnpdtest fails USB device with verifier low-resource simulation I'm working on a driver for a USB device based on the Cypress FX2 chip for WinXP Pro. The driver is based largely on the bulkusb example in the DDK (W2k3 version). In the course of testing, I turned on Driver Verifier not only for my (function) driver, but for the bus driver (usbhub.sys) (maybe that was my first mistake...). When running the pnpdtest.exe stress test option, with low-resource simulation turned on, I get a lot of WDM driver errors, code-coverage breakpoints, and even bug checks (0xC9, code 0x21E) in usbhub.sys (but none in my driver). Call this Case 1. If verifier is OFF for usbhub.sys, the only problem is that at some point my driver will fail, for example, in DriverEntry (cannot allocate memory to store the registry string), and pnpdtest will try in vain to connect. But no bug checks. After the test is terminated, the device can be unplugged and replugged, and things start up agin ok. Call this Case 2. If low-resource simulation is off, everything is perfect, even if usbhub.sys is verified too. Call this Case 3. Any ideas what is going on? Do I need to worry about this, or can I just turn off the extra verifier settings (like Case 3) and proceed? Thanks in advance! A sample debug session output for case 1 follows (Tecusb.SYS is my driver): ---------------------------------------------------------------------- Tecusb.SYS: exit Tecusb_ConfigureDevice (0) PNPFILTR: Completing Start request with status == 0x2 PDO = 0x82f2b648 PNPFILTR: Received IRP_MN_QUERY_PNP_DEVICE_STATE for stack with PDO 0x82f2b648 PNPFILTR: Completing IRP_MN_QUERY_PNP_DEVICE_STATE for PDO 0x82f2b648 with status 0x0 and information 0x0 PNPFILTR: Passing down unhandled POWER IRP - minor function = 0xff PNPFILTR: Passing down unhandled PNP IRP - minor function = 0xff PNPFILTR: Received IRP_MN_QUERY_REMOVE_DEVICE for stack with PDO 0x82f2b648 PNPFILTR: FilterQueryRemove returning 0x4 for stack with PDO 0x82f2b648 PNPFILTR: Received IRP_MN_REMOVE_DEVICE for stack with PDO 0x82f2b648 'xMP.SYS: port[1] disable (1) 1005 PNPFILTR: FilterRemove returning 0x4 for stack with PDO 0x82f2b648 USBH: Code coverage trap d:\xpsprtm\drivers\wdm\usb\driver\hub.pnp\usbhub.c line: 6095 Break instruction exception - code 80000003 (first chance) nt!DbgBreakPoint: 80aba260 cc int 3 kd> ******************************************************************************* * * This is the string you add to your checkin description * Driver Verifier: Enabled for tecsa.sys on Build 2600 XPKRxPSwxwFS0kpto2QjwD ******************************************************************************* \Driver\TecusbSA running with DDK+ enabled PNPFILTR: Received IRP_MN_START_DEVICE for stack with PDO 0x82f2b648 'xMP.SYS: port[1] reset (1) 1101 'xMP.SYS: port[1] reset (3) 1005 'xMP.SYS: port[1] reset (4) 1005 USBHUB.SYS: 'port 1 failed to reset --> retry USBHUB.SYS: 'device still present -- retry reset 'xMP.SYS: port[1] reset (1) 1101 {snip} USBHUB.SYS: '-->device removed during reset USBHUB.SYS: 'Warning: device/port reset failed USBHUB: Warning ************************************************************** USB device failed first reset attempt in USBH_RestoreDevice ****************************************************************************** 'xMP.SYS: port[1] reset (1) 1101 'xMP.SYS: port[1] reset (3) 1005 {snip} 'xMP.SYS: port[1] reset (4) 1005 USBHUB.SYS: 'port 1 failed to reset --> retry USBHUB: Warning ************************************************************** Port RESET timed out --> this is bad ****************************************************************************** USBHUB.SYS: 'Warning: device/port reset failed 'xMP.SYS: port[1] reset (1) 1101 {snip} USBHUB.SYS: 'Warning: device/port reset failed USBHUB.SYS: 'Warning: device/port restore failed PNPFILTR: Completing Start request with status == 0xc000009a PDO = 0x82f2b648 PNPFILTR: Received IRP_MN_REMOVE_DEVICE for stack with PDO 0x82f2b648 PNPFILTR: FilterRemove returning 0x4 for stack with PDO 0x82f2b648 *********************************************************************** * THIS VALIDATION BUG IS FATAL AND WILL CAUSE THE VERIFIER TO HALT * * WINDOWS (BUGCHECK) WHEN THE MACHINE IS NOT UNDER A KERNEL DEBUGGER! * *********************************************************************** WDM DRIVER ERROR: [usbhub.sys @ 0xF73A593E] An IRP dispatch handler has not properly deleted it's device object upon receiving a remove IRP. DeviceObject = 82F2B648 - Dispatch = F73A593E - Irp = 83768F48 IRP_MJ_PNP.IRP_MN_REMOVE_DEVICE - [ DevObj=00000000, FileObject=00000000, Parameters=00000000 00000000 00000000 00000000 ] http://www.microsoft.com/hwdq/bc/default.asp?os=5.1.2600&major=0xc9&minor=0x21e&lang=0x9 -- C Gregory Tecmag, Inc. Tag: NetShareAdd() In Kernel Mode Tag: 60679
  - 23
    - PDISK_WRITE_CACHE_STATE Hi, Why ? PDISK_WRITE_CACHE_STATE is in only wxp folder. Can I use PDISK_WRITE_CACHE_STATE on W2003(x64) ? -- ishikawa Tag: NetShareAdd() In Kernel Mode Tag: 60678
  - 24
    - Getting float values for mouse cursor position Hi, I use the windows mouse pointer position to control the position of an object in my own application. I use GetCursorPos to get the position of the pointer on the screen so I get integer values between 0 and the screen resolution. For a resolution of 1600x1200, I can only get 1600 possible values for x, which is not sufficient for my application. I'm wondering if there is any way to get subpixels values, i.e. Is-it possible to get true float values for the mouse pointer position? (By reducing the mouse sensitivity to the minimum, it's possible to move the mouse a few millimeters before moving by one pixel) Another solution would be to get raw data from the mouse but I'm looking for an easier way to do the trick. I also want to try different input devices so I prefer to avoid this solution. Sincerely. Géry Casiez Tag: NetShareAdd() In Kernel Mode Tag: 60671
  - 25
    - Enabling and disabling COMM port FIFOs Hello, Is it possible to control a comm port FIFO (enable/disable) without using the registry. In our application, FIFO control must be immediate. Windows 9X, NT, 2000, XP. Software must integrate with Visual C/C++ 6.0. I see no FIFO IOCTL commands to the kernel driver. If so, what is involved? New device driver? Does one exist? Thanks, Jeff Mokhtar Freescale Semiconductor Tag: NetShareAdd() In Kernel Mode Tag: 60670
- Next
  - 1
    - minidriver for HIDClass Hi. I'm trying to make a virtual USB HID Keyboard through HIDClass. I'm working out from Walter Oneys HIDFAKE minidriver example. The thing I'm trying to make work is installing the driver, so windows register it as a HID usb keyboard. When the PNP dispatch function in the minidriver gets called, and asks for BusQueryDeviceID, i return USB\\VID_045E&PID_000B. My .inf file looks as follows (the important bits presentet only): ; Fake HID Keyboard [Version] Signature=$Windows NT$ Class=HIDClass ClassGuid={745A17A0-74D3-11D0-B6FE-00A0C90F57DA} DriverVer=03/17/2005,1.000 CatalogFile=DummyCat.cat Provider=Test ;------------------------------------------------------------------------------ ; Standard INF sections ;------------------------------------------------------------------------------ [Manufacturer] %MFGNAME%=DeviceList [DestinationDirs] DefaultDestDir=10,System32\Drivers [SourceDisksFiles] hidfake.sys=1,objchk~1\i386, wdmstub.sys=1,..\..\..\Append~1\newstub\objchk~1\i386, generic.sys=1,..\..\..\generic\objchk~1\i386, generic.sys=1 [SourceDisksNames] 1=%INSTDISK%,,, [DeviceList] %DESCRIPTION%=DriverInstall,USB\VID_045E&PID_000B,HID_DEVICE_SYSTEM_KEYBOARD ;------------------------------------------------------------------------------ ; Windows 2000+ Sections ;------------------------------------------------------------------------------ [DriverInstall.ntx86] CopyFiles=DriverCopyFiles [DriverCopyFiles] hidfake.sys,,,2 generic.sys,,,2 [DriverInstall.ntx86.Services] AddService=FakeKeyboard,2,DriverService [DriverService] ServiceType=1 StartType=3 ErrorControl=1 ServiceBinary=%10%\system32\drivers\hidfake.sys ... If I try to install the driver through the hardware wizard, it tells me that the the inf file contains no information about my hardware. I know it's because of the ClassGuid, but howcome? And I know I'm doing something else wrong as well.. I would like the kbhid.sys to work as the client hid driver(windows standard hid keyboard driver), and I have this driver working as the minidriver alright. How do I accomplish to do that? (I of course use a standard keyboard ReportDescriptor, if you might wonder about that) Thanks in advance! /Kim P. Tag: NetShareAdd() In Kernel Mode Tag: 60661
  - 2
    - Automating driver instalation I have driver files with .INF file under some folder and I'd like to install it on the OS using MFC++ (win32) What C++ functions should I use? Appreciate help. Eric Tag: NetShareAdd() In Kernel Mode Tag: 60654
  - 3
    - Question about plug and play drivers Hi, When I install for example NDIS intermediate driver for debugging purposes, when I need exchange it for new build, uninstalling and installing again is not sufficient. I must uninstall it, restart machine, and install driver again. It seems that once driver is loaded it remains in memory (or some resources reamins) and unloading needs restart. I think that this behaviour is related to plug-and-play feature in W2K and up, but W2K are plug-and-play (or not absolutely ? ) ? Can be driver 100% unloaded without restarting machine ? Thanks, Peter Tag: NetShareAdd() In Kernel Mode Tag: 60652
  - 4
    - Best way to acess to the parallel port Hi! First,let me explain the situation : I have a special device that is connected to the parallel port(Using ECP or EPP) and I need to communicate with,use DMA(PC to the device) and IRQ under Windows 2000/XP. For the moment, I have successfully used some I/O drivers to access directly to the port(PortTalk,DLPortIO...),but it seems to be in a dirty way(and I am not sure that I can use DMA),as these drivers are using some undocumented functions to LOCK/UNLOCK ressources,overriding the parport.sys driver. For the moment,I am quite confused,because I don't know what is the best way to access to the parallel port. Must I write an UpperFilter driver for parport.sys that handle some custom IOCTLs? Must I write a parallel port class driver(Like parclass)? Or,can I just lock ressources when I use the application,as it is going to be the only one that access to the parallel port,when loaded? I also heard that if It's also possible to remove parport.sys and to replace it with a "home made" driver,but I am not interested by this case cause I want to keep the parallel port working normally with other applications. Thank you in advance and sorry for my bad english. Nassim. Tag: NetShareAdd() In Kernel Mode Tag: 60650
  - 5
    - USB Driver problem with PTE (bugcheck 3f) We have deployed a wdm usb printer driver to a customer site. After 22-26 hours of idling, the application crashes, leaving a dump file naming the driver as the culprit and with a bugcheck id of 3f. This means that the system has run out of PTEs(page table entries) and is unable to proceed. What is puzzling is that the driver uses only allocations from the nonpaged pool. Running pooltag on a local test system (not the customer system) shows, in the nonpaged pool, no memory leaks from the driver. There is a possibility that the driver, over time, fragments the nonpaged pool, but it doesn't seem right that the system PTEs should be affected. Do, in fact, allocations from the nonpaged pool affect PTEs? If not, what other scenarios seem possible? Besides pooltag.exe and DriverVerifier, are there other programs that might be useful in diagnosing this problem? Thanks RH Tag: NetShareAdd() In Kernel Mode Tag: 60648
  - 6
    - How to use DeviceIoControl to deliver the user mode data to give the kernel?? Hi All I have use DeviceIoControl to send user mode data to the kernel, but it wiil crash down when I copy data to Kernal dma buffer, Does anyone can help this ?? any comment or sample code is wellcome Thanks a lot Ps: I define my CTL_CODE like this #define IOCTL_SEND_DATA CTL_CODE(MY_TYPE, 0x900, METHOD_IN_DIRECT, FILE_ANY_ACCES) and send data like this DeviceIoControl(hdevice, IOCTL_SEND_DATA, MyParam, MY_LEN, NULL, NULL, &dwRet, NULL); Myparam is allocate by (MY_PARAM*) malloc(MY_LEN); typedef struct _MY_PARAM { ULONG Channel; ULONG DataLen; ULONG Message[1]; } MY_PARAM #define MY_LEN (sizeof(MY_PARAM)+1024*sizeof(unsigned char)) My Driver code is write as this KeAcquireSpinLock(&pLDI->DmaSpinLock, &oldIrql); pMPG = (MY_PARAM*) pIrp->AssociatedIrp.SystemBuffer; RtlCopyMemory((PULONG) pLDI->DMABuffers[(pMPG->DmaChannel)].Virtual,pMPG->Message,pMPG->DataLen);---->crash down here!!!! KeReleaseSpinLock(&pLDI->DmaSpinLock, oldIrql); Thanks for you read this letter,Sorry for my poor english^^""" Tag: NetShareAdd() In Kernel Mode Tag: 60639
  - 7
    - a TOOL to dump memory.dmp into text file ? Hi Experts: Is there a tool which can "translate" all information saved in a memory dump file (a kernel memory dump, or a complete memory dump) into a plain text file? I'm looking at using dumpchk, kd or windbg. But not sure how to get it done. Thanks for your info. Polaris Tag: NetShareAdd() In Kernel Mode Tag: 60631
  - 8
    - Force Win98SE to use of WRONG USB2 driver? Force Win98SE to use of WRONG USB2 driver? I bought a no-name USB2 card off EBAY. It came with win98SE drivers, but the driver locks up my system. It's a NEC chip, but there's no clue to the vendor or driver site. I found a driver from a different vendor. I can force 98SE to let me install the wrong driver and it works, Problem is that every time 98SE boots, it thinks it has a new USB card and wants to install drivers. Can I edit the registry to attach the card to the driver? How? Or maybe rewrite the .inf file to point to the driver that works and reinstall? How? Tutorial on .inf files? Thanks, mike -- Return address is VALID but some sites block emails with links. Delete this sig when replying. . Wanted, PCMCIA SCSI Card for HP m820 CDRW. FS 500MHz Tek DSOscilloscope TDS540 Make Offer Wanted, 12.1" LCD for Gateway Solo 5300. Samsung LT121SU-121 Bunch of stuff For Sale and Wanted at the link below. MAKE THE OBVIOUS CHANGES TO THE LINK ht<removethis>tp://www.geocities.com/SiliconValley/Monitor/4710/ Tag: NetShareAdd() In Kernel Mode Tag: 60628
  - 9
    - Using DDK with previous version of VC Ok, I read the release notes for the Win2k3 DDK, and it claims that DDK examples should not be compiled on a previous version of the compiler than what the DDK was written for. However it also says that for Win98/ME drivers there are cases where the driver MUST be compiled using VC6, because a later compiler simply will fail. Does this mean that in order to compile drivers at all you must use the version of the compiler that the DDK is written in? Can I build a driver for 2K or XP using VC6 and the Win2K3 DDK? TIA Tag: NetShareAdd() In Kernel Mode Tag: 60627
  - 10
    - WIN DDK for x64 build Hi, Is the DDK downloadable? I'm looking for a kit where I can generate "Windows Server 2003 Free x64 Build Environment" . Thanks, S. Evensen Tag: NetShareAdd() In Kernel Mode Tag: 60622
  - 11
    - Winlog screen displayed I need to know when the Winlogon screen is displayed. I want this as it is at this point that my app is going to know that all services are up and running. Winlogon Notification will only send an event after a user logs in and I need to know that we are ready to accept a user to log in. If a user is not going to login to this machine by using the Winlogon Notification I will never know that we are in a run state according to my app. The event before this is Startup and this is too early in the boot process for me to say we are ready to go. Do any of you know how I can tell that the logon screen is there? Is there a service that I can check that will start right about the time of the logon screen? I know that if the machine is set to auto logon a user then I will not get a logon screen but I can then use the Winlogon StartShell to know that we are ready to go. Thanks Bob Tag: NetShareAdd() In Kernel Mode Tag: 60620
  - 12
    - WM_DEVICECHANGE/DBT_DEVICEARRIVAL is so slo-o-ow WM_DEVICECHANGE (with DBT_DEVICEARRIVAL) works fine but is so slo-o-ow in CD/DVD-rom case. It is not unusual to wait about 10 seconds between injecting the tray and the moment apps finally recieves WM_DEVICECHANGE/DBT_DEVICEARRIVAL notification. Is there any way for user-mode app to get "earlier" notification about media insert/tray inject event? Many thanks! Igor. Tag: NetShareAdd() In Kernel Mode Tag: 60610
  - 13
    - SCSI_PASS_THROUGH_DIRECT and SCSI_PASS_THROUGH documentation is wr I used following links to extract information: SCSI_PASS_THROUGH_DIRECT http://msdn.microsoft.com/library/en-us/storage/ hh/storage/structs-scsibus_64c46eef-e5bc-4e81-a479-2bdbd93605e7.xml.asp SCSI_PASS_THROUGH http://msdn.microsoft.com/library/en-us/storage/ hh/storage/structs-scsibus_6d017ae1-d61d-49b8-bfaf-b6b15341732b.xml.asp Look at SCSI_IOCTL_DATA_IN description for DataIn parameter - funny, but in both cases description is different but should be always same. In my opinion should be SCSI_IOCTL_DATA_IN -Read data from the device. Is not it? Furthermore I looked into latest MSDN Library from January, 2005 but found even more funny things, for both IOCTL documentation saying that SCSI_IOCTL_DATA_IN is â??Write data to the deviceâ??:) Is this correct? Tag: NetShareAdd() In Kernel Mode Tag: 60601
  - 14
    - Inter-Driver Communication Does anyone have any ideas about how I can Send a IOCTL message from one driver to another video driver. I only have access to the code from the sending driver. Thanks in advance, Anders Tag: NetShareAdd() In Kernel Mode Tag: 60586
  - 15
    - Printer driver on Serial port I'm using the Language Monitor in the DDK. My problem is when I install the printer on a serial port (COM), I can't use that port with any other applications. Is there a way to modifiy the Language Monitor to free the port when there are no jobs printing? -- Mario Tag: NetShareAdd() In Kernel Mode Tag: 60573
  - 16
    - Does my driver cause "Access Violation in svchost.exe" ? Hi, I have an Ndis driver for Windows XP. It seems to work fine. But the Windbg might catch an "access violation in svchost.exe" error during the XP shutdown every thundreds times. Is the error caused by my Ndis driver? Or, it's a bug of svchost.exe? Below lists the windbg messages: ===================================================================== *** An Access Violation occurred in C:\WINDOWS\System32\svchost.exe -k netsvcs: The instruction at 00650066 tried to read from an invalid address, 00650066 *** enter .exr 0189F9DC for the exception record *** enter .cxr 0189F9F8 for the context *** then kb to get the faulting stack Break instruction exception - code 80000003 (first chance) *** WARNING: symbols timestamp is wrong 0x41109494 0x4060f0f2 for ntdll.dll ntdll!DbgSsHandleKmApiMsg+0x14e: 001b:7c921230 cc int 3 kd> Tag: NetShareAdd() In Kernel Mode Tag: 60571
  - 17
    - Problems unloading a driver Hi, I am trying to write an unloadable driver, to achieve that I have created a minimal, presumably unloadable driver, Loading and initializing the driver succeeds BUT unloading ( using 'ControlService(SERVICE_CONTROL_STOP)' ) fails with the following error: "The requested control is not valid for this service.", What may cause such an error? I have added the required DeviceCreate and DeviceClose ICTL Handlers but it had no effectâ?¦ // The CreateClose IOCTL I have added... NTSTATUS DispatchCreateClose(IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp) { Irp->IoStatus.Status = STATUS_SUCCESS; Irp->IoStatus.Information=0; IoCompleteRequest(Irp, IO_NO_INCREMENT); return STATUS_SUCCESS; } Any help, pointers or samples would be appreciatedâ?¦ Following is the short code with which I am experiancing the problem: The Driver: ********** #pragma code_seg("INIT") // This handler is NEVER called... VOID __stdcall Unload(IN PDRIVER_OBJECT DriverObject) { UNICODE_STRING uszDeviceString; DbgPrint("Simple C++ Driver - Unload.\n"); IoDeleteDevice(DriverObject->DeviceObject); RtlInitUnicodeString(&uszDeviceString, L"\\DosDevices\\ProcDrv"); IoDeleteSymbolicLink(&uszDeviceString); TerminateCppRunTime(); } NTSTATUS __stdcall DriverEntry(IN PDRIVER_OBJECT DriverObject , IN PUNICODE_STRING RegistryPath) { DbgPrint("Simple C++ Driver - DriverEntry\nCompiled at " __TIME__ " on " __DATE__ "\n"); NTSTATUS Status = InitializeCppRunTime(); if (STATUS_SUCCESS != Status) goto ErrorExit; UNICODE_STRING uszDriverString, uszDeviceString; RtlInitUnicodeString(&uszDriverString, L"\\Device\\ProcDrv"); RtlInitUnicodeString(&uszDeviceString, L"\\DosDevices\\ProcDrv"); DbgPrint("C++ runtime was initialized successfuly...\n"); PDEVICE_OBJECT pDeviceObject = NULL; Status = IoCreateDevice(DriverObject, 0, &uszDriverString, FILE_DEVICE_UNKNOWN, 0, FALSE, &pDeviceObject); if (STATUS_SUCCESS != Status) goto ErrorExit; DbgPrint("Device created successfuly...\n"); Status = IoCreateSymbolicLink(&uszDeviceString, &uszDriverString); if(Status != STATUS_SUCCESS) { Unload(DriverObject); goto ErrorExit; } DbgPrint("Link created successfuly...\n"); DriverObject->DriverUnload = Unload; goto SafeExit; ErrorExit: TerminateCppRunTime(); SafeExit: DbgPrint("DriverEntry retruns 0x%.8x\n", Status); return Status; } #pragma code_seg() The driver Loading/Unloading routine ******************************* BOOL WaitForState(SC_HANDLE hDriver, DWORD dwDesiredState, SERVICE_STATUS* pss) { while (1) { if(FALSE == ::QueryServiceStatus(hDriver, pss)) return FALSE; // If the driver reaches the desired state if (pss->dwCurrentState == dwDesiredState) break; DWORD dwWaitHint = pss->dwWaitHint / 10; if (dwWaitHint < 1000) dwWaitHint = 1000; // At most once a second if (dwWaitHint > 10000) dwWaitHint = 10000; // At least every 10 seconds ::Sleep(dwWaitHint); } // while return TRUE; } int _tmain(int argc, _TCHAR* argv[]) { // Start the driver SC_HANDLE hSCM = ::OpenSCManager(NULL, NULL, SC_MANAGER_ALL_ACCESS); SC_HANDLE hDriver= ::CreateService(hSCM, "ProcDrv", "ProcDrv", SERVICE_ALL_ACCESS, SERVICE_KERNEL_DRIVER, SERVICE_DEMAND_START, SERVICE_ERROR_NORMAL, argv[1], NULL, NULL, NULL, NULL, NULL); if(0 == hDriver && (::GetLastError() == ERROR_SERVICE_EXISTS || ::GetLastError() == ERROR_SERVICE_MARKED_FOR_DELETE) && (0 == (hDriver = ::OpenService(hSCM, "ProcDrv", SERVICE_ALL_ACCESS)))) return 0; SERVICE_STATUS serviceStatus = { 0 }; BOOL bResult = ::StartService(hDriver, 0, NULL); if (bResult) bResult = WaitForState(hDriver, SERVICE_RUNNING, &serviceStatus); else bResult = (::GetLastError() == ERROR_SERVICE_ALREADY_RUNNING); if (!bResult) { ::DeleteService(hDriver); ::CloseServiceHandle(hDriver); } else { // Stop the driver, returns "The requested control is not valid for this service." if(TRUE == (bResult = ::ControlService(hDriver, SERVICE_CONTROL_STOP, &serviceStatus))) bResult = WaitForState(hDriver, SERVICE_STOPPED, &serviceStatus); ::DeleteService(hDriver); ::CloseServiceHandle(hDriver); } ::CloseServiceHandle(hSCM); return 0; } Nadav. http://www.sophin.com Tag: NetShareAdd() In Kernel Mode Tag: 60569
  - 18
    - Isoch Read/Write with loopback (newbie) I am developing a driver for ISP1582/1583 for very high speed application ( ~200M). I build my driver based on isousb from WinDDK 2k3. My platform is WinXP Sp2. Now, the PC recognizes my board, but when I try using the testing application from isousb to read/write, it does not work. It seems that the testing application from DDK uses the name PIPE04 and PIPE05 directly to open the handle to the pipe. Is there any other way to overcome this problem ? I tried using the simple way, which is open a handle to the device using GUID with CreateFile(), then using ReadFile() and WriteFile() but that fails as well, GetLastError() return 22 - ERROR_BAD_COMMAND [The device does not recognize the command.] I will have to write a loopback mode application as well. The loopback will only depend on user-mode application. Am I right ? Pls enlighten me on this part. Thanks a lot ! Tag: NetShareAdd() In Kernel Mode Tag: 60563
  - 19
    - Isoch Read/Write with loopback (newbie) I am developing a driver for ISP1582/1583 for very high speed application ( ~200M). I build my driver based on isousb from WinDDK 2k3. My platform is WinXP Sp2. Now, the PC recognizes my board, but when I try using the testing application from isousb to read/write, it does not work. It seems that the testing application from DDK uses the name PIPE04 and PIPE05 directly to open the handle to the pipe. Is there any other way to overcome this problem ? I tried using the simple way, which is open a handle to the device using GUID with CreateFile(), then using ReadFile() and WriteFile() but that fails as well, GetLastError() return 22 - ERROR_BAD_COMMAND [The device does not recognize the command.] I will have to write a loopback mode application as well. The loopback will only depend on user-mode application. Am I right ? Pls enlighten me on this part. Thanks a lot ! Tag: NetShareAdd() In Kernel Mode Tag: 60562
  - 20
    - Serenum loads in Win XP, bu not on 2K; same inf !!! Hi, This is the snippet of .inf file. ... [ComPort.XXX.NT] AddReg=ComPort.XXX.AddReg CopyFiles=ComPort.XXX.NT.Copy Include=msports.inf Needs=SerialEnumerator.NT [ComPort.XXX.AddReg] HKR,,PortSubClass,1,01 [ComPort.XXX.NT.Copy] serxxx.sys [ComPort.XXX.NT.HW.AddReg] HKR,,"UpperFilters",0x00010000,"serenum" [ComPort.XXX.NT.HW] AddReg=ComPort.XXX.NT.HW.AddReg ... The same inf file loads serenum as upperfilter in Windows XP, but not on Windows 2000. Any ideas on what could be wrong? Appreciate any help. Thanks in advance. Ravi... Tag: NetShareAdd() In Kernel Mode Tag: 60560
  - 21
    - Can i create Multiple VLANs using MUX Hi, Can I create Multiple VLANs using the MUX Sample Driver. Recently very strange behaviuor is occuring. I installed and uninstalled the MUX 2-3 times and they are appearing as MUX Sample Driver # 2 , 3 , 4 , 5 etc. But I can actually set the OID_GEN_VLAN_ID in only 1 of them using NDISUIO. Pls Explain ?? What I meas is that why doesnt NDISUIO protocol binds to all Virtual Miniport Drivers(IM) but only one of them ?? Can I enumerate all the Virtual Network Adapters that the MUX creates ? TIA Regards Tarun Tag: NetShareAdd() In Kernel Mode Tag: 60549
  - 22
    - setting "custom" dvd book type I am curious if anybody can help me with the following info: 1) what CDB/SCSI command is to be used to set DVD book type? 2) how to determine whether this particular dvd-writer supports changing book type? Many thanks! Igor. Tag: NetShareAdd() In Kernel Mode Tag: 60548
  - 23
    - Multiple monitor video What APIs are available to query and/or manipulate the multi-monitor support in WinXP? Specifically, I want to be able to determine if multiple screens are configured, and toggle on/off screens other than the primary. The second can be achieved through the UI by going into the Display Properties applet, choosing the settings tab, right clicking the second (or other) screen, choosing "Attached", then clicking OK. I'm hoping there's a straightforward way to do that simple action programmatically. Erik J Sawyer Appro Systems Tag: NetShareAdd() In Kernel Mode Tag: 60546
  - 24
    - How to detect mouse double click and simultaneous click Hi everyone, I would like to detect mouse double click and (almost) simultaneous click of two or more buttons in moufiltr. Do I need a timer for that or I can do it by detecting the bits in ButtonFlags in the same or consecutive MOUSE_INPUT_DATA? Thanks in advance. Liang Fu Tag: NetShareAdd() In Kernel Mode Tag: 60544
  - 25
    - Winsock 2 & Ethernet fragmentation Hi , I'm writing this code in VC using Winsock 2, the Ethernet frames I receive are fragmented to 1524 byte due to Ethernet limitations, my code is based on this simple TCP sniffer http://www.sol-biotech.com/code/Sockets/Main.cpp Is there any way I can instruct Winsock to assemble the frame before I'm sending it to the application layer, I want to avoid the overhead of reassembling the frames Thank you, Sharon.G Tag: NetShareAdd() In Kernel Mode Tag: 60542

Hello

In user mode, when you set sharing on a directory the NetShareAdd
function is called.
What function is called in kernel mode when you share a directory?

When ZwCreateFile is called due to directory access, is there any way
to know if the directory is shared?

Thanks

Top

Re: NetShareAdd() In Kernel Mode by Arkady

Arkady
Mon Mar 21 07:33:26 CST 2005

Nt(Zw)OpenDirectoryObject() and
Nt(Zw)QueryDirectoryObject will show you all drives including shared]

Arkady

"sharon sahar" <sharon.sahar@gmail.com> wrote in message
news:1111404698.827878.132090@f14g2000cwb.googlegroups.com...
> Hello
>
> In user mode, when you set sharing on a directory the NetShareAdd
> function is called.
> What function is called in kernel mode when you share a directory?
>
> When ZwCreateFile is called due to directory access, is there any way
> to know if the directory is shared?
>
> Thanks
>

Top