[OT] OpenProcess shows "Access Denied (5)" on some Processes,..

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Drivers
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Enumerate Child Device Hello All, We are writing a USB-Serial driver using WDF framework. We have completed the USB part i.e handling PnP and Power Management. My problem is i want OS to enumerate a child device probably as Serial device. I want the device manager to show virtual COM port device and USB device. I did the following to achieve this. After the completion of EvtDeviceD0Entry, i have added the following code to enumerate a child device (COM) in EvtDeviceRelationsQuery NTSTATUS EvtDeviceRelationsQuery (IN WDFDEVICE Device, IN DEVICE_RELATION_TYPE RelationType ) { // Initialize UNICODE device name RtlInitUnicodeString(&uniDeviceName, L"\\Device\\SerBus0"); DeviceInit = WdfPdoInitAllocate(Device); // USB device object if (DeviceInit == NULL) { DbgPrint ("WdfControlDeviceInitAllocate failed 0x%x\n", status); status = STATUS_INSUFFICIENT_RESOURCES; } // // Set exclusive to true so that not more than one app can talk to the // control device simultaneously. // WdfDeviceInitSetExclusive(DeviceInit, TRUE); WdfDeviceInitSetDeviceType(DeviceInit, FILE_DEVICE_UNKNOWN); WdfDeviceInitSetCharacteristics(DeviceInit, FILE_DEVICE_SECURE_OPEN, FALSE); // // Assign the device name // status = WdfDeviceInitAssignName(DeviceInit, &uniDeviceName); if (!NT_SUCCESS(status)) { DbgPrint ("WdfDeviceInitAssignName failed 0x%x\n", status); return status; } // // Initialize the attributes // WDF_OBJECT_ATTRIBUTES_INIT_CONTEXT_TYPE (&attributes,DEVICE_CONTEXT); // // Create the control device // status = WdfDeviceCreate(&DeviceInit, &attributes, &serbusdevice); if (!NT_SUCCESS(status)) { DbgPrint (WdfDeviceCreate failed 0x%x\n", status); return status; } status = WdfFdoAddStaticChild(Device, serbusdevice); if (!NT_SUCCESS(status)) { DbgPrint (WdfFdoAddStaticChild failed 0x%x\n", status); return status; } } In EvtDeviceAdd i added the following code after i get the device handle. busInfo.BusTypeGuid = GUID_CLASS_COMPORT; busInfo.LegacyBusType = PNPBus; busInfo.BusNumber = 0; WdfDeviceSetBusInformationForChildren(device, &busInfo); I followed the instructions at the following link. http://msdn2.microsoft.com/en-us/library/aa490110.aspx I dint have any luck in proceeding further. Cany anyone point me if im missing anything, so that windows could enumerate a child device. I want to provide a different INF file for second enumeration. Thank You, Regards, Sushma Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94121
  - 2
    - Installing Filter driver I am trying to install Filter driver using SetupAPI function as decribed in MSDN. Call SetupInstallFilesFromInfSection for the [upperfilter_inst] section. Call SetupInstallServicesFromInfSection for the [upperfilter_inst.Services] section. Call SetupInstallFromInfSection for the [upperfilter_inst] section, once for each class key it wants to register the upperfilt service for. But I see only registry is getting updated. The actual driver is not get bound to the adapters. How to do that? Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94120
  - 3
    - MiniportCheckForHangEx vs MiniportCHeckForHang Hi, I am writing an NDIS6 miniport driver. In WDK it is written on MiniportCheckForHangEx do that "If a miniport driver does not complete an OID request within two successive calls to MiniportCheckForHangEx, NDIS can call the driver's MiniportResetEx function." and on MiniportCheckForHang doc that: "If a NIC driver has no MiniportCheckForHang function and NDIS judges the driver unresponsive as, for example, when NDIS holds many pending sends and requests queued to the miniport driver for a time-out interval, NDIS calls the driver's MiniportReset function" 1. If I correctly understand the doc than MiniportCheckForHangEx in contrary to MiniportCheckForHang does not care about pending sends request only pending OIDS. I tested it by pending send requests forever and indeed MiniportReset was not called. Is that the expected behaviour or did I miss something? 2. What is the meaning of "NDIS can call the driver's MiniportResetEx?" are there times that it will not call it ? Thanks Miki Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94113
  - 4
    - Driver Signing Problem Hallo, For VISTA I have build a signed driver package with a "VeriSign Class 3 Code Signing 2000 CA" ID. Our Rule is using the same package for Windows XP. In Vista the installation is OK but in Windows XP I can see some errors in setupapi.log #E360 An unsigned or incorrectly signed file "c:\windows\inf\oem9.inf" for driver "XXX" will be installed (Policy=Ignore). Error 1168: What is not correct with my signing ? The result: class installer entrys (ICON, name) are not installed in registry and CoInstaller DLL is not running by the installation. When I break this signed package (insert a space into INF file) all is fine. elli Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94109
  - 5
    - Does anyone use regdmp.exe or objdir.exe? What would be the impact on you if we pulled regdmp.exe and objdir.exe from the WDK? Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94099
  - 6
    - Can the Media Center source be aquired? We are having a large problem developing a BDA driver. The source of this problem is that the documentation for writing a BDA driver explains what everything does, but not what actually happens in terms of successfully instancing a filter that will be used by Media Center. This makes debugging impossible as very little of our code actually runs before Media Center decides not to acknowledge our device. Is the source code for Media Center available under some license offered by Microsoft? Otherwise, does anyone have a method to successfully diagnose graph building and filter caps problems? Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94098
  - 7
    - Embedded authenticode signature Hi, I want to sign MyDriver.sys with an authenticode signature appended to the .sys file, just like a normal user mode DLL. The driver is for Server 2003 and Vista, x86 and x64. I realize this will have no effect on the install prompts etc. My question is, will the signature adversely affect the loading of the driver, assuming the checksum is OK? My concern is that the driver loader might be confused by the signature added to the .sys file. Thanks -- Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94085
  - 8
    - Help writing virtual webcam driver Hi guys, I'm a newcomer the device driver development discipline. I'm short my project requires me to write a virtual webcam driver - the driver should not interact with any real hardware instead the image input is actually coming from e.g. the network.. I really looking for some pointers - that might push me in the right direction.. I've been reading a bit the last two days and this is how far I've come: 1) I would like to use KMDF - (cannot be done in UMDF correct?). 2) It seems I need to develop a "Video Capture Device" using something called AvStream (Currently I'm not really sure what AvStream does). 3) Are there any good DDK samples that might give me a idea of how to continue. I've looked a bit at the AVSHwS and it seems promising. 4) I found that a webcam driver is classified as an UVC (USB video device class) - Is this the protocol I need to implement in my driver? I really hope you can help me, in answering my initial questions.. All ideas, thoughts are more than welcome :) -- // morten Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94080
  - 9
    - Problems in Vista with WiFi and Ndis (ndisuio.sys) Hello, I need help for Vista OS. I am updating a program to make connections to Wifi Networks so that it works in Vista. This program work with ndisuio.sys driver or any compatible driver based on NDISPROT sample protocol driver. For this case I stop the Wlansvc as I was doing in XP with the wzcsvc. It work without problems and Vista let me control the WiFi device. These drivers work fine in Vista and the devices I have probed work fine with them. I send these OID=B4s for make a connection: OID_802_11_INFRASTRUCTURE_MODE(0x0D010108) OID_802_11_AUTHENTICATION_MODE(0x0D010118) OID_802_11_ADD_KEY(0x0D01011D) (some times, if the mode needs it) OID_802_11_WEP_STATUS(0x0D01011B) OID_802_11_SSID(0x0D010102) OID_GEN_PORT_AUTHENTICATION_PARAMETERS(0x0001020F) They work well and they are shown by the program ndismon(PCAUSA) also when the system connects. The connection(association) with the AP is Ok and I send the neccesary security protocol (802.1X, WPA-PSK, WPA-PEAP) developed in my program and they work fine with the device and the AP. THE PROBLEM: Up to here, everything seems to work fine but the problem is with the TCP/IP and the new interface added in the system Vista. The new interface does not appear in the window "Network and Sharing Center" and the DHCP protocol does not work over it. The new interfce does not obtain IP address and it does not work although the association with the AP and the authorization and authentication with the WiFi device is Ok. I think that more actions are necessary in order to wake up the interface in the system Vista although I have not been able to find information on the matter. Any help about this issue would be very appreciated. Sorry for my bad English. Best regards, Frank Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94077
  - 10
    - About driver developing Hello, I'm new to driver authoring and want to know some simple question's answers. 1-WinDDK is enough to develop MS-based device drivers? 2-Do i need/have to know programming languages like c++? 3-Is WDK (or called WinDDK) avaible for download? Sorry for these basic questions but i need to know. Best regards... Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94071
  - 11
    - avstream avssamp example freeze system Hello. Using matlab+simulink (under mex setup VS2005) as a client application for capturing video from DDK sample avssamp totally freeze windows (Vista, XP). The mouse cursor doesn't move, nothing is move at all. At the same time Avssamp is fine when capturing with Amcap, and fine if matlab mex setup is VS2003.NET, also matlab is fine with vs2005 when captureing from webcamera... Tried using avsamp debug version with dbgPrintf+dbgview - i can't see any out message, system is freezed before any message occurs. Tried run with verifier ON, nothing! Could anybody advise how to debug this strange avssamp behaviour? Thank you. -Andrey Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94066
  - 12
    - SYS File Format Hello All, Where I can find information about the format of SYS file? What is the different from DLL PE file format? Thanks, Ronen Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94065
  - 13
    - winusb and WinUsb_ControlTransfer My USB device supports the default control pipe (only) and these requests are made using control transfers. In order to fetch the version from my device, the following vendor specific call is successful: WINUSB_INTERFACE_HANDLE hWinUsbIntf ; UCHAR ucaBuffer[256] ; DWORD dwXeptLen ; : : WINUSB_SETUP_PACKET Wsp = { 0xC3, 0x81, 0x80, 0, 255 } ; BOOL bRC = WinUsb_ControlTransfer ( hWinUsbIntf, Wsp, ucaBuffer, sizeof(ucaBuffer) - 1, &dwXeptLen, NULL ) ; In order to reset the LED on the device, I issue: WINUSB_SETUP_PACKET Wsp = { 0x40, 0x80, 0x40, 0, 1 } ; bRC = WinUsb_ControlTransfer ( hWinUsbIntf, Wsp, ucaBuffer, sizeof(ucaBuffer) - 1, &dwXeptLen, NULL ) ; The vendor specific SetLED fails and the translated GetLastError is "A device attached to the system is not functioning." Shouldn't I be able to write to the device via Winsys as well as read? Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94064
  - 14
    - KMDF: accessing PCI configuration space results in STATUS_NOT_SUPPORTED I try to access the PCI configuration space of my PCI hardware. I follow the WDK help topic "Accessing PCI Device Configuration Space". As a first step, I try to get a BusInterface, but this fails. I used two different styles (see code below), both result with status = STATUS_NOT_SUPPORTED. I can not see the difference between the PCIDRV example and my own device, so any help is welcome! J. Hoppe, PEAK System Technik GmbH ======= Try #1 (as in example "src/kmdf/pcidrv") : ================ xxxDeviceAdd() { ... ... status = WdfFdoQueryForInterface(Device, &GUID_BUS_INTERFACE_STANDARD, (PINTERFACE) & pDeviceContext->BusInterface, sizeof(BUS_INTERFACE_STANDARD), 1, // Version NULL); //InterfaceSpecificData .... } ======= Try #2 (as in other example / Knowledgebase) ================ // from C:\WinDDK\6000\src\general\pcidrv\sys\hw\nic_init.c NTSTATUS GetPCIBusInterfaceStandard( __in PDEVICE_OBJECT DeviceObject, __out PBUS_INTERFACE_STANDARD BusInterfaceStandard ) /*++ Routine Description: This routine gets the bus interface standard information from the PDO. Arguments: DeviceObject - Device object to query for this information. BusInterface - Supplies a pointer to the retrieved information. Return Value: NT status. --*/ { KEVENT event; NTSTATUS status; PIRP irp; IO_STATUS_BLOCK ioStatusBlock; PIO_STACK_LOCATION irpStack; PDEVICE_OBJECT targetObject; DiagMsg("GetPciBusInterfaceStandard entered."); PAGED_CODE(); KeInitializeEvent( &event, NotificationEvent, FALSE ); targetObject = IoGetAttachedDeviceReference( DeviceObject ); irp = IoBuildSynchronousFsdRequest( IRP_MJ_PNP, targetObject, NULL, 0, NULL, &event, &ioStatusBlock ); if (irp == NULL) { status = STATUS_INSUFFICIENT_RESOURCES; goto End; } irpStack = IoGetNextIrpStackLocation( irp ); irpStack->MinorFunction = IRP_MN_QUERY_INTERFACE; irpStack->Parameters.QueryInterface.InterfaceType = (LPGUID) &GUID_BUS_INTERFACE_STANDARD ; irpStack->Parameters.QueryInterface.Size = sizeof(BUS_INTERFACE_STANDARD); irpStack->Parameters.QueryInterface.Version = 1; irpStack->Parameters.QueryInterface.Interface = (PINTERFACE)BusInterfaceStandard; irpStack->Parameters.QueryInterface.InterfaceSpecificData = NULL; // // Initialize the status to error in case the bus driver does not // set it correctly. irp->IoStatus.Status = STATUS_NOT_SUPPORTED ; status = IoCallDriver( targetObject, irp ); if (status == STATUS_PENDING) { status = KeWaitForSingleObject( &event, Executive, KernelMode, FALSE, NULL); ASSERT(NT_SUCCESS(status)); status = ioStatusBlock.Status; } End: // Done with reference ObDereferenceObject( targetObject ); return status; } xxxDeviceAdd() { ... ... { PDEVICE_OBJECT devobj = WdfDeviceWdmGetDeviceObject(Device) ; status = GetPCIBusInterfaceStandard(devobj, & (pDeviceContext->BusInterface)) ; } .... } =============== end code examples ================= Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94059
  - 15
    - Debug IEEE 802.1X Does anyone seen this kind of problem before? On what case 802.1x supplicant will create port fail and error code is 13 as below. Good information for debugging 802.1x http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/wlansupp.mspx Environment: Hidden SSID/WPA-PSK [472] 09:22:03:234: Device: \DEVICE\{3AE7D14E-74EC-4F06-B655-20FE661B518C} [472] 09:22:03:234: Description: USB Wireless LAN Card - Packet Scheduler Miniport [472] 09:22:03:234: ElEnumAndOpenInterfaces: Found interface after enumeration \DEVICE\{3AE7D14E-74EC-4F06-B655-20FE661B518C} [472] 09:22:03:234: ElEnumAndOpenInterfaces: Did NOT find PCB already existing for interface [472] 09:22:03:234: ElOpenInterfaceHandle: Opening handle for \DEVICE\{3AE7D14E-74EC-4F06-B655-20FE661B518C} [472] 09:22:03:234: ElOpenInterfaceHandle: Trying to access NDIS Device: \DEVICE\{3AE7D14E-74EC-4F06-B655-20FE661B518C} [472] 09:22:03:234: ElOpenInterfaceHandle: OpenIntfHandle(\DEVICE\{3AE7D14E-74EC-4F06-B655-20FE661B518C}) = 4440 [472] 09:22:03:234: ElOpenInterfaceHandle: BindIoCompletionCallback already done !!! [472] 09:22:03:234: ElOpenInterfaceHandle: Opened handle 00001158 with dwRetCode 0 [472] 09:22:03:234: ElCreatePort: Entered for Handle=(00001158), GUID=({3AE7D14E-74EC-4F06-B655-20FE661B518C}), Name=(USB Wireless LAN Card - Packet Scheduler Miniport), ZCId=(0), UserData=(00000000) Notification=<8> [472] 09:22:03:234: ElCreatePort: No PCB found for {3AE7D14E-74EC-4F06-B655-20FE661B518C} [472] 09:22:03:234: ElGetInterfaceNdisStatistics: pwszDeviceInterfaceName = (\Device\{3AE7D14E-74EC-4F06-B655-20FE661B518C}) [472] 09:22:03:234: ElCreatePort: Ignoring WLAN indications for pZCConnectInfo == NULL ****[472] 09:22:03:234: ElEnumAndOpenInterfaces: Error in CreatePort = 13 <======??? [472] 09:22:03:234: ElCloseInterfaceHandle(0x1158,{3AE7D14E-74EC-4F06-B655-20FE661B518C}) entered [472] 09:22:03:234: ElEnumAndOpenInterfaces: Completed with retcode = 0 [472] 09:22:03:234: ElMediaSenseCallbackWorker: processed, RetCode = 0 Thanks. Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94058
  - 16
    - WINDOWS CE 5.0 run-time image errors hi all, i am new to this field WIN CE. i'm trying to build CEPC run-time image. But i'm getting errrors like bellow. BUILD: [00:0000001177:PROGC ] Scan \PUBLIC\COMMON\OAK\CSP\X86\GEODE\GXVIDEO\DDRAW\ BUILD: [00:0000001178:ERRORE] CreateDirectory(\) failed. GetLastError=5 (dec). please solve my problem. thanking you. Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94057
  - 17
    - Vista RTM GDR release Hi, I have seen that the Vista USB driver stack is released in two different versions. The driver stack shipped with the MSDN DVD's is the RTM version: 6.0.6000.16386 (vista_rtm.061101-2205), the version that is now on the market is GDR: 6.0.6000.16400 (vista_gdr.061212-1500). I have done a binary comprision of the driver files. E.g. usbd.sys has only a new data from the compilation and a new version information. But other drivers like usbport.sys differs in more than the version. What is the difference between these versions? Is it required to test kernel mode drivers with both versions? Is RTM the latest beta version? I have got a problem report from a customer. He claims that the driver is not running with GDR that was tested successful with RTM! This problem is still under investigation. Any comments? Thanks Guenter Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94055
  - 18
    - NDIS6 Miniport not unloaded Hi everyone: I am running an ndis 6 + KMDF Ethernet miniport driver. The miniport controls a USB NIC . I bridged miniport through bridgeMP to another Ethernet NIC. When I am suprisingly remove my device I my MiniportPause is not called and the miniport remains active(checkforhang is keep being called). When I do !stacks 2 ndis I see the following: nt!KiSwapThread+0x36d: nt!KeWaitForSingleObject+0x414 ndis!NdisWaitEvent+0x55 bridge+0xb1d7 bridge+0xb221 bridge+0x1a92 ndis!ndisUnbindProtocol+0x24b ndis!ndisPnPNotifyAllTransports +0x1c8 ndis!ndisCloseMiniportBindings +0x17a ndis!ndisPnPRemoveDevice+0x1ab ndis!ndisPnPDispatch+0x85e nt!IovCallDriver+0x252 nt!IofCallDriver+0x1b nt!ViFilterDispatchPnp+0x120 nt!IovCallDriver+0x252 nt!IofCallDriver+0x1b nt!IopSynchronousCall+0xce nt!IopRemoveDevice+0xd5 nt! PnpSurpriseRemoveLockedDeviceNode+0xbd nt!PnpDeleteLockedDeviceNode +0x1f nt!PnpDeleteLockedDeviceNodes +0x4c nt! PnpProcessQueryRemoveAndEject+0x572 nt!PnpProcessTargetDeviceEvent +0x38 nt!PnpDeviceEventWorker+0x201 nt!ExpWorkerThread+0xfd nt!PspSystemThreadStartup+0x9d nt!KiThreadStartup+0x16 It seems that the bridge is hang on some Event and due to that the miniport is unloaded. Does anyone has any idea how can I further debug it? Thanks Miki Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94052
  - 19
    - Why WindowsXP does not accept the correct NIC driver? I have a serious problem with my PC. I had to format my disk and reinstall Windows XP (with SP2), but I can not get to in web because Windows thinks that my network card is of Asound, but its of Realtek. I tried doing update driver using the Realtek RTL8139/810X Family PCI Fast Ethernet Card driver on the device manager. I tried uninstalling the driver, and then letting Windows find it again. I tried downloading new driver from the Internet (using another PC). But came out Asound. Windows simply does not let me change the driver. I logged in with Administrator account. I talked with the my ISP service provider, and they also found that the trouble is with my NIC. How can I force Windows use the driver that has on a disk, and not the built-in Asound? ----------- Thanks Sharon Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94051
  - 20
    - Miniport driver - OID_GEN_SUPPORTED_LIST problem Good morning, I'm developing miniport driver, when I answered OID_GEN_SUPPORTED_LIST query without OID_GEN_LINK_SPEED and OID_GEN_MEDIA_CONNECT_STATUS in the oid list, the adapter connected and setup successfully, when I applied those two oid to the list, the adapter couldn't connect. I hope you will be able to help me, vir0n Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94050
  - 21
    - Adding More than 3 Printers in Vista, Adding more than 3 LPT's In Hi, Did anyone able to add LPT4 thru LPT9 in windows Vista ? i tried to add LPT4 it says invalid port name till LPT9, but it is accepting LPT10 onwards. Is something wrong in my observation, precisely is my observation valid ??? how to add LPT4 in vista. Note : it has LPT 4, but not LPT4. Thanks and Regards, Neo Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94049
  - 22
    - Anti-Tampering Verification Hi everyone, I just need to clarify something in DTM regarding this 'Anti-Tampering Verification' that was displayed in DTM when I was preparing my submission package. On the 'Submission Status' window, it shows the following message: Anti-Tampering Verification Verification.wtl File Does Not Exist I search for info on this term on the DTM Help, MSDN and Microsoft website but found none. I don't know what's this message means and whether should it be a cause for concern. I don't want, later on, that because of this I'll have problem with my WHQL submission, as you know it involves some $$$. Anyway, my submission summary shows that my device has pass all the required tests. Anyone knows about this? Thanks! Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94043
  - 23
    - Could not load Driver dynamically into Vista Kernel... Hi, i have a (simple) 32bit driver that works perfect for Windows 2000 and XP, but i cant load it into a running vista system. Does the driver has to be signed to make it loaddable into vista kernel? If so, how can i sign it with a valid signatur or whatever certificate i have to use,...? TIA Best regards Kerem Gümrükcü Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94041
  - 24
    - OEMTextOut glyph position problem We are writing a special plotter driver and we are seeing some strange things when we are looking at the GLYPHPOS structures being sent to OEMTextOut call... The glyphs start out their position correctly but at some point we get a negative Y coordinates or the offsets for the Y coordinates restart at low numbers and all text lines are getting mixed. We noticed that it starts happening when Y > 7200 in *PrintableArea: PAIR(7200, 7200) of GPD file We need to support big table sizes 48x48 inches and have to have a good text quality for small fonts so we need to set *DPI: PAIR(1200,1200) *TextDPI: PAIR(1200, 1200) If we set DPI for lower number Windows programs like MS Word, Corel return low quality Text. Setting DPI for low resolution but TextDPI for high resolution doesn't make text better. Are there any limitation on DPI * Y ? Any help would be greatly appreciated. Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94040
  - 25
    - build utility I'm Building a user mode component modeled on the user component of minispy As I understand this, I need to build this with BUILD tool. The bit that I'm building will be a DLL that will hook up to other stuff... So when I use BUILD and the OSR ddkbuild tool in a very generic way, specifing TARGETNAME=NvDrvComm TARGETTYPE=DYNLINK UMTYPE=windows USE_MSVCRT=1 C_DEFINES=$(C_DEFINES) -DUNICODE -D_UNICODE -DNVDRVCOMM_EXPORTS LINKLIBS=$(SDK_LIB_PATH)\shell32.lib INCLUDES=$(INCLUDES); \ $(IFSKIT_INC_PATH); \ $(DDK_INC_PATH); \ ..\inc TARGETLIBS=$(TARGETLIBS) \ $(IFSKIT_LIB_PATH)\fltLib.lib \ $(IFSKIT_LIB_PATH)\kernel32.lib \ $(IFSKIT_LIB_PATH)\ntdll.lib SOURCES=NvDrvComm.cpp\ NvDrvComm.rc !if "$(DDK_TARGET_OS)"=="WinLH" _NT_TARGET_VERSION=$(_NT_TARGET_VERSION_WINXP) !endif But the build is complaining that it cannot find the DEF file. This creates an error. I built a DEF file by hand and that stopped the BUILD from complaining about the missing def file. BUT this project is on going and if I'm already using the declspec attributes for the things I need to export, why is BUILD complaining about the DEF file? I'd hate to think that I'll need to rewrite the def file everytime I want to add another export!? -- Gak - Finecats Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94038
- Next
  - 1
    - IRP pending at unload on filter driver. Hello, I've made a search about this problem across the newsgroup and the web. I've seen a lot of response and always the same things: "Your routine is attach to an IRP...bla bla bla". But I see nowhere the way to resolve this problem. I add a cleanup routine (Dispatch cleanup) with an IoCancelRoutine and IoComplete function. In my unload function I add an IoDeleteDevice and an IoDetachDevice. What can I add more to avoid a BSOD when I unload my drivers ? Regards, Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94035
  - 2
    - standard device requests and winusb Given: my USB device attached and detected; WinUSB.sys installed and executing. After obtaining my USB device handle (createfile), I can successfully execute WinUSB_Initialize. I then call WinUsb_ControlTransfer and fetch the status. Next I call WinUsb_ControlTransfer to set a feature (<WINUSB_SETUP_PACKET> RequestType=0, Request=3, Value=1, Index=0, Length=0). The call fails and the GetLastError string="A device attached to the system is not functioning." Note: 1. "Value=1" ==>> DEVICE_REMOTE_WAKEUP 2. This error also occurs when RequestType=1 or 2 Did I set a field incorrectly? Is the sequence of operations incorrect? Thanks dmm Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94033
  - 3
    - how to disable USB disk cache I am trying to validate the SCSI commands in our USB drive product, and use file copy back and forth to create more traffic. However, I noticed the SCSI read command is passed down to USB device only the first time read. I think there must be some disk cache enabled. but I already set the disk policy as "Optimize for quick removal", which, I believe, is supposed to disable the disk cache. Anyone has idea how to set up the system to allow me to see every read in device ? -Gary Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94032
  - 4
    - Network Configuration Interface Greetings, I am trying to learn how to configure network using INetCfg APIs. I need to understand how to install the actual adapter and associate TCP/ IP protocol with it. I would like to know exact order of steps needed to configure network. According to MSDN documentation, a network configuration object is created using CoCreateInstance function which is followed my enumerating interfaces and so on. I do not understand the full mechanics of INetCfg APIs. I will appreciate help toward making me understand/learn. Thanks Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94024
  - 5
    - handling parallel port interrupts Hello, I've got a question about timing incoming IR signals and decoding them in Windows. Here's my story. I've built a device which detects IR signals at 38KhZ and sends interrupts to the parallel port. Then I created (well, I didn't write it entirely, but I edited one I found on the internet) a driver to catch those interrupts and I created a usermode program to interact with the driver. So far so good, everything seemed to work fine. I receive interrupts when I press a button on my remote control or when I just connect a wire between pin 2-9 and 10 of the parallel port. But there's also a problem. For some reason, I receive way too few interrupts when I press a button on my remote control, and the time between the interrupts always is nearly identical. My only guess is that for some reason processing an interrupt hasn't finished yet when the next interrupt arrives and that therefore that interrupt doesn't get handled. That should also explain why the time between logged interrupts is nearly identical; it always takes the same time to complete one interrupt and after that it can handle another. But I don't get why handling the interrupt would take that long. My pc should be fast enough to handle it. Here's my isr and dpc routine and after that the part in DriverEntry where I connect the interrupt to my driver. When an interrupt occurs, first the isr gets called and then the dpcroutine. I hope any of you have an idea why it doesn't handle all interrupts or what the problem is and how it can be fixed. Thanks in advance, Floris van Nee BOOLEAN hwinterfaceIsr(IN PKINTERRUPT Interrupt, IN OUT PVOID Context) { PDEVICE_OBJECT DeviceObject = Context; //KdPrint( ("hwinterface.sys: Interrupt Service Routine\n") ); /* We should check if the interrupt comes from us and return */ IoRequestDpc(DeviceObject, DeviceObject->CurrentIrp, NULL); return TRUE; } VOID hwinterfaceDpcRoutine(IN PKDPC Dpc, PDEVICE_OBJECT DeviceObject, IN PIRP Irp, IN PVOID Context) { PLOCAL_DEVICE_INFO DeviceExtension; PIRP pIrp; pIrp = DeviceObject->CurrentIrp; DeviceExtension = DeviceObject->DeviceExtension; //Get the current 'time' and print it to kernel debug KeQueryTickCount((PLARGE_INTEGER)&TickCount); KdPrint(("Interrupt: %d", TickCount)); return; } DeviceExtension = DeviceObject->DeviceExtension; DeviceExtension->Level = 7; DeviceExtension->Vector = DeviceExtension->Level; MappedVector = HalGetInterruptVector(Isa, 0, DeviceExtension->Level, DeviceExtension->Vector, &Irql, &DeviceExtension->Affinity); if (MappedVector == 0) DbgPrint("hwinterface.sys: HalGetInterruptVector failed\n"); IoInitializeDpcRequest(DeviceObject,hwinterfaceDpcRoutine); KdPrint(("%d", &DeviceExtension->InterruptObject)); status = IoConnectInterrupt(&DeviceExtension->InterruptObject, // InterruptObject hwinterfaceIsr, // ServiceRoutine DeviceObject, // ServiceContext NULL, // SpinLock MappedVector, // Vector Irql, // Irql Irql, // SynchronizeIrql Latched, // InterruptMode FALSE, // ShareVector DeviceExtension->Affinity, // ProcessorEnableMask FALSE); // FloatingSave if (!NT_SUCCESS (status)) DbgPrint("hwinterface.sys: IoConnectInterrupt Failed\n"); Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94023
  - 6
    - Mailslot and Drivers hi all! i need a little help, i'm trying to communicate with a mailslot created in user mode, but when i try to open the mail slot with ZwOpenFile it fails with 0xC0000043 that means STATUS_SHARING_VIOLATION .... This is the code: //----------------------- ret = ZwOpenFile( &hand, GENERIC_WRITE, &oa, &iosb, 0, FILE_NON_DIRECTORY_FILE); //----------------------- are the flags used right? can someone help me please? ^_^ Thank you anyway and sorry 4 my english :) Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94020
  - 7
    - About Windows Filtering Platform - Callout Modules API - Kernel Mo Hi all, I am very much new to Windows Filtering Platform and Kernel level Programming.I want to try out Packet Modification feature that is a part of the Callout Module API in WFP . Can I get any sample code for this Callout Module API .And Also want to know is there any structured way of learning this kind of kernel level program. And also want to initiate certain discussion about this WFP ? Some docs related to this WFP convey me that I need to write a driver or hook that will listen for the incoming packets of the NIC and then modify the packet.Can anyone confirm me that whether packet modification is really possible in WFP and If so please provide me with some guidelines.They also say it is alternate for the NDIS Mini port driver developments .? Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94011
  - 8
    - Regarding createfile Hi All I want to set some permission like(Read only or Read/Write) on USB, CD and i am using createfile. But i am not able to set this kind of permission can i have any clue. with regards RYK Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94007
  - 9
    - Wrestling with Windows Filtering Platform Is the use of the family "Packet Injection Functions" mandatory for mechanism "Pend-Complete" without modification packet data? Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94006
  - 10
    - Request delegation in WDF? Hi all, I am still wondering how on earth should the, what the book "Programming the Microsoft Windows Driver Model" calls, delegate action, be handled in WDF for a bus driver? It seems very easy if you read the documentation; just take the request, call WdfDeviceGetIoTarget() on the device that wants to forward the request, send the request and that's about it. But as we learned yesterday it doesn't work. WdfRequestSend() fails every time although we verified that the target is working fine and can receive ioctls created with WdfIoTargetSendInternalIoctlSynchronously(). The same result even if we called WdfRequestFormatRequestUsingCurrentType() before the send command. So it has to do something with the Request object? We tried to create a new request with WdfRequestCreateFromIrp() by taking the original IRP with WdfRequestWdmGetIrp() but it doesn't seem to create a new IRP, instead just copying a pointer to the old one which causes a BSOD for exhausted stack. So finally we got something working by creating a new IRP and poking around with the stack location just as we would in WDM and creating a WDF Request from that IRP - but it seems very odd that we have to work on the WDM side even when we have this beautiful abstraction around it. Now we have a hybrid of WDM inside WDF and completing request correctly seems to be a nightmare - which still doesn't work... So is Request delegation possible in WDF and if so, how? Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 94004
  - 11
    - No way to full-proof DeviceIoControl() ??? I am in the process of developing a WDM device driver which already handles pretty well several IOCTL codes when sent by a user-mode application, using DeviceIoControl(). Now I want to make sure that driver can handle any crazy input that an application programmer may throw at it. For that purpose I placed in the switch case for the pIoStackLocation- >Parameters.DeviceIoControl.IoControlCode a default case that all it does is this: default: { pIRP->IoStatus.Information = 0; ntStatus = STATUS_INVALID_DEVICE_REQUEST; pIRP->IoStatus.Status = ntStatus; IoCompleteRequest(pIRP, IO_NO_INCREMENT); return ntStatus; } This works great (i.e. returns an error with a suitable GetLastError() code) when I test it with an unrecognized IOCTL as follows: int dummy; if ( !DeviceIoControl(hWdm, IOCTL_UNRECOGNIZED, NULL, 0, // input &dummy, sizeof(dummy), // output &BytesReturned, NULL)) but when I pass the output paramter as NULL, too (see below), the system hangs (i.e. only a hard reset would get it out of that state): if ( !DeviceIoControl(hWdm, IOCTL_UNRECOGNIZED, NULL, 0, // input NULL, 0, // output &BytesReturned, NULL)) Notice, the only difference is "NULL, 0" vs. "&dummy, sizeof(dummy)" ... On the WinDbg side, all I can see is the following: Access violation - code c0000005 (!!! second chance !!!) *** ERROR: Symbol file could not be found. Defaulted to export symbols for ks.sys - ks!KsDispatchIrp+0x3b: f82b9f0d ff10 call dword ptr [eax] Which doesn't give me enough information about what's happening in the driver. So, for now, my workaround is to never pass a NULL output buffer pointer to DeviceIoControl() - but is it really impossible to protect a driver against something like this? I thought that (not) handling an unrecognized IOCTL is a no brainer (as described above in the 'default' case). What am I missing? Thanks, Don Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93993
  - 12
    - Portable Devices device class in Vista My USB MSD device resulted in an device "generic volume" under "Storage volumes" in XP Device Manager. But in Vista that instance does not show up, instead, an instance with my product name shows up under 'Portable Devices" device class in Vista. Can anyone tell me what does this change mean to the same USB drive ? -Gary Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93992
  - 13
    - DTM corrupts XP target with pnpdtest I'm seeing a problem where DTM seems to corrupt my Windows XP target when I run the PnP Driver Test. After DTM configures the target, it reboots and displays the following message: Windows could not start because the following file is missing or corrupt: system32\drivers\pnpfiltr.sys You can attempt to repair this file by starting Windows Setup using the original Setup CD-ROM. Select 'r' at the first screen to start repair. I have seen this on multiple systems. I'm using DTM from WDK 6000 with the main QFE applied. Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93986
  - 14
    - Get A WHQL for a non-device driver Hi, We have a Protocol driver that works on top of NDIS and below the our application. Can we get it WHQL if so how? Since there is no device connected directly to it lots of test fail in DTM test suite. Regards, Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93985
  - 15
    - ZwQueryInformationFile Returns Wrong File Size I am using ZwQueryInformationFile to obtain the size of a binary file that contains firmware. Problem is that 3 of the files return the correct size, however two files return a file size off-by-one (-1). So currently I am just doing a cheap hack. I use StandardInformation.EndOfFile.LowPart to obtain the file size in bytes. I really hope this problem is just something simple. Thanks! Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93984
  - 16
    - Signing Error: No Signature was present in subject Setup displays a dialog that informs the user that the authenticity of the driver cannot be verified, and it gives the user the option to cancel the installation of the driver. The system is an Enterprise x64 Server 2003 with SP2. I expected to not see the above message since I digitally signed my driver install files. My driver is a WDM PnP function driver. Since the INF file defines the StartType as SERVICE_DEMAND_START , I only need to digitally sign the cat file. I created the *.cdf file and included the INF and SYS file. I used MakeCat to generate the *.cat file. I am using a Verisign Class 3 certificate. I use signtool to digitally sign the cat file. I use signtool verify /pa /v NAME.cat to verify the cat file was signed. I see the Class 3 Primary Certificate linking to Verisign Class 3 certificate and then to my certificate. All looks official to me. When installing the driver on the target system (Server 2003 x64) I get the warning that the driver is not digitally signed. Here are a few lines from setupapi.txt #I087 Driver node not trusted, rank changed from 0x00002001 to 0x0000a001. #I023 Actual install section: [v6_00.ntamd64]. Rank: 0x0000a001. Driver date: 02/14/2007. Version: 4.25.0.0. #-124 Doing copy-only install of "PCI\VEN_19xx&DEV_4801&SUBSYS_010019xx&REV_00\4&156D0833&0&0018". #I443 No installed Authenticode(tm) catalogs matching catalog name "oem0.CAT" were found that validated file "c:\public\v6_00.inf" (key "v6_00.inf"). Error 1168: Element not found. #I443 No installed Authenticode(tm) catalogs matching catalog name "oem5.CAT" were found that validated file "c:\public\v6_00.inf" (key "v6_00.inf"). Error 1168: Element not found. #I439 Verifying file "c:\public\v6_00.inf" (key "v6_00.inf") against specific Authenticode(tm) catalog "c:\public\v6_00.cat" failed. Error 0x800b0100: No signature was present in the subject. #W366 An unsigned, incorrectly signed, or Authenticode(tm) signed file "c:\public\v6_00.inf" for driver "v6_00" will be installed (Policy=Warn, user said ok). Error 0x800b0100: No signature was present in the subject. Do you see what is missing? Does this indicate the Authenticode certificates are not found? Or that my cat file was not signed? Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93983
  - 17
    - Reading PCI Configuration Is there a way to read PCI Configuration data for a device from a user mode application with out making driver changes for Windows 2000/XP? Is there a function in Platform SDK that allows you to dump PCI Configuration data for a device? Shreyash B. Patel Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93979
  - 18
    - About ACPIEC.sys ACPIEC.sys I dont see any DDK help on this. How do we communicate to it, for embedded controller access ? thx kw Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93973
  - 19
    - How to install programmatically a WDM capture driver? Hello, I need a source code for install/uninstall a WDM Stream capture driver programmatically. Thank you Al Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93972
  - 20
    - Microsoft DVBT Network Provider Filter does not support two instances in same graph Hello All, As I have seen, looks like two instances of the "Microsoft DVBT Network Provider Filter" do not work properly. Any of you have observed the same behaviour and has found a workaround or something? The fact: I need to play two DVBT streams at the same time on a video card (dual dvbt capable). I create thus both DVBT oaths in ONE graph and run it with graphedit. I can see both rendered windows and work OK until I change the frequency in one of the DVBT providers, it won't work properly. Looks like the frequency property is internally shared with both instances and the last instance created owns the value. Am I wrong or this is a fact? THanks! Juanma, Hamburg. PS: Commment, both DVBT paths in separate graphs work OK. But I need to do it in one graph! Any idea what to do? -- jm.mico ------------------------------------------------------------------------ Posted via http://www.codecomments.com ------------------------------------------------------------------------ Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93970
  - 21
    - TraceWpp question. I am having a trouble in making a tmh file. I know how to use it in a source file but I wanted to try it with "TraceWpp.exe". So tried as below and the result was >TraceWpp >ample.c -km -dll -ctl:c23a0c5a-d307-4f0e-ae8e-b2A355AD5DAB -func:KdPrint((MSG,...)) > -gen:{km-WdfDefault.tpl}*.tmh Result>1>cl wpp 1>wpp : error : (FindFileOnPath)File defaultwpp.ini not found So I copied it from \WINDDK\6000\bin\wppconfig\rev1 in the same folder and tried with other missing files such as defaultwpp.ini, header.tpl, km-WdfDefault.tpl and km-default.tpl and compilation was OK. After that when I compile the source file, then it shows me this. >sample.c(62) : error C4013: 'WPP_INIT_TRACING' undefined; assuming extern >returning int >sample.c(92) : error C4013: 'WPP_CLEANUP' undefined; assuming extern >returning int Is i the problem of path? or something else? Then why don't I have a same problem when I add this in the source file like SOURCES=sample.c RUN_WPP= $(SOURCES) \ -km \ -ctl:c23a0c5a-d307-4f0e-ae8e-b2A355AD5DAB \ -func:KdPrint((MSG,...)) \ -gen:{km-WdfDefault.tpl}*.tmh Thank you. Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93969
  - 22
    - driver crashing sysytem after driver unload Hi, My XP system is crashing after my driver is unloaded. I am testing my driver with driver verifier on all the time, so I guess I am not doing anything in my driver to crash the system. I am attaching log of the crash dump. I am not an expert at crash dump analysis. If anyone can guide me on how to troubleshoot this problem it would be great. Regds. Nitin 1: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* IRQL_NOT_LESS_OR_EQUAL (a) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If a kernel debugger is available get the stack backtrace. Arguments: Arg1: 00000140, memory referenced Arg2: 00000002, IRQL Arg3: 00000000, value 0 = read operation, 1 = write operation Arg4: 80529b6b, address which referenced memory Debugging Details: ------------------ READ_ADDRESS: 00000140 CURRENT_IRQL: 2 FAULTING_IP: nt!PsReturnProcessNonPagedPoolQuota+19 80529b6b 8bb040010000 mov esi,dword ptr [eax+140h] DEFAULT_BUCKET_ID: DRIVER_FAULT BUGCHECK_STR: 0xA PROCESS_NAME: ccProxy.exe IRP_ADDRESS: 86702f00 TRAP_FRAME: ec6b4b4c -- (.trap ffffffffec6b4b4c) ErrCode = 00000000 eax=00000000 ebx=86702f00 ecx=86047760 edx=00000000 esi=86047760 edi=ec6b4c13 eip=80529b6b esp=ec6b4bc0 ebp=ec6b4bd4 iopl=0 nv up ei pl nz ac po cy cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010213 nt!PsReturnProcessNonPagedPoolQuota+0x19: 80529b6b 8bb040010000 mov esi,dword ptr [eax+140h] ds:0023:00000140=???????? Resetting default scope LAST_CONTROL_TRANSFER: from 80529b6b to 80543850 STACK_TEXT: ec6b4b4c 80529b6b badb0d00 00000000 00000000 nt!KiTrap0E+0x238 ec6b4bd4 8065d371 00000000 00000000 8628bda0 nt!PsReturnProcessNonPagedPoolQuota+0x19 ec6b4bf8 80656071 00000000 86702f00 ec6b4c5c nt!VerifierIoFreeIrp+0x109 ec6b4c08 804f4c49 86702f00 86702f40 8566f4b8 nt!IovFreeIrpPrivate+0x41 ec6b4c5c 804fec99 86702f40 ec6b4ca8 ec6b4c9c nt!IopCompleteRequest+0x319 ec6b4cac 80502c74 00000000 00000000 00000000 nt!KiDeliverApc+0xb3 ec6b4cc4 804fae50 00000000 ec6b4d1c 00000000 nt!KiSwapThread+0xa8 ec6b4cec 805befd0 00000001 00000006 ec6b4d01 nt!KeWaitForSingleObject+0x1c2 ec6b4d50 8054078c 000000e8 00000001 ec6b4d1c nt!NtWaitForSingleObject+0x9a ec6b4d50 7c90eb94 000000e8 00000001 ec6b4d1c nt!KiFastCallEntry+0xfc 00e6fb74 7c90e9c0 71a53ca5 000000e8 00000001 ntdll!KiFastSystemCallRet 00e6fb78 71a53ca5 000000e8 00000001 00e6fba0 ntdll!ZwWaitForSingleObject+0xc 00e6fbb4 71a55fa7 000000e8 000000e0 00000001 mswsock!SockWaitForSingleObject+0x3a 00e6fca8 71ab2e67 000000e1 00e6fd84 00000000 mswsock!WSPSelect+0x25f 00e6fcf8 00424dfa 000000e1 00e6fd84 00000000 WS2_32!select+0xb8 WARNING: Stack unwind information not available. Following frames may be wrong. 00e6ff5c 00424074 003452a8 003f4808 003f4488 ccProxy+0x24dfa 00e6ff80 7c00412f 003f3ee4 003452a8 000000f8 ccProxy+0x24074 00e6ffb4 7c80b683 003f4488 003452a8 000000f8 MSVCR70!_endthreadex+0xa0 00e6ffec 00000000 7c0040e2 003f4488 00000000 kernel32!BaseThreadStart+0x37 STACK_COMMAND: kb FOLLOWUP_IP: nt!PsReturnProcessNonPagedPoolQuota+19 80529b6b 8bb040010000 mov esi,dword ptr [eax+140h] SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt!PsReturnProcessNonPagedPoolQuota+19 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrpamp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 42b9fcda FAILURE_BUCKET_ID: 0xA_VRF_nt!PsReturnProcessNonPagedPoolQuota+19 BUCKET_ID: 0xA_VRF_nt!PsReturnProcessNonPagedPoolQuota+19 Followup: MachineOwner --------- 1: kd> kv ChildEBP RetAddr Args to Child ec6b4b4c 80529b6b badb0d00 00000000 00000000 nt!KiTrap0E+0x238 (FPO: [0,0] TrapFrame @ ec6b4b4c) ec6b4bd4 8065d371 00000000 00000000 8628bda0 nt!PsReturnProcessNonPagedPoolQuota+0x19 (FPO: [Non-Fpo]) ec6b4bf8 80656071 00000000 86702f00 ec6b4c5c nt!VerifierIoFreeIrp+0x109 (FPO: [Non-Fpo]) ec6b4c08 804f4c49 86702f00 86702f40 8566f4b8 nt!IovFreeIrpPrivate+0x41 (FPO: [Non-Fpo]) ec6b4c5c 804fec99 86702f40 ec6b4ca8 ec6b4c9c nt!IopCompleteRequest+0x319 (FPO: [Non-Fpo]) ec6b4cac 80502c74 00000000 00000000 00000000 nt!KiDeliverApc+0xb3 (FPO: [Non-Fpo]) ec6b4cc4 804fae50 00000000 ec6b4d1c 00000000 nt!KiSwapThread+0xa8 (FPO: [0,0,0]) ec6b4cec 805befd0 00000001 00000006 ec6b4d01 nt!KeWaitForSingleObject+0x1c2 (FPO: [Non-Fpo]) ec6b4d50 8054078c 000000e8 00000001 ec6b4d1c nt!NtWaitForSingleObject+0x9a (FPO: [Non-Fpo]) ec6b4d50 7c90eb94 000000e8 00000001 ec6b4d1c nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ ec6b4d64) 00e6fb74 7c90e9c0 71a53ca5 000000e8 00000001 ntdll!KiFastSystemCallRet (FPO: [0,0,0]) 00e6fb78 71a53ca5 000000e8 00000001 00e6fba0 ntdll!ZwWaitForSingleObject+0xc (FPO: [3,0,0]) 00e6fbb4 71a55fa7 000000e8 000000e0 00000001 mswsock!SockWaitForSingleObject+0x3a (FPO: [Non-Fpo]) 00e6fca8 71ab2e67 000000e1 00e6fd84 00000000 mswsock!WSPSelect+0x25f (FPO: [Non-Fpo]) 00e6fcf8 00424dfa 000000e1 00e6fd84 00000000 WS2_32!select+0xb8 (FPO: [Non-Fpo]) WARNING: Stack unwind information not available. Following frames may be wrong. 00e6ff5c 00424074 003452a8 003f4808 003f4488 ccProxy+0x24dfa 00e6ff80 7c00412f 003f3ee4 003452a8 000000f8 ccProxy+0x24074 00e6ffb4 7c80b683 003f4488 003452a8 000000f8 MSVCR70!_endthreadex+0xa0 (FPO: [Non-Fpo]) 00e6ffec 00000000 7c0040e2 003f4488 00000000 kernel32!BaseThreadStart+0x37 (FPO: [Non-Fpo]) 1: kd> kb ChildEBP RetAddr Args to Child ec6b4b4c 80529b6b badb0d00 00000000 00000000 nt!KiTrap0E+0x238 ec6b4bd4 8065d371 00000000 00000000 8628bda0 nt!PsReturnProcessNonPagedPoolQuota+0x19 ec6b4bf8 80656071 00000000 86702f00 ec6b4c5c nt!VerifierIoFreeIrp+0x109 ec6b4c08 804f4c49 86702f00 86702f40 8566f4b8 nt!IovFreeIrpPrivate+0x41 ec6b4c5c 804fec99 86702f40 ec6b4ca8 ec6b4c9c nt!IopCompleteRequest+0x319 ec6b4cac 80502c74 00000000 00000000 00000000 nt!KiDeliverApc+0xb3 ec6b4cc4 804fae50 00000000 ec6b4d1c 00000000 nt!KiSwapThread+0xa8 ec6b4cec 805befd0 00000001 00000006 ec6b4d01 nt!KeWaitForSingleObject+0x1c2 ec6b4d50 8054078c 000000e8 00000001 ec6b4d1c nt!NtWaitForSingleObject+0x9a ec6b4d50 7c90eb94 000000e8 00000001 ec6b4d1c nt!KiFastCallEntry+0xfc 00e6fb74 7c90e9c0 71a53ca5 000000e8 00000001 ntdll!KiFastSystemCallRet 00e6fb78 71a53ca5 000000e8 00000001 00e6fba0 ntdll!ZwWaitForSingleObject+0xc 00e6fbb4 71a55fa7 000000e8 000000e0 00000001 mswsock!SockWaitForSingleObject+0x3a 00e6fca8 71ab2e67 000000e1 00e6fd84 00000000 mswsock!WSPSelect+0x25f 00e6fcf8 00424dfa 000000e1 00e6fd84 00000000 WS2_32!select+0xb8 WARNING: Stack unwind information not available. Following frames may be wrong. 00e6ff5c 00424074 003452a8 003f4808 003f4488 ccProxy+0x24dfa 00e6ff80 7c00412f 003f3ee4 003452a8 000000f8 ccProxy+0x24074 00e6ffb4 7c80b683 003f4488 003452a8 000000f8 MSVCR70!_endthreadex+0xa0 Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93967
  - 23
    - Training recommendations and advice? Hi, I was wondering if anyone might be able to suggest a good range of topics and areas one would need to study/train in to become a sucessful writer of device drivers (ideally for Windows Vista). I've been asked to arrange some training for some of our developers (guys with a good understanding of OO languages and general windows app development). What areas would they need to fully understand and cover before being able to write windows device drivers? (of course I realise in the short term it makes sense to hire people who have these skills but long term I would like to get some of our existing guys trained up). Hope the above makes some semblance of sense... thanks in advance for any advice. Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93965
  - 24
    - Mirror driver load with UAC Hello, in order to activate a video mirror driver, one has to set "attach.todesktop" key to 1. However, this key is placed under HKLM branch which is usually locked by UAC policy. How can this be overcome? Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93963
  - 25
    - KMDF: Setting DEVICE_CAPABILITY.D3Latency for PCI-Device I'm porting an old driver to KMDF. I have to port a handler, which catches IRP_MN_QUERY_CAPABILITIES and sets "D3Latency" in the DEVICE_CAPABILITY structure. Can you provide an example how to do this? I found nothing in the WDF documentation/examples. Thanks, J. Hoppe Tag: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. Tag: 93958

Hi,

can please someone have a look at this:

http://groups.google.de/group/microsoft.public.vc.mfc/browse_thread/thread/9a26245c82cd048e/157c9704f05a2860

TIA

Best regards

Kerem Gümrükcü

Top

RE: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. by AntonBassov

AntonBassov
Thu Apr 19 11:24:04 CDT 2007

Enable SeDebug privilege for the target account, and that it...

Anton Bassov

"Kerem GÃ¼mrÃ¼kcÃ¼" wrote:

> Hi,
>
> can please someone have a look at this:
>
> http://groups.google.de/group/microsoft.public.vc.mfc/browse_thread/thread/9a26245c82cd048e/157c9704f05a2860
>
> TIA
>
> Best regards
>
> Kerem GÃ¼mrÃ¼kcÃ¼
>
>
>

Top

Re: [OT] OpenProcess shows "Access Denied (5)" on some Processes,.. by Alexander

Alexander
Thu Apr 19 11:56:16 CDT 2007

That's because the security is working. A non-privileged process is NOT
supposed to be able to open a process under SYSTEM account.

"Kerem Gümrükcü" <kareem114@hotmail.com> wrote in message
news:O4TBSYpgHHA.3472@TK2MSFTNGP04.phx.gbl...
> Hi,
>
> can please someone have a look at this:
>
> http://groups.google.de/group/microsoft.public.vc.mfc/browse_thread/thread/9a26245c82cd048e/157c9704f05a2860
>
> TIA
>
> Best regards
>
> Kerem Gümrükcü
>

Top