Use of RtlCheckRegistryKey in WDM driver?

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Drivers
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Please : Need help about Port monitor Hello, Sorry, because I have already ask this question but I really need help on this topic. I made my own port monitor, and all works fine except at the starting of the spooler : all my printers which are connected to the ports managed by my port monitor, stay offline in the printer folder. I'm obliged to click manually on the menu "Use printer online" to start printing. Why does the print spooler indicates this state ? Do I forget anything in my port monitor ? I see that the print spooler can call SetPort or GetPort to retrieve information from Ports. Is there a relationship between this function and the behaviour that I can see. Thanks in advance for your replies. Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62218
  - 2
    - AttachedToDeviceObject unloaded? Hi All. I'm making my first steps in the File System Drivers programming world, so this question might not be very intelligent or challenging. I've followed the SFilter sample from IFS Kit in order to build my driver. In the sample, I've noticed the use of IoAttachDeviceToDeviceStack (or IoAttachDeviceToDeviceStackSafe). This function, if I understand correctly, is supposed to return the actual device that is directly "below" mine in the device stack. This device can be different from the device I was initially trying to hook, if other devices were already layered on top of it. Let's say I initialize the AttachedToDeviceObject member of my device's extension with the value returned from IoAttachDeviceToDeviceStack, like I understood I should. I Later pass my AttachedToDeviceObject value to IoCreateFileSpecifyDeviceObjectHint . What I couldn't figure out, is what happens if the device pointed to by AttachedToDeviceObject, which is the one that was between me and my target device when I hooked, gets unloaded. Does my AttachedToDeviceObject value reference uninitialized memory, and is therefore likely to cause a blue screen? As I have failed to find a way to discover the next device in stack dynamically, how can I overcome this hazard? Someone on osronline explained to me that the filter driver that is under mine should take care of that if it's unloaded, but I couldn't understand how is it supposed to change the pointer in my extension (AttachedToDeviceObject)? any help would be greatly appreciated. thanks. Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62210
  - 3
    - BulkUSB driver unstable on Laptop w/XP Hello, I am still a relative noob in the world of device drivers. I have had some success in the past but recently I have developed a problem that I can't find my way through. When I started I followed the Oney recommendations and selected a sample driver to start from. In this case I started with the sample BulkUSB driver source from the DDK. I adjusted the necessary block/buffer sizes to meet my device requirements and added IOCTL ID macros until I was able to do everything I needed. I compiled it and installed on Win2k. [and the crowd went wild] More recently I have replaced my development machine (the win2k laptop) with a new a new XP laptop. I am now paying for the relative ease with which I acquired my working DD. When I plug my device in to this laptop I frequently but not always get the BSOD! Before I enabled legacy support in the laptop firmware I got the BSOD whenever the device was attached...even on reboot. I am more prone to distrust my driver's completeness than any sort of odd hardware incompatibilities but really I don't have a basis for that either. I am at a loss where to go from here. I am certain that before too long someone who has one of our devices will hit this situation. I want to solve it before that. I have rebuilt the driver in the XP build environment of the DDK. That initially appeared to help but then the BSOD started re-appearing. I can provide much more information but I don't know what is relevant and what is not. This is a simple bulkUSB device. It has 2 endpoints (1 out, 1 in). When I don't get the BSOD everything works pretty much the way I want it to. Hopefully someone here has a tip that might nudge me in the right direction. TIA, Kevin Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62205
  - 4
    - problem with virtual audio driver Hi everybody, I built the DDK samples related to virtual audio drivers (MSVAD). When I install it and use it, the virtual audio driver is supposed to write to wave files (and store them in C:\ by default) what we would normally hear (all the played sounds). But it only works the first time. The first played sound is well recorded (until the end of the buffer) but then, only empty ("corrupted" according to winamp...) wave files (44 bytes) are generated. Any idea to solve this problem ? Best regards, Giuseppe Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62203
  - 5
    - Enumerating drivers Hi, how can I programmatically (in any .net language) receive a list of all network drivers bound to a network adapter? (I need to check if some specific driver is bound to the adapter - and then possibly (de)activate this one). is this possible? Thanks Peter Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62193
  - 6
    - About USB bulktransfer error... Hi, all: I wrote a usb client device driver for wireless modem on WinCE.NET 4.2. And my driver have passed the usb enumeration process sucessfully. When executing IssueBulkTransfer() to write data to wireless modem, then wait_timeout occurred. Could someone tell me why? Thanks!! -Kemin The log msg are as following: 4294896994 PID:63c7872a TID:2387cfb2 0x8386db70: COM_Write wait for CritSec 50b40. 4294896995 PID:63c7872a TID:2387cfb2 0x8386db70: COM_Write Got CritSec 50b40. 4294896996 PID:63c7872a TID:2387cfb2 0x8386db70: COM_Write wait for CritSec 50c14. 4294896997 PID:63c7872a TID:2387cfb2 0x8386db70: COM_Write got CritSec 50c14. 4294896997 PID:63c7872a TID:2387cfb2 0x8386db70: COM_Write released CritSec: 50c14. 4294896998 PID:63c7872a TID:2387cfb2 0x8386db70: DoPutBytes wait for CritSec 50c14. 4294896999 PID:63c7872a TID:2387cfb2 0x8386db70: DoPutBytes got CritSec 50c14. 4294897000 PID:63c7872a TID:2387cfb2 0x8386db70: TxRead = 0, TxLength = 3, TxBytesAvail = 3. 4294897000 PID:63c7872a TID:2387cfb2 0x8386db70: About to copy 3 bytes 4294897001 PID:63c7872a TID:2387cfb2 0x8386db70: +SerTxIntr 0x4FEC0 4294897002 PID:63c7872a TID:2387cfb2 0x8386db70: >USBCDC_Write(0xe018854, 3) 4294897002 PID:63c7872a TID:2387cfb2 0x8386db70: USBCDC_Write timeout due in 606 msec 4294897003 PID:63c7872a TID:2387cfb2 0x8386db70: +USBD:IssueBulkTransfer, pipe:50730, dwFlags:0x0, Bufsize: 3 vBuf:0xE018854, pBuf:0x0 4294897005 PID:63c7872a TID:2387cfb2 +CHcd::IssueTransfer - address = 66, pipe = 5, dwFlags = 0x0, lpvControlHeader = 0x0, lpvBuffer = 0xe018854, dwBufferSize = 3 4294897007 PID:63c7872a TID:2387cfb2 +CHub(Root tier 0)::IssueTransfer, address = 66, pipe = 5 4294897008 PID:63c7872a TID:2387cfb2 +CHub(External tier 1)::IssueTransfer, address = 66, pipe = 5 4294897010 PID:63c7872a TID:2387cfb2 +CFunction(tier 2)::IssueTransfer 4294897011 PID:63c7872a TID:2387cfb2 +CPipe(Bulk)::IssueTransfer, address = 66 4294897012 PID:63c7872a TID:2387cfb2 +CBulkPipe::AreTransferParametersValid 4294897012 PID:63c7872a TID:2387cfb2 -CBulkPipe::AreTransferParametersValid, returning BOOL 1 4294897013 PID:63c7872a TID:2387cfb2 +CBulkPipe::GetNumTDsNeeded 4294897014 PID:63c7872a TID:2387cfb2 +CBulkPipe::AreTransferParametersValid 4294897015 PID:63c7872a TID:2387cfb2 -CBulkPipe::AreTransferParametersValid, returning BOOL 1 4294897015 PID:63c7872a TID:2387cfb2 -CBulkPipe::GetNumTDsNeeded, returning 1 4294897016 PID:63c7872a TID:2387cfb2 +CBulkPipe::AddTransfer 4294897017 PID:63c7872a TID:2387cfb2 +CBulkPipe::AreTransferParametersValid 4294897018 PID:63c7872a TID:2387cfb2 -CBulkPipe::AreTransferParametersValid, returning BOOL 1 4294897019 PID:63c7872a TID:2387cfb2 CBulkPipe::AddTransfer dwFlags(0x0), packetsize=0x40 4294897019 PID:63c7872a TID:2387cfb2 -CBulkPipe::AddTransfer, returning success 4294897020 PID:63c7872a TID:2387cfb2 +CBulkPipe::ScheduleTransfer 4294897021 PID:63c7872a TID:2387cfb2 +CBulkPipe::AreTransferParametersValid 4294897022 PID:63c7872a TID:2387cfb2 -CBulkPipe::AreTransferParametersValid, returning BOOL 1 4294897023 PID:63c7872a TID:2387cfb2 +CPipe::AddToBusyPipeList - new pipe(Bulk) 0x50780, pri 0 4294897024 PID:63c7872a TID:2387cfb2 -CPipe::AddToBusyPipeList - new pipe(Bulk) 0x50780, pri 0, returning BOOL 1 4294897026 PID:63c7872a TID:2387cfb2 +CUHCIFrame::HandleReclamationLoadChange - Add Reclamation Transfer 4294897026 PID:63c7872a TID:2387cfb2 -CUHCIFrame::HandleReclamationLoadChange - Add Reclamation Transfer 4294897030 PID:63c7872a TID:2387cfb2 -CBulkPipe::ScheduleTransfer, returning HCD_REQUEST_STATUS 1 4294897031 PID:63c7872a TID:2387cfb2 -CPipe(Bulk)::IssueTransfer - address = 66, returing HCD_REQUEST_STATUS 1 4294897033 PID:63c7872a TID:2387cfb2 -CFunction(tier 2)::IssueTransfer - returing HCD_REQUEST_STATUS 1 4294897035 PID:63c7872a TID:2387cfb2 -CHub(External tier 1)::IssueTransfer address = 66, pipe = 5, returing HCD_REQUEST_STATUS 1 4294897035 PID:63c7872a TID:2387cfb2 -CHub(Root tier 0)::IssueTransfer address = 66, pipe = 5, returing HCD_REQUEST_STATUS 1 4294897037 PID:63c7872a TID:2387cfb2 -CHcd::IssueTransfer - returing BOOL 1 4294897038 PID:63c7872a TID:2387cfb2 0x8386db70: -USBD:IssueBulkTransfer, pTransfer:0x520E0 4294897646 PID:63c7872a TID:2387cfb2 0x8386db70: OUT:WAIT_TIMEOUT on hT:0x520e0 Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62190
  - 7
    - About capture stream data in bda Hi, I wrote two bda filters (tuner/demod, and capture), but now, I puzzled where could I capture the stream from device. First, I thought that it should be in tuner/demod filter. So I reviewed the generictuner, the sample with ddk, but I failed to find any usefull information whithin it. And I reviewed the capturesample too, it seemed that the routine Process dealt with the stream data, but I don't know where the stream came from. Could you give me some instructions? Any comments are welcome! Advance thanks! William Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62189
  - 8
    - 802.11 channel How do I get the 802.11 channel of the AP that my adapter is assocaited with? Thanks Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62164
  - 9
    - Is it 802.11a, 802.11b, or 802.11g? If DDK says: typedef enum _NDIS_802_11_NETWORK_TYPE { Ndis802_11FH, Ndis802_11DS, Ndis802_11OFDM5, Ndis802_11OFDM24, Ndis802_11NetworkTypeMax } NDIS_802_11_NETWORK_TYPE, *PNDIS_802_11_NETWORK_TYPE; Is this true: 802.11b = Ndis802_11FH or Ndis802_11DS 802.11a = Ndis802_11OFDM5 802.11g = Ndis802_11OFDM24 Thanks Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62163
  - 10
    - About using IoCompleteRequest and iostatus block's Status Field. Respected sir, I want to know as to, when I use the IoCompleteRequest Function in the DispatchPnp Routine/Function, and that, when I also set the IoStatus block's Status Field to STATUS_ PENDING (pending because I want to make use of pending irp in the driver's system thread to process pnp irp_mn_xxx minor codes), my driver don't seem to work ? I want to set the IRP Pending Status in the Status Field of IoStatus Block, in order to make further use of the IRP, which I already been marked as STATUS_PENDING, in my driver's System Thread to further process IRP_MJ_XXX AND ITS MINOR CODES like irp_mn_start_xxx etc. At the same time, I may also like to know as to, how can I allocate IRP, when my driver is running the system thread ? Which Function should I use (minor pnp codes like irp_mn_xxx ) to pass down the io_resource_requirements_list to make sure that pnp manager and OS must know the resources available thereof. How can I set the IRP in pending state and also how can I make use of this PENDING IRP in the driver's system thread in order to process IRP_MJ_XXX AND IRP_MN_XXX both, major and minor codes respectively ? How can I make sure that, the default resource descriptors, which are already been setted up by the driver will not overwritten i.e. to protect already stored default resource information and at the same time to store additional resource descriptors to IO_RESOURCE_REQUIREMENTS_LIST, so that, PNP MANAGER AND OS will know about the additional resource info., that I provided with. As it is also crucially needed in my case. regards, sudhanshu Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62158
  - 11
    - Memory Mapped Files Reading and Cache Problem Hello Gurus I am writing a File System filter driver having Encrypt/Decrypt. I am using filemon as an example code. In order to solve the memory mapped file issue i have created a new structure of FCB. In that FCB i had specified the structure of FSRTL_COMMON_FCB_HEADER , SECTION_OBJECT_POINTERS and ERESOURCE for MainResource and PagingResource. After creating this I initialize the FSRTL_COMMON_FCB_HEADER to my fileobject->FsContext and fileobject->SectionObjectPointer to my new SectionObjectPointer. My new SectionObjectPOinter has all the 2 members namely the Data,Image set to NULL. I also initialize the MainResource and PagingResource using ExInitializeResourceLite. I do this in my IRP_MJ_CREATE and when i recv a IRP_MJ_CLEANUP i traverse my list for my SectionObjectPOinter and then delete the corresponding FSRTL_COMMON_FCB_HEADER that i had allocated. Actually i keep both the sectionobjectpointer and COmmonFCBHeader in a Link list from which i traverse and delete it. I actually got this by referring some of the posts in this forum. But i know i am missing something because it does not work yet. If i create a rich text document and then edit it and type in some new contents and then open it again i get the garbled text i mean the encyrpted text. the same thing happens for bmp files as well. When i click it again i get the IRP_MJ_READ with CACHE set.Hence my ReadWrite Handler does not decyrpt it as its from the Cache. But still it displays as Encrypted. Any Hints on where i can be going wrong is greatly appreciated. Thanks and Best Regards Shal. Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62157
  - 12
    - Errors with USB Bulk requests When our USB function driver is used in a loop or for a long transfer of data (MBs) on a Bulk endpoint, after a short period of time the I/O status (IRP) returns a failure but the URB status is successful. This is after hundreds of successful requests. The IRP errors have been STATUS_IO_DEVICE_ERROR or STATUS_IO_TIMEOUT. The URB status is USBD_STATUS_SUCCESS in either case. In what conditions would the Windows USB stack return these errors and the URB be successful? Second question, when testing for IRP error codes from a IOCTL_INTERNAL_USB_SUBMIT_URB request, which I/O status should be tested? IO_STATUS_BLOCK ioStatus = { 0, 0 }; PIRP irp = IoBuildDeviceIoControlRequest(...., &ioStatus); // Boilerplate code... ntStatus = IoCallDriver(pdx->lowerDeviceObject, irp); if (ntStatus == STATUS_PENDING) // Wait on event At this point is io.Status.Status == irp->IoStatus.Status ???? If not, which is the proper method?? Thanks, SteveB, MCSD Welch Allyn, Inc. Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62147
  - 13
    - network interface name I wanted to get the network interface name which gets stored under hklm\system\currentcontrolset\control\network\connection\name, during the initialization of my miniport driver. the read fails during the initialization and when i disable/enable the interface, I am able to get the registry key. So when does ndis update this registry entry? thanks sophia Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62144
  - 14
    - Error : INVALID_PIPE_HANDLE on Interrupt pipe 0x81 (USB) Hi, I had developed a minidriver in DDK for a USB keyboard controller which supported polling for interrupt pipe on 0x81 and a vendor request - write operations. It was working fine. The development was done on Cypress FX2 kit. Now I'm trying to use the same driver for USBN9603. But here am facing a prob. The enumeartion part is correct. Am able to do many transactions, like reading device desc, config desc, resetting the pipe etc, on the control endpoint. However if am starting any transaction on the pipe 0x81(Interrupt), the IRP is returning with the following error, ALWAYS : IRP error code : 0xc0000008 URB error : 0x80000300 The pipe handle is got from the 0x81 pipe's USBD_PIPE_INFORMATION structure only, while parsing the configuration descriptor. What could be wrong? I would appreciate any help on this matter. One more point is, the same driver has been working properly for another board based on Cypress FX2 board. Expecting help... Thanks Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62143
  - 15
    - FileObject's DeviceObject to whose DeviceObject does the FileObject for the file C:\abc.txt belongs. is it the FSD? i want to know this becasue C: is a symbolic link created by disk driver. ...Mani Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62142
  - 16
    - debugging laptop i want to debug my driver on laptop. it does not have COM1 port. how to proceed. ...Mani Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62141
  - 17
    - HID minidriver crash on reading endp Hi List, I developing a HID minidriver for a non-HID USB device. My problems beguns with "IOCTL_HID_READ_REPORT" HID request ! First, I get infinite loop that consume 99% cpu due to "ping-pong" IRPs, so in DriverEntry I set HID_MINIDRIVER_REGISTRATION.DevicesArePolled to TRUE ! The I add calls to read device's interrupt endpoint data, but now driver crash :o( Sometime I able to get an USB status error code : 0x80000600 (invalid pipe handle). This handle is the one I get after a call to USBD_CreateConfigurationRequestEx() + IoCallDriver() The problem is that source code is the same as samples I get from differents sources. So, does the HID request is donen a a specific IRQL ? Does I miss something ? Thaks for help. Benoit Here the source code : NTSTATUS IoctlReadReport(PDEVICE_OBJECT yFdo, PIRP yIrp, PIO_STATUS_BLOCK yStatus) { PIO_STACK_LOCATION pwIrpStack; ULONG ulOutBufferLen; PVOID pcBufferOutPtr; PDEVICE_EXTENSION pwPDX; // Get all IOCTL info pwIrpStack = IoGetCurrentIrpStackLocation(yIrp); ulOutBufferLen = pwIrpStack->Parameters.DeviceIoControl.OutputBufferLength; pcBufferOutPtr = yIrp->UserBuffer; pwPDX = GET_PDX(yFdo); // Get repôrt descriptor if (ulOutBufferLen >= sizeof (IR_REPORT)) { PURB pwUrbPtr = NULL; pwUrbPtr = ExAllocatePool(NonPagedPool, sizeof (struct _URB_BULK_OR_INTERRUPT_TRANSFER)); if (pwUrbPtr != NULL) { // Read report from Device UsbBuildInterruptOrBulkTransferRequest( pwUrbPtr, sizeof (struct _URB_BULK_OR_INTERRUPT_TRANSFER), &pwPDX->InteruptEndpHdl, &pwPDX->HidReport, NULL, sizeof (pwPDX->HidReport), USBD_TRANSFER_DIRECTION_IN | USBD_SHORT_TRANSFER_OK, NULL); yStatus->Status = UrbSendCompletion(yFdo, pwUrbPtr); if (NT_SUCCESS(yStatus->Status)) { // Send report to HIDClass RtlCopyMemory(pcBufferOutPtr, &pwPDX->HidReport, sizeof (pwPDX->HidReport)); yStatus->Information = sizeof (IR_REPORT); } else { yStatus->Information = 0; } // Clean ExFreePool(pwUrbPtr); } else { yStatus->Information = 0; yStatus->Status = STATUS_INSUFFICIENT_RESOURCES; } } else { yStatus->Information = 0; yStatus->Status = STATUS_BUFFER_TOO_SMALL; } return yStatus->Status; } NTSTATUS UrbSendCompletion(IN PDEVICE_OBJECT yFdo, IN PURB yUrb) { NTSTATUS ntStatus = STATUS_SUCCESS; PIRP pIrp; KEVENT hEvent; IO_STATUS_BLOCK wIoStatus; PIO_STACK_LOCATION pwNextStack; DbgLogTrace(("ModRc: +UrbSend\n")); /* issue a synchronous request (see notes above) */ KeInitializeEvent(&hEvent, NotificationEvent, FALSE); pIrp = IoBuildDeviceIoControlRequest(IOCTL_INTERNAL_USB_SUBMIT_URB, GET_NEXT_DO(yFdo), NULL, 0, NULL, 0, TRUE, /* INTERNAL */ &hEvent, &wIoStatus); /* Set up the URB ptr to pass to the USB driver stack */ pwNextStack = IoGetNextIrpStackLocation(pIrp); pwNextStack->Parameters.Others.Argument1 = yUrb; IoSetCompletionRoutine( pIrp, (PIO_COMPLETION_ROUTINE)IrpCompletionRoutine, (PVOID) &hEvent, TRUE, TRUE, TRUE); ntStatus = IoCallDriver(GET_NEXT_DO(yFdo), pIrp); if (ntStatus == STATUS_PENDING) ntStatus = KeWaitForSingleObject(&hEvent, Executive, KernelMode, FALSE, NULL); else ntStatus = wIoStatus.Status; if (NT_SUCCESS(ntStatus) && !USBD_SUCCESS(yUrb->UrbHeader.Status)) { DbgLogTrace(("ModRc: > USB Request status : 0x%08X\n", yUrb->UrbHeader.Status)); ntStatus = STATUS_UNSUCCESSFUL; } DbgLogTrace(("ModRc: -UrbSend(0x%08X)\n", ntStatus)); return ntStatus; } NTSTATUS IrpCompletionRoutine(IN PDEVICE_OBJECT yFdo, IN PIRP yIrp, IN PVOID yContext) { PKEVENT phEvent = (PKEVENT)yContext; KeSetEvent(phEvent, IO_NO_INCREMENT, FALSE); return STATUS_MORE_PROCESSING_REQUIRED; } Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62140
  - 18
    - Is there any way to suspend/resume a process from kernel mode? . Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62139
  - 19
    - Virtual display driver I want to write a virtual display driver that paints the screen of one color when it loads. To test it I have also to write an application that loads and unloads the driver. What are the methods that I have to implement? Could anybody show me the way or a sample to develop this driver? Jordi Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62138
  - 20
    - NDIS miniport driver Hi all, I've following problem. I need low level access to NIC, so I want to create own NDIS miniport driver. Questions are: - is it possible to have two NDIS miniports running for one card in one time (one which drives card, sends packets and so on = manages normal traffic ... and second one which is responsible for running my own NIC's commands sequence and nothing else)? - I suppose that driver responsible for normal traffic should be "suspended" during working time of the second one. Is that true? Thanks for your time ... Michal Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62136
  - 21
    - problem building vfw now, I downloaded the VFWDK and I tried to build me some sample code but the thing does not work. I don't know the build line for a makefile project. anyone with help? Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62135
  - 22
    - Status printer question ? Hi, I made my own port monitor, This port monitor works fine, and I have just one question about printer connected on the port that I 've created. My printer is always offline after the spooler has started, I must click on "Use printer online" to work with it Why ? Do I forget anything in my port monitor, may be when the spooler try to open my port ? Does anyone have any idea ? Thanks in advance for your replies Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62133
  - 23
    - Install Printer-Driver / Plugin programatically Hi everyone, based on the OEMUNI sample in the XP DDK, I built a fax-printer-driver. This works pretty nice. Now I need to include this driver in the installation of our product. I'd like to do this using the AddPrinterDriver / AddPrinter APIs. In which way do I have to initialize the DriverInfo structure for the AddPrinterDriver to install this? Best regards, Tobias Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62131
  - 24
    - How get thread's context? How can a driver read the CONTEXT of thread in Windows 2000? ZwGetContextThread/NtGetContextThread only seem to exist in Windows XP...? / Hannes. Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62123
  - 25
    - Monochrome printing:how to make GDI do halftoning Hi, I'm working with monolithic print driver for monochrome printer. I would just soon have the GDI do the dither/halftoning for me, but I'm confused by the DDK documentation. I have gotten it to work by hooking in DrvStretchBlt and simpling passing it on to EngStretchBlt with a forced halftone parameter, but DrvStretchBlt is apparently not always called by some applications. Most of the time, my color graphics come out all black. I'm not sure how to set up GDIINFO and DEVINFO correctly to get the the GDI to halftone. Are there other functions I need to hook into? Thanks Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62120
- Next
  - 1
    - parport.sys Does anyone have some sample app code that uses parport.sys that they can share. Any code will do VB, V , Delphi, etc. Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62116
  - 2
    - About Processing IRP_MJ_PNP AND its minor functions in system thre Respected Sir, I want to know as to how can I be able to process IRP_MJ_PNP AND its minor functions like IRP_MN_START_DEVICE AND ALSO ALL OTHER RELATED minor functions in my system thread in my thread routine at run-time in thread ? How this can be achieved ? How can I get the current stack location and the irp in the system thread at run-time ? This is because, I want to continuously want to notify the memory resources to PNP. This is crucially necessary to me. regards, sudhanshu Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62114
  - 3
    - About Processing IRP_MJ_XXX AND IRP_MN_XXX IN SYSTEM THREAD. Respected Sir, I want to know as to how can I be able to process IRP_MJ_PNP AND its minor functions like IRP_MN_START_DEVICE AND ALSO ALL OTHER RELATED minor functions in my system thread in my thread routine at run-time in thread ? How this can be achieved ? How can I get the current stack location and the irp in the system thread at run-time ? Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62109
  - 4
    - Biometric Fingerprint Reader Microsoft sell a keyboard and mouse with in-built fingerprint reader. There's also a standalone device. Does anyone know if there is an SDK to be able to develop code for these devices? This may not be the forum for the above question but it doesn't seem to fit anywhere else either. Thanks swg Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62103
  - 5
    - Setitng OID_802_11_SSID in XP SP2 Hello, I'm developing a WiFi tool. I could successfully implement it in Win2K and XP (SP1) but I'm having problems with SP2 (XP). This is what I'm doing: //////////////////////////////////////////////////////////////////////////// ///////////////////// 1. I disable microsoft WZC service (by doing "net stop wzcsvc") before my software does any kind of Wifi related stuff. 2. hNdis = CreateFile("\\\\.\\\\Ndisuio", ...); //SUCCESS 3. DeviceIoControl (hNdis, IOCTL_NDISUIO_BIND_WAIT, ...); //SUCCESS 4. DeviceIoControl (hNdis, IOCTL_NDISUIO_OPEN_DEVICE, L"\\DEVICE\\{CBBD6910-2191-4E07-8F88-6AB5FAABFE9B}", ...); //SUCCESS 5. NDIS_802_11_SSID ndis = {NULL}; memset(&ndis, 0, sizeof(ndis)); _tcscpy((TCHAR*)ndis.Ssid, "webtogo"); ndis.SsidLength = _tcslen((LPCTSTR)ndis.Ssid); UCHAR buffer[sizeof(NDISUIO_SET_OID) + sizeof(NDIS_802_11_SSID)] = {NULL}; NDISUIO_SET_OID* poid = (NDISUIO_SET_OID*)buffer; poid->Oid = OID_802_11_SSID; memcpy(&poid->Data, &ndis, sizeof(NDIS_802_11_SSID)); DeviceIoControl (hNdis, IOCTL_NDISUIO_SET_OID_VALUE, poid, sizeof(NDISUIO_SET_OID)+sizeof(NDIS_802_11_SSID), ...); // This FAILED //GetLastError gives 2 (The system cannot find the file specified). //////////////////////////////////////////////////////////////////////////// ///////////////////// If device name was wrong, it should have given me error on point 4 (while doing IOCTL_NDISUIO_OPEN_DEVICE). The same code works on XP-SP1 and on Win2K. I heard that WZC wont stop completely in SP2 and that we have to disable it for each and every adapter. But if that was the case, why "IOCTL_NDISUIO_OPEN_DEVICE" was successful? I did try disabling WZC for my adapter though (without doing "net stop wzcsvc"). Then it gives error 170 ("The requested resource is in use") for "IOCTL_NDISUIO_OPEN_DEVICE" though it doesn't give any error while disabling WZC for my adapter. I tried asking this question in "microsoft.public.win32.programmer.networks" but was suggested to post it in this group. Any ideas please? Thanks, John. Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62102
  - 6
    - VFW development hello, So I did some research and figured out that one way to share my screen trough flash is with a vfw driver. Before I think about buying one I want to try develop one of my own. The situation is that I have a web based application for e-learning designed in Flash. I want to be able to send a clients desktop screen to the application. No screenshots but stream. So, the source must be available in the camera properties of flash. (right click flash movie, properties, camera tab, dropdown menu). I also saw that there is a possibility to do this with a mirror driver. I installed the VNC mirror driver but it don't appear in the flash properties. Since I have no experience in writing a vfw driver I wonder if someone could point me into some direction I should start looking or even give me some advise about how to do it. Regards Tom Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62101
  - 7
    - Driver Install using : DPInst + amd64 + WIN XP 64 Dear all: I got another question. I want install my driver to XP 64 and 2003 64(AMD64).I use DIFX 1.1. But DPInst seems don't work. There are two folders x86 and ia64. PDInst inf folder ia64 won't work in XP64 using AMD64. I work perfect in 32 bit OS. What else I can do ? Thanks Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62090
  - 8
    - driver reload from kernel mode Hello, does anyone know how to force a driver to reload from Kernel mode? I understand how to do it from user mode using 'SetupDiGet/SetDeviceInstallParams' to change the DI_FLAGSEX_PROPCHANGE_PENDING flag, but I need to do this from kernel mode. Any ideas? Thx, Rick Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62088
  - 9
    - Question on EXPORT_DRIVER Hello All, I have a question on EXPORT_DRIVER. I have read the related articles and the questions raised on the same and the answers also for the same. But, I could not get the answer to my question anywhere. Please correct me if I have missed out any posting and give me pointers for the same. There is a mention in the DDK and in the related articles/postings that a driver compiled as an EXPORT_DRIVER can be used as a normal driver also. Also, there is a mention that the DriverEntry of this EXPORT_DRIVER is never called and the DllInitialize is called instead. Does this mean that, if I convert my driver to an EXPORT_DRIVER, I have to move contents of DriverEntry into DllInitialize? Or is the DllInitialize called only when the driver is used as EXPORT_ONLY driver? Please clarify this point and help me in using my driver as an EXPORT_DRIVER and DRIVER (Normal driver for Hardware). Thanks in advance, Best Regards, Raj Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62074
  - 10
    - LookAside lists question Hi, Introduction: ************* I have a fixed size structure of which I need to manage a dynamic amount of instances, Look-a-side lists looks like the perfect solution for that... The Query: ************* I Wonder... The fixed sized structures allocated by the look-a-aside list should be held in a linked list ( e.g. LIST_ENTRY ), Is it OK to use the LIST_ENTRY contained in the NPAGED_LOOKASIDE_LIST structure? Should I manage some kind of a locking mechanims before I access NPAGED_LOOKASIDE_LIST::LIST_ENTRY ??? Is this the right way to track the allocated blocks OR should I rather manage my own list... Any help comments or remarks would be appreciated... -- Nadav http://www.sophin.com Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62071
  - 11
    - windows noob needs pointers to writing a device driver Hello all, I am a fairly experience c/c++ programmer, but I have done very little work on the windows platform. I would like to try my hand at writing a device driver for a usb keyboard. Can some one point me to some good articles. Everything I turned up in google, was a sign up for an online course, or advertisement for a book. Thanks, ~S Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62062
  - 12
    - NdisGetReceivedPacket doesn't work in NDIS IM ???? I had try the passthruex part 2, but it not work properly. It doesnt filter IP packet, event when I try testuiocrl to show the filter status, no IP packet is proccesssed. Then I try to modify it to filter ARP packet as follow. It can realize ARP packet, it's fields. But when I try to modify the ARP packet. The NdisGetReceivedPacket(pAdapt->BindingHandle, MacReceiveContext) doens't work well, and I always see "No packet receive!" but the network still work well and I can see the PtReceivePacket never work. What happens here??? The following is my code. In this FltFilterReceive, I modified to only filt ARP packet, and I sure it work well. I test the driver in the ethernet connection with router modem ADSL, the ARP packet of that modem, always add 18 byte as data of ARP packet. I try to modify this packet by strip this 18 bytes, only ARP header is encapsulate. Thank you very much. NDIS_STATUS PtReceive(..) { ... [snip] DbgPrint("===>PtReceive \n"); if ((!pAdapt->MiniportHandle) || (pAdapt->MPDeviceState > NdisDeviceStateD0)) { Status = NDIS_STATUS_FAILURE; } else do { // BEGIN_PTEX_FILTER ULONG RcvFltAction; RcvFltAction = FltFilterReceive( pAdapt, MacReceiveContext, HeaderBuffer, HeaderBufferSize, LookAheadBuffer, LookAheadBufferSize, PacketSize ); // // Possibly Block (Drop) Packet // if( RcvFltAction & RCV_FLT_BLOCK_PACKET ) { if (LookAheadBufferSize>sizeof(ArpHdr)) { ulNewPayload=HeaderBufferSize+sizeof(ArpHdr); Stt=NdisAllocateMemoryWithTag( &pNewPayload, ulNewPayload, TAG); if (Stt!=NDIS_STATUS_SUCCESS) { DbgPrint("Can't Allocate memory ! Drop packet!"); Status=NDIS_STATUS_SUCCESS; break; } memcpy( pNewPayload, HeaderBuffer, HeaderBufferSize); memcpy( pNewPayload+HeaderBufferSize, LookAheadBuffer, sizeof(ArpHdr)); } else DbgPrint("ARP packet have no data!, the length of packet is %u", LookAheadBufferSize); } // END_PTEX_FILTER Packet = NdisGetReceivedPacket(pAdapt->BindingHandle, MacReceiveContext); if (Packet==NULL) DbgPrint("No Packet receive!"); if (Packet != NULL) { DbgPrint("Have Packet!"); ...[snip] NdisDprAllocatePacket(&Status, &MyPacket, pAdapt->RecvPacketPoolHandle); if (Status == NDIS_STATUS_SUCCESS) { PNDIS_BUFFER pNewNdisBfr; DbgPrint("Allocate a packet from pool success"); if (pNewPayload==NULL) { DbgPrint("The payload do not need to modify"); MyPacket->Private.Head = Packet->Private.Head; MyPacket->Private.Tail = Packet->Private.Tail; } else { DbgPrint("Allocate buffer for modified packet!"); NdisAllocateBuffer( &Status, &pNewNdisBfr, pAdapt->hRecvBufferPool, pNewPayload, ulNewPayload); if (NDIS_STATUS_SUCCESS!=Status) { DbgPrint("PtReceivePacket() failed to get a buffer, drop it!"); NdisFreeMemory( pNewPayload, ulNewPayload, 0); pNewPayload=NULL; Status=NDIS_STATUS_SUCCESS; break; } DbgPrint("Allocate buffer success!"); NdisChainBufferAtFront( MyPacket, pNewNdisBfr ); } NDIS_SET_ORIGINAL_PACKET(MyPacket, NDIS_GET_ORIGINAL_PACKET(Packet)); NDIS_SET_PACKET_HEADER_SIZE(MyPacket, HeaderBufferSize); NdisGetPacketFlags(MyPacket)= NdisGetPacketFlags(Packet); NdisGetPacketFlags(MyPacket) = NdisGetPacketFlags(Packet); NDIS_SET_PACKET_STATUS(MyPacket, NDIS_STATUS_RESOURCES); NdisMIndicateReceivePacket(pAdapt->MiniportHandle, &MyPacket, 1); if (NULL!=pNewPayload) // Have unencapsulated payload? { DbgPrint("Success in set OOB data, new payload length is %u",ulNewPayload); NdisFreeBuffer(pNewNdisBfr); NdisFreeMemory( pNewPayload, ulNewPayload, 0); pNewPayload = NULL; } NdisDprFreePacket(MyPacket); break; } } else { // // The miniport below us uses the old-style (not packet) // receive indication. Fall through. // } // // Fall through if the miniport below us has either not // indicated a packet or we could not allocate one // pAdapt->IndicateRcvComplete = TRUE; ...[snip] Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62060
  - 13
    - NdisGetReceivedPacket doesn't work in NDIS IM ??? I had try the passthruex part 2, but it not work properly. It doesnt filter IP packet, event when I try testuiocrl to show the filter status, no IP packet is proccesssed. Then I try to modify it to filter ARP packet as follow. It can realize ARP packet, it's fields. But when I try to modify the ARP packet. The NdisGetReceivedPacket(pAdapt->BindingHandle, MacReceiveContext) doens't work well, and I always see "No packet receive!" but the network still work well and I can see the PtReceivePacket never work. What happens here??? The following is my code. In this FltFilterReceive, I modified to only filt ARP packet, and I sure it work well. I test the driver in the ethernet connection with router modem ADSL, the ARP packet of that modem, always add 18 byte as data of ARP packet. I try to modify this packet by strip this 18 bytes, only ARP header is encapsulate. Thank you very much. NDIS_STATUS PtReceive(..) { ... [snip] DbgPrint("===>PtReceive \n"); if ((!pAdapt->MiniportHandle) || (pAdapt->MPDeviceState > NdisDeviceStateD0)) { Status = NDIS_STATUS_FAILURE; } else do { // BEGIN_PTEX_FILTER ULONG RcvFltAction; RcvFltAction = FltFilterReceive( pAdapt, MacReceiveContext, HeaderBuffer, HeaderBufferSize, LookAheadBuffer, LookAheadBufferSize, PacketSize ); // // Possibly Block (Drop) Packet // if( RcvFltAction & RCV_FLT_BLOCK_PACKET ) { if (LookAheadBufferSize>sizeof(ArpHdr)) { ulNewPayload=HeaderBufferSize+sizeof(ArpHdr); Stt=NdisAllocateMemoryWithTag( &pNewPayload, ulNewPayload, TAG); if (Stt!=NDIS_STATUS_SUCCESS) { DbgPrint("Can't Allocate memory ! Drop packet!"); Status=NDIS_STATUS_SUCCESS; break; } memcpy( pNewPayload, HeaderBuffer, HeaderBufferSize); memcpy( pNewPayload+HeaderBufferSize, LookAheadBuffer, sizeof(ArpHdr)); } else DbgPrint("ARP packet have no data!, the length of packet is %u", LookAheadBufferSize); } // END_PTEX_FILTER Packet = NdisGetReceivedPacket(pAdapt->BindingHandle, MacReceiveContext); if (Packet==NULL) DbgPrint("No Packet receive!"); if (Packet != NULL) { DbgPrint("Have Packet!"); ...[snip] NdisDprAllocatePacket(&Status, &MyPacket, pAdapt->RecvPacketPoolHandle); if (Status == NDIS_STATUS_SUCCESS) { PNDIS_BUFFER pNewNdisBfr; DbgPrint("Allocate a packet from pool success"); if (pNewPayload==NULL) { DbgPrint("The payload do not need to modify"); MyPacket->Private.Head = Packet->Private.Head; MyPacket->Private.Tail = Packet->Private.Tail; } else { DbgPrint("Allocate buffer for modified packet!"); NdisAllocateBuffer( &Status, &pNewNdisBfr, pAdapt->hRecvBufferPool, pNewPayload, ulNewPayload); if (NDIS_STATUS_SUCCESS!=Status) { DbgPrint("PtReceivePacket() failed to get a buffer, drop it!"); NdisFreeMemory( pNewPayload, ulNewPayload, 0); pNewPayload=NULL; Status=NDIS_STATUS_SUCCESS; break; } DbgPrint("Allocate buffer success!"); NdisChainBufferAtFront( MyPacket, pNewNdisBfr ); } NDIS_SET_ORIGINAL_PACKET(MyPacket, NDIS_GET_ORIGINAL_PACKET(Packet)); NDIS_SET_PACKET_HEADER_SIZE(MyPacket, HeaderBufferSize); NdisGetPacketFlags(MyPacket)= NdisGetPacketFlags(Packet); NdisGetPacketFlags(MyPacket) = NdisGetPacketFlags(Packet); NDIS_SET_PACKET_STATUS(MyPacket, NDIS_STATUS_RESOURCES); NdisMIndicateReceivePacket(pAdapt->MiniportHandle, &MyPacket, 1); if (NULL!=pNewPayload) // Have unencapsulated payload? { DbgPrint("Success in set OOB data, new payload length is %u",ulNewPayload); NdisFreeBuffer(pNewNdisBfr); NdisFreeMemory( pNewPayload, ulNewPayload, 0); pNewPayload = NULL; } NdisDprFreePacket(MyPacket); break; } } else { // // The miniport below us uses the old-style (not packet) // receive indication. Fall through. // } // // Fall through if the miniport below us has either not // indicated a packet or we could not allocate one // pAdapt->IndicateRcvComplete = TRUE; ...[snip] Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62059
  - 14
    - How to get the exit status of a system thread A system thread created with PsCreateSystemThread can be terminated by the thread calling PsTerminateSystemThread that takes a parameter ExitStatus. The DDK documentation says that the ExitStatus specifies the status of the terminating thread to the thread creator, it is undocumented how to get the exit status but this can be done using the function ZwQueryInformationThread. It is common to save a pointer to the thread object using ObReferenceObject ByHandle and later wait for termination using KeWaitForSingleObject. Since ZwQueryInformationThread wants a handle one would in this case use ObOpen ObjectByPointer to get a handle from the pointer when its time to query the exit status however it is also possible to save a handle to the thread and wait on it using ZwWaitForSingleObject where after the handle can be used with ZwQueryInformationThread, both these methods is demonstrated below. If a thread returns from its main function without calling PsTerminateSystemThread it will mean an implicit exit status of 0. The function ZwQueryInformationThread is only exported to drivers on Windows XP and later so on older versions of Windows must it be called by its system service number, see below on how to do this. Below is a simple driver to demonstrate getting the exit status of a system thread, the debug prints looks like the following: ThreadTest: DriverEntry ThreadTest: threadFunc called with argument 0x1234 and terminating with exit status 0x1235 ThreadTest: waiting for thread handle = 0xb5c and got exit status = 0x1235 ThreadTest: threadFunc called with argument 0x5678 and terminating with exit status 0x5679 ThreadTest: waiting for thread pointer = 0x81b0eda8 and got exit status = 0x5679 ThreadTest: DriverEntry done */ /* * Driver to demonstrate getting the exit status of a system thread. */ #include <ntddk.h> #include <ntverp.h> /* * ObOpenObjectByPointer creates a handle to an object that one has a * pointer to. Note that for files is the handle not fully usable if * all other handles to the same file object was closed in between. */ NTKERNELAPI NTSTATUS ObOpenObjectByPointer ( IN PVOID Object, IN ULONG HandleAttributes, IN PACCESS_STATE PassedAccessState OPTIONAL, IN ACCESS_MASK DesiredAccess OPTIONAL, IN POBJECT_TYPE ObjectType OPTIONAL, IN KPROCESSOR_MODE AccessMode, OUT PHANDLE Handle ); /* * ZwWaitForSingleObject is similar to KeWaitForSingleObject but waits * on a handle instead of a pointer. Internally it uses ObReferenceObject * ByHandle, KeWaitForSingleObject and ObDereferenceObject. */ NTSYSAPI NTSTATUS NTAPI ZwWaitForSingleObject ( IN HANDLE Handle, IN BOOLEAN Alertable, IN PLARGE_INTEGER Timeout OPTIONAL ); /* * ZwQueryInformationThread querys different kind of information on * a thread, for example thread basic information that contains its * exit status if it has terminated. */ #if (VER_PRODUCTBUILD >= 2600) /* * ZwQueryInformationThread is exported to drivers on Windows XP and later * versions of Windows. */ NTSYSAPI NTSTATUS NTAPI ZwQueryInformationThread ( IN HANDLE ThreadHandle, IN THREADINFOCLASS ThreadInformationClass, OUT PVOID ThreadInformation, IN ULONG ThreadInformationLength, OUT PULONG ReturnLength OPTIONAL ); #elif (VER_PRODUCTBUILD >= 2195) /* * On older versions of Windows can ZwQueryInformationThread be called * if one knows its system service number, on Windows 2000 it is 87h. * Note that it could change between service packs. */ __declspec(naked) NTSTATUS NTAPI ZwQueryInformationThread ( IN HANDLE ThreadHandle, IN THREADINFOCLASS ThreadInformationClass, OUT PVOID ThreadInformation, IN ULONG ThreadInformationLength, OUT PULONG ReturnLength OPTIONAL ) { __asm { mov eax, 87h lea edx, [esp+4] int 2eh ret 14h } } #elif (VER_PRODUCTBUILD >= 1381) /* * On Windows NT 4.0 is the system service number for * ZwQueryInformationThread 6eh. * Note that it could change between service packs. */ __declspec(naked) NTSTATUS NTAPI ZwQueryInformationThread ( IN HANDLE ThreadHandle, IN THREADINFOCLASS ThreadInformationClass, OUT PVOID ThreadInformation, IN ULONG ThreadInformationLength, OUT PULONG ReturnLength OPTIONAL ) { __asm { mov eax, 6eh lea edx, [esp+4] int 2eh ret 14h } } #else NTSYSAPI NTSTATUS NTAPI ZwQueryInformationThread ( IN HANDLE ThreadHandle, IN THREADINFOCLASS ThreadInformationClass, OUT PVOID ThreadInformation, IN ULONG ThreadInformationLength, OUT PULONG ReturnLength OPTIONAL ) { return STATUS_NOT_IMPLEMENTED; } #endif typedef struct _THREAD_BASIC_INFORMATION { NTSTATUS ExitStatus; PVOID TebBaseAddress; ULONG UniqueProcessId; ULONG UniqueThreadId; KAFFINITY AffinityMask; KPRIORITY BasePriority; ULONG DiffProcessPriority; } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION; /* * Creates a thread and optionally save a handle and/or a pointer to * the thread object. */ NTSTATUS createThread ( OUT HANDLE *threadHandle OPTIONAL, OUT PVOID *threadPointer OPTIONAL, IN PVOID threadFunction, IN PVOID threadArgument ) { NTSTATUS status; HANDLE hThread; ASSERT(threadFunction != NULL); status = PsCreateSystemThread( &hThread, (ACCESS_MASK) 0L, NULL, NULL, NULL, threadFunction, threadArgument ); if (!NT_SUCCESS(status)) { return status; } if (threadPointer != NULL) { status = ObReferenceObjectByHandle( hThread, THREAD_ALL_ACCESS, NULL, KernelMode, threadPointer, NULL ); if (!NT_SUCCESS(status)) { ZwClose(hThread); return status; } } if (threadHandle != NULL) { *threadHandle = hThread; } else { ZwClose(hThread); } return STATUS_SUCCESS; } /* * Wait on a thread handle for the thread to terminate and then query * the exit status. */ NTSTATUS waitForThreadHandle ( IN HANDLE threadHandle ) { NTSTATUS status; THREAD_BASIC_INFORMATION threadInfo; status = ZwWaitForSingleObject( threadHandle, FALSE, NULL ); if (!NT_SUCCESS(status)) { return status; } status = ZwQueryInformationThread( threadHandle, ThreadBasicInformation, &threadInfo, sizeof(threadInfo), NULL ); if (NT_SUCCESS(status)) { status = threadInfo.ExitStatus; } ZwClose(threadHandle); return status; } /* * Wait on a thread pointer for the thread to terminate and then query * the exit status. */ NTSTATUS waitForThreadPointer ( IN PVOID threadPointer ) { NTSTATUS status; HANDLE threadHandle; THREAD_BASIC_INFORMATION threadInfo; ASSERT(threadPointer != NULL); status = KeWaitForSingleObject( threadPointer, Executive, KernelMode, FALSE, NULL ); if (!NT_SUCCESS(status)) { return status; } status = ObOpenObjectByPointer( threadPointer, 0, NULL, (ACCESS_MASK) 0L, NULL, KernelMode, &threadHandle ); if (NT_SUCCESS(status)) { status = ZwQueryInformationThread( threadHandle, ThreadBasicInformation, &threadInfo, sizeof(threadInfo), NULL ); if (NT_SUCCESS(status)) { status = threadInfo.ExitStatus; } ZwClose(threadHandle); } ObDereferenceObject(threadPointer); return status; } void threadFunc(int threadArg) { DbgPrint("ThreadTest: threadFunc called with argument %#x and terminating with exit status %#x\n", threadArg, threadArg + 1); PsTerminateSystemThread(threadArg + 1); } PDEVICE_OBJECT devObj; VOID DriverUnload( IN PDRIVER_OBJECT DriverObject ) { DbgPrint("ThreadTest: DriverUnload\n"); IoDeleteDevice(devObj); DbgPrint("ThreadTest: DriverUnload done\n"); } NTSTATUS DriverEntry( IN PDRIVER_OBJECT DriverObject, IN PUNICODE_STRING RegistryPath ) { UNICODE_STRING devName; NTSTATUS status; HANDLE threadHandle; PVOID threadPointer; DbgPrint("ThreadTest: DriverEntry\n"); RtlInitUnicodeString(&devName, L"\\Device\\ThreadTest"); status = IoCreateDevice( DriverObject, 0, &devName, FILE_DEVICE_UNKNOWN, 0, FALSE, &devObj ); if (!NT_SUCCESS(status)) { DbgPrint("ThreadTest: IoCreateDevice error: %#x\n", status); return STATUS_UNSUCCESSFUL; } DriverObject->DriverUnload = DriverUnload; createThread(&threadHandle, NULL, threadFunc, (void *) 0x1234); createThread(NULL, &threadPointer, threadFunc, (void *) 0x5678); status = waitForThreadHandle(threadHandle); DbgPrint("ThreadTest: waiting for thread handle = %#x and got exit status = %#x\n", threadHandle, status); status = waitForThreadPointer(threadPointer); DbgPrint("ThreadTest: waiting for thread pointer = %#x and got exit status = %#x\n", threadPointer, status); DbgPrint("ThreadTest: DriverEntry done\n"); return STATUS_SUCCESS; } Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62054
  - 15
    - Problem with flat structure Hi, my current project consists of a win32 application and an NDIS IM driver. The user mode application allocates a buffer, passes this buffer to the driver (DeviceIoControl) and receives the buffer again - this time filled with data of a specific format: typedef struct _FLATSTRUCT { int a; int b;//contains the length of the buffer [...] BYTE *buffer; }FLATSTRUCT,*PFLATSTRUCT; So the buffer looks like this: a,b,[...],data the pointer (buffer) originally pointed to,a,b,...... The 4 bytes of *buffer are not copied to the buffer: the whole size copied is sizeof(FLATSTRUCT) - 4 + length_of_data_in_buffer. Now, the user mode application has to unpack the whole lot like this: DWORD sec = 0;//contains the real number of values #define MAINBUFFERSIZE 100000 //size of whole buffer transfered UINT offset = 0;//current offset in the buffer BYTE *pBuffer = new BYTE[MAINBUFFERSIZE];//user mode buffer FLATSTRUCT *mystr = NULL; if(DeviceIoControl(hdriver,IOCTL_TRANSFER,pBuffer,MAINBUFFERSIZE,pBuffer,MAINBUFFERSIZE,&sec,0)) { while(offset < sec) { mystr = (PFLATSTRUCT)&pBuffer[offset]; offset = offset + sizeof(FLATSTRUCT) - 4; mystr->buffer = (BYTE*)&pBuffer[offset]; [...]//do some stuff and adjust offset for next packet } } So, the problem is that when I dump mystr->buffer the whole buffer looks completely fine - except the first 4 bytes. These 4 Bytes contain the pointers address and not the original bytes that remain in pBuffer. I'd guess that I cast anything wrong - but I really can't figure out what...can anyone help? Thanks a lot Peter Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62051
  - 16
    - MSPLOT: Pass Data from PLOTUI to PLOTTER I try to understand how PLOTUI.DLL passes data to PLOTTER.DLL Actually I have a own driver written based on the DDK plotter example. The driver works fine but now I want to pass information to the user interface DLL to the driver DLL but this all looks pretty confusing and I am pretty lost. What do I need to do to pass data from PLOTUI to PLOTTER ? Jürgen Hollfelder Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62039
  - 17
    - safemode detection How can I detect that my application is running in safemode. I guess there is nothing i can do in kernel mode because my driver will not be loaded anyway:) Thanks Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62036
  - 18
    - SERENUM I have developed a USB device which intend to present as a com port on the PC. Now that I am working on the PC to figure out how to get the com port to show up when the device is plugged into the PC, I have been looking at serenum.sys and serial.sys. I'm trying to decide on the best approach. Should I use serenum as a filter over my current usb client driver and follow the external com protocol to have the port show up, hopefully serenum will do this for me, or should I have serial as my filter over my client, this seems like overkill. In short,i'm hoping that if I can get serenum to work, then my port will show up whenever my device is plugged in and my client driver is loaded and hence by reference serenum to enumerate my device. Looking for feedback ?? --Stu Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62035
  - 19
    - Touchpad (mouse) driver with adjustable pointer speed (not acceleration)??? Synaptics laptop touchpad Windows 98SE I'll define two terms so we're talking about the same thing. Pointer speed is the multiplier that defines how far the mouse pointer moves per unit of movement of finger on the touchpad. This relationship is independent of how fast the finger moves. Acceleration is a dynamic parameter that defines a nonlinear relationship that depends on how fast the finger moves. Faster finger movement means that the mouse pointer moves farther per unit of finger movement. What I want is a touchpad driver that has adjustable pointer speed and ZERO aceleration. The Alps drivers do this, but are keyed to alps touchpads. Won't work on the Synaptics pad on my laptop. Logitech drivers do the pointer speed properly, but their scrolling and gesture functions suck. Synaptics drivers have no pointer speed adjustment. The label says pointer speed, but they only adjust the acceleration. All my other touchpads have zero acceleration and I just can't get used to that nonlinear motion. But their scrolling and gesture functions are very nice. I remember seeing mouse driver documentation that mentioned registry keys to control pointer speed. But I searched the registry and didn't find anything I recognized as such. Is there a secret mouse registry key that I can add to change the pointer speed on the synaptics drivers? Is there a more generic driver? FWIW, I searched high and low for LINUX touchpad drivers. They have pointer speed adjustments, but they do it by skipping pixels. IF you don't want acceleration, you can't even reach all the pixels with the mouse pointer. I'm also looking for a LINUX touchpad driver that has pointer speed adjustment that lets you access all the pixels WITHOUT ACCELERATION. This shouldn't be that hard... And yes, I've tried laptop vendor touchpad drivers without success. Thanks, mike -- Return address is VALID but some sites block emails with links. Delete this sig when replying. . Wanted, PCMCIA SCSI Card for HP m820 CDRW. FS 500MHz Tek DSOscilloscope TDS540 Make Offer Wanted, 12.1" LCD for Gateway Solo 5300. Samsung LT121SU-121 Wanted 12" LCD for Compaq Armada 7770MT. Bunch of stuff For Sale and Wanted at the link below. MAKE THE OBVIOUS CHANGES TO THE LINK ht<removethis>tp://www.geocities.com/SiliconValley/Monitor/4710/ Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62034
  - 20
    - WHQL signed driver distibuted by multiple manufacturers My company is developing a Cardbus wireless LAN card. The card's NDIS miniport driver is passing most of the HCT and we are getting ready to submit it for WHQL certification. After we get the driver and INF file signed, we will be distributing it and the card to several "manufacturers" that will then sell the device to the public. Each of these manufacturers needs to see their compay name and model description when the device is displayed in Device Manager, for example. Once the driver is signed, the INF file can't be changed without invalidating the signature. I was wondering, however, if it might be possible to use a second .INF file to provide just this descriptive text in a way that wouldn't invalidate the driver signature. Any ideas out there? -- Andy Cappon Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62030
  - 21
    - System wide filter to change capture buffer Does anyone know of a way to modify the audio captured from a microphone so that the effect is transparently applied to all wmaud and directsound listening applications transparently? I suspect it has something to do with sysaudio level but am unsure how I force the effect filter to be applied to all applications in the system without there knowledge. Any help would be greatly appreciated. Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62026
  - 22
    - Scsi upper filter driver + windows 2003 sp1 Hi All, I have a scsiport upper filter that filters BREAK_RESERVATION (RESET) in windows ent. server 2003. Yesterday, I just upgraded to service pack 1 and now my filter is not seeing any BR (or RESETs). I have verified that my filter has been loaded and is filtering (via Windbg) but no RESETs are seen. Once I back out of sp1, everything is fine, and I am able to see RESETs. It's as if the upgrade to sp1 now bypasses my filter. Does anyone know what could have caused this? Thanks in Advance, Alex Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62024
  - 23
    - configuring audio driver Does anyone knows if an audio driver knows the source of the audio data it "receives"? If we consider the case where 2 processes (2 Windows Media Player for example) play sound at the same time, does the audio driver have information concerning from where the audio data comes from (the first or the second WMP)? Of course, the driver then muxes the audio data but I don't want that. I would like to pick the audio data coming from only one of the processes. To do that, it means that I must identify from where the audio data came from. How can I do that? Thanks a lot, Giuseppe Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62022
  - 24
    - Stop 0x000000D1 IRQ_NOT_LESS_OR_EQUAL Usbehci.sys Bsod Hello, i have problems with blue screen caused by Usbehci.sys. We are a company that develope a digital picture recording system at usb-technology. Maybee we got problems because of high-speed using of the usb-bus. My quastion: Where i can best place my quastions at the newsgroups? Is there a extra group for usb-problems or stop-screens? Thank you much.. Thomas Oetzel Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62010
  - 25
    - How do i installing a kernel mode driver - a *.sys file? This must oblivious be a very simple task, which I - not being familiar with driver development - just don't know where to look for help on. So I'm sorry for making such a question on the forum. The question is: How do I installing a kernel mode driver nt after building a project giving me a *.sys that is suppose to be a kernel mode driver and a *.dll that is suppose to be user mode driver? How do I get those into the system? Do I need to do it through a *.inf? Stefan Tag: Use of RtlCheckRegistryKey in WDM driver? Tag: 62008

My WDM driver needs to know if a particular registry key exists

The following code fails with a 3C status even when the reg path exists
UNICODE_STRING uszTemp;
OBJECT_ATTRIBUTES ObjAttrs;
KEY_VALUE_PARTIAL_INFORMATION valueInfo;
UNICODE_STRING uszName;

RtlInitUnicodeString(&uszTemp,"\\Registry\\Machine\\SOFTWARE\\xxx");
InitializeObjectAttributes(&ObjAttrs, &uszTemp,
OBJ_KERNEL_HANDLE|OBJ_CASE_INSENSITIVE, NULL, NULL);
RtlFillMemory(&valueInfo, sizeof(KEY_VALUE_PARTIAL_INFORMATION), 0x0);
RtlInitUnicodeString(&uszName, L"yyy");
status = ZwOpenKey(&KeyHandle, KEY_READ, &ObjAttrs);

By contrast,
RtlCheckRegistryKey(RTL_REGISTRY_ABSOLUTE,L"\\Registry\\Machine\\SOFTWARE\\xxx\\yyy")
returns STATUS_SUCCESS

However RtlCheckRegistryKey only exists in ntddk.h. and does not exists
in wdm.h

This strongly hints that RtlCheckRegistryKey should NOT be used in a wdm
driver. What do other people do? Is there a wdm.h compatible alternative
to RtlCheckRegistryKey or a way of making ZwOpenKey work?

Top

Re: Use of RtlCheckRegistryKey in WDM driver? by Maxim

Maxim
Wed Apr 20 12:52:50 CDT 2005

> This strongly hints that RtlCheckRegistryKey should NOT be used in a wdm
> driver. What do other people do? Is there a wdm.h compatible alternative
> to RtlCheckRegistryKey or a way of making ZwOpenKey work?

WDM means - "Win9x compatible". If you do not target these OSes - then you can
forget the word "WDM" and only remember the word "NT". Use NTDDK.H in this
case.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@storagecraft.com
http://www.storagecraft.com

Top

Re: Use of RtlCheckRegistryKey in WDM driver? by T

T
Thu Apr 21 15:12:30 CDT 2005

Maxim S. Shatskih wrote:
>>This strongly hints that RtlCheckRegistryKey should NOT be used in a wdm
>>driver. What do other people do? Is there a wdm.h compatible alternative
>>to RtlCheckRegistryKey or a way of making ZwOpenKey work?
>
> WDM means - "Win9x compatible". If you do not target these OSes - then you can
> forget the word "WDM" and only remember the word "NT". Use NTDDK.H in this
> case.

No - I dont need to support the 9X OSes and RtlCheckRegistryKey does
what I need in NT and 2K
Thanks
Tim

Top