202 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
1
vote
0
answers
60
views
Not able to reduce kernel mode driver file size linking capstone_static_winkernel library
I successfully downloaded and installed Capstone project from the following site GitHub using Visual Studio 2019 Enterprise. I then compiled and built the capstone_static_winkernel.vcxproj which is ...
0
votes
0
answers
248
views
How to completely wipe installation of VS 2022 and re-install it from scratch? Missing ntddk.h error for a kernel driver
I've spent close to 2 days trying to resolve this pesky error.
I have a VS 2022 project for a kernel driver, written with KMDF. I developed it using VS 2022. I wanted to transfer it to another PC ...
0
votes
0
answers
68
views
TRACE_DRIVER Undeclared Identifier in KMDF Project After Rename to C++
Environment and Project
Visual Studio 2022
Kernel Mode Driver (KMDF)
Trace Lines
TraceEvents(TRACE_LEVEL_INFORMATION, TRACE_DRIVER, "%!FUNC! Entry");
TraceEvents(TRACE_LEVEL_ERROR, ...
0
votes
0
answers
142
views
Call ACPI control method failed from kernel mode driver with status = STATUS_INVALID_PARAMETER
I have a kernel mode driver that handles an acpi device called \_SB.SECO has a custom control method called FIRE. In ACPI UEFI, I define it as:
Scope (\_SB_)
{
Device (SECO)
{
...
1
vote
0
answers
38
views
How to correct write/read error with deviceIoControl from different processes?
Good afternoon
I have a kmdf driver that can read and write to a file.
Through a custom application I can send IOCTL requests. If I send a request from one process to write, from another process to ...
0
votes
1
answer
90
views
How to find the service name corresponding to a svchost process in my WFP driver's ALE Callout?
In my WFP driver, I register a callout for the FWPM_LAYER_ALE_AUTH_CONNECT_V4 layer
Now in my callout, in case the process that made the connection was svchost, I want to extract the SID of the ...
1
vote
1
answer
135
views
Can KMDF driver check if an IOCTL came from an admin user-mode process?
I'm playing with a KMDF (kernel mode) sample driver that came with VS 2022.
I've added the following code to process IOCTL in my Queue.c:
VOID
TestEvtIoDeviceControl(
_In_ WDFQUEUE Queue,
_In_ ...
0
votes
1
answer
349
views
"Cannot open driver.tmh" error in visual studio KMDF project
The title says it all, I get the following error "Cannot open driver.tmh" after creating a new KMDF project in visual studio 2022.
I have tried turning WPP tracing on but it didn't help. I ...
0
votes
2
answers
716
views
Kernel Mode Driver, Empty (KMDF) No Linker under Configuration Properties
The problem: There is no Linker, Driver Settings, Driver Install ,Inf2Cat and so on... under Configuration Properties.
I have installed Visual Studio 2022 with the following components:
Desktop ...
1
vote
0
answers
218
views
Microsoft Visual Studio KMDF driver deployment fails
Trying to deploy a KMDF USB driver, I faced an assembly-not-found issue on step 6, my test machine cannot be configured properly.
Having:
host machine:
Windows 10 21H2, 64-bit, x86-64 (AMD64),
...
1
vote
1
answer
62
views
How to determine a safe range of addresses to read from physical memory for 16gb of RAM?
I'm using RWEverything to read physical memory. It works fine, but if I try to read an address that is too big then it results in a BSOD.
For example, 0x0000eef777340000
is going to BSOD me.
How to ...
2
votes
0
answers
37
views
Pinned GCHandle of array corrupted only when Debugger is attached
I am currently writing a KMDF driver for an FPGA. Communication between the device and the driver is standard memory mapped I/O using the PCIe BAR spaces. The high-level UI is written in C#, it ...
0
votes
0
answers
162
views
Driver Verifier doesn't seem to catch a WDF driver memory object leak
So I'm suspecting a memory leak in a driver written with WDF. I've been trying to catch it with the driver verifier, but I can't seem to succeed.
I decided to test my approach. I wrote a small test ...
0
votes
0
answers
107
views
Windows KMDF self-signing
Is it possible to self-signing a windows kernel driver?
I read many posts and websites on this topic and some said yes, others say no. For me, i was not able to self sign a kernel driver with ...
1
vote
0
answers
122
views
How do I check whether my WDM/KMDF driver uses the retpoline fix?
I have developed several WDM/KMDF Windows drivers. I compiled the sys with a recent version of Visual Studio 2022 and WDK 10.0.22621.0.
After doing the attestation test signing at the Microsoft ...