I would like to call user space windows API functions from a KMD (Kernel mode driver) but I'm not sure where to go from here. I searched for "windows KMD inverted call" but couldn't find anything. I know a little bit about IRPs and such but not enough to be able to figure it out on my own. Any help would be appreciated!
Asked
Active
Viewed 287 times
-1
-
1kernel mode can not direct call code in user mode. he can cooperate with user mode code only, but user mode code must be designed for this cooperation – RbMm Mar 19 '17 at 19:35
1 Answers
1
You need a helper service in user mode that makes the call for your driver. The inverted call model has been used on WinNT for ages and can also be used in with KMDF.
Search the OSR mailing list for endless discussions about this model and other alternatives.
Anders
- 97,548
- 12
- 110
- 164