Stack Overflow
Stack Overflow

Questions tagged [irp]

I/O request packets (IRPs) are kernel mode structures that are used by Windows Driver Model (WDM) and Windows NT device drivers to communicate with each other and with the operating system.

24 questions
0
votes
1 answer

FS Development - KMDF Windows Driver

I am new here and am trying to develop a concept fs driver for the tar 'filesystem' (mount tar). My question is, how does the OS detect that a partition has the TAR filesystem and automatically load my driver?
user1953654
  • 3
  • 1
0
votes
1 answer

ST-LINK V2 USB driver WinUSB Access Denied

I have a Win7/64 development machine configured (by someone else I can't contact) to develop/debug an embedded project using an ST-LINK/V2 dongle. The PC detects and installs the dongle Ok but no application can access the dongle, giving 'No ST-Link…
jmcambs
  • 1
  • 1
0
votes
1 answer

Renaming a file that will be deleted in a minifilter drivers IRP_MJ_CLEANUP preop callback

My goal is to overwrite a files contents and name just before it is deleted - wiping deleted files. I am trying to use a minifilter driver and the pre-cleanup callback routine that gets called just before the final delete operation. So far I have…
ollo
  • 926
  • 1
  • 14
  • 33
0
votes
1 answer

Windows NDIS Driver: Concurrent Read/Write on a single device (IRP_MJ_READ/WRITE)

Starting with the ndisprot sample from Microsoft I try to write a NDIS protocol driver. From User space I try to read and write to the device simultaneous (out of two threads). Since I don't receive any packets, the ReadFile system call blocks. I'm…
falstaff
  • 3,413
  • 2
  • 25
  • 26
0
votes
1 answer

blue screen error: DRIVER_RETURNED_HOLDING_CANCEL_LOCK

I write a driver in windows 7. And I use pedding IRP to send event to application from driver. The key Code like: PIRP PeddingIRP; ... VOID PtDriverCancelIRP(IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp ) { …
wenz
  • 169
  • 1
  • 11
0
votes
1 answer

How to get a module which send's IRP request

I have a kernel driver. My dll inside process(injected dll) send IRP request to this driver. How this driver could get this module handle? Something like IoGetRequestorProcess(Irp) but module handle instead of process.
Roman
  • 1,377
  • 2
  • 11
  • 12
0
votes
1 answer

WdfRequestIsCanceled Vs WdfRequestMarkCancelable

Can anyone list the pros and cons of using below two approaches for IO cancellation in wdf? 1) mark request cancellable with WdfRequestMarkCancelable (). Provide a cancel routine and synchronize the completion path. 2) keep on polling with…
CuriousKernelHacker
  • 100
  • 5
0
votes
1 answer

MiniFilter Driver - modify a file bytes on IRP_MJ_CLOSE and IRP_MJ_CREATE

I'd like to change a file when it is closed and reverse the change when it is opened. It's kind of like encryption driver except I don't want to encrypt the file. I've created a new "Filter Driver: Filesystem Mini-Filter" project with WDK8 in Visual…
assafmo
  • 1,047
  • 3
  • 15
  • 32
-1
votes
1 answer

Windows IRP function call for opening and saving files

I'm currently working on a minifilter driver, and I need to intercept this kind of events : Listing files inside a folder Opening a file in an application Closing this file Modify and save the file From what I read, I guess I need to filter…
Krag
  • 79
  • 1
  • 9
1
2