Questions tagged [kmdf]

A KMDF driver is the software installed on the computer that communicates with the hardware to make the device function.

The Kernel-Mode Driver Framework (KMDF) is a driver framework developed by Microsoft as a tool to aid driver developers create and maintain kernel mode device drivers for Windows 2000 and later releases. Together with the User-Mode Driver Framework () it makes up the Windows Driver Frameworks ().

200 questions
0
votes
0 answers

Findout all the memory address a process has occupied by its process Id

I have a program written in c# and it consists of two variable x and y which have a fixed value. The PID of this program is, for ex: 34432. From kernel driver, I want to find the memory addresses of this process and replace the fixed value of x and…
0
votes
1 answer

Why am I getting Error LNK2019 unresolved external symbol when calling a function which is statically linked?

I've built a statically linked library from a project which I downloaded from here InfinityHook project I'm getting the following two (2) errors in Visual Studio 2017 when I reference any of the functions which are available for export. Error…
JoeT
  • 27
  • 8
0
votes
1 answer

'HookedDeviceControl': undeclared identifier

I get a 'HookedDeviceControl': undeclared identifier error when i compile this code. (InterlockedExchange((PLONG)&pDrv_tcpip->MajorFunction[IRP_MJ_DEVICE_CONTROL],(LONG)HookedDeviceControl);) Does the "HookedDeviceControl" function need to have…
0
votes
1 answer

user mode driver (umdf) c++ http request

I have developed a umdf2 driver and in some point it needs to communicate to a remote server to fetch some data. I am wondering is there any easy way (e.g. library) to do the http requests (GET, POST) in Windows user mode? I have never used winsock2…
Sansei
  • 93
  • 10
0
votes
1 answer

BTH_DEVICE_INFO_LIST IOCTL Execution

I am trying to execute IOCTL_BTH_GET_DEVICE_INFO for this purpose,as a beginner I write following code #include #include #include #include #include #include #include #include…
robo98
  • 37
  • 8
0
votes
1 answer

Windows kernel driver cannot print to DebugView

I have just completed the installation of Hello World Windows Driver, the installation is success. The code in this basically printing a line: KdPrintEx(( DPFLTR_IHVDRIVER_ID, DPFLTR_INFO_LEVEL, "KmdfHelloWorld: DriverEntry\n" )); For seeing this I…
0
votes
1 answer

FWPS Callouts, usages and references

I wanted to know the deep understanding of how Filter Drivers works. What is the detail and usages? for example: FwpsCalloutRegister FwpmTransactionBegin FwpmSubLayerAdd FwpmCalloutAdd these are functions that used in many of network driver samples.…
Ali Sepehri-Amin
  • 493
  • 1
  • 6
  • 18
0
votes
0 answers

Parallel calls to VhfReadReportSubmit lead to Stack Overflow BSOD

I am writing a windows kmdf driver for a virtual HID device using the vhf framework. The device takes any write reports submitted to it, modifies them slightly, and spits them out via VhfReadReportSubmit. Unfortunately, I am getting stack-overflow…
jonathanverner
  • 303
  • 3
  • 12
0
votes
0 answers

Debugging a kernel mode driver

I want to deploy and debug a kernel mode driver with the kernel debugger in Visual Studio 2019. Deploying and installing works and I also can start and stop the driver. But when I try to debug it, the breakpoints are ignored and the driver keeps…
Andre
  • 1
0
votes
1 answer

Using the Windows Driver Kit (wdm.h specifically) functions in a Windows Desktop Application and/or Console Application

I have a necessity to use the ZwSetValueKey() function declared in the Wdm.h header file available as a part of the Windows Driver Kit (WDK) to access the registry keys created by a kernel mode driver but Visual Studio does not allow the use of the…
hecate
  • 620
  • 1
  • 8
  • 33
0
votes
1 answer

Signing kernel mode driver on windows platform

I have a 64 bit PCI KMDF driver(kernel-mode) developed using Visual Studio 2017 on windows 10. The driver is built with toolset 'WindowsKernelModeDriver10.0' and the 'Desktop' target platform. The driver is to be installed on Windows 10(1809). As…
NICK1
  • 1
0
votes
0 answers

Windows kernel: why is my memory mapping not working?

I have a kmdf that allocates a single buffer using MmAllocateContiguousMemorySpecifyCache and gets its mdl: auto ptr = MmAllocateContiguousMemorySpecifyCache( BUFFER_SIZE, lowestAcceptible, highestAcceptible, lowestAcceptible, …
Elad Maimoni
  • 3,703
  • 3
  • 20
  • 37
0
votes
0 answers

Unable to stop/unload non-PnP driver using ServiceManager

I made a simple non-PnP driver based on the Microsoft sample driver found here: https://github.com/microsoft/Windows-driver-samples/tree/master/general/ioctl/kmdf/sys I think I am doing everything right. My DriverEntry()…
Roy
  • 1
0
votes
1 answer

Access is denied when trying to CustomDevice.FromIdAsync using a Software KMDF Driver

I have prepared a KMDF driver meant to be accessed by a UWP using the guidelines found within MSDN (HSA for Driver, HSA for UWP) The UWP App I used is the CustomCapability example found under Universal Windows Samples The KMDF is a sample driver…
Jer Yango
  • 582
  • 2
  • 8
  • 22
0
votes
1 answer

Updating KMDF Driver Without Windows Restart

I recently wrote a KMDF Driver in windows using Visual Studios. I then proceeded to locally install the driver whilst in TestMode (e.g., devcon install driver.inf hwid). Cool so the driver is running, and I can see the driver Callbacks firing in…
Tr1gZer0
  • 1,482
  • 11
  • 18