How to pass the large data in kernel mode to user mode?

		Exetools > General > General Discussion
How to pass the large data in kernel mode to user mode?

02-23-2010, 08:05

WhoCares

who cares

Join Date: Jan 2002

Location: Here

Posts: 468

Rept. Given: 11

Rept. Rcvd 32 Times in 25 Posts

Thanks Given: 69

Thanks Rcvd at 247 Times in 94 Posts

You can allocate a buffer in user process, then send an IOCTL to the driver with this memory, and then call MmGetSystemAddressForMdlSafe(Irp->MdlAddress) in the driver.

__________________
AKA Solomon/blowfish.

The Following User Gave Reputation+1 to WhoCares For This Useful Post:
benina (02-23-2010)

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Hades:Windows kernel driver lets reverse engineers monitor user and kernel mode code	sh3dow	Source Code	0	05-12-2016 03:15
Use IDA in kernel mode ??	Veyskarami	General Discussion	14	02-23-2013 12:38
Kernel-Mode GUI!? (like SoftIce)	Cobi	General Discussion	1	01-21-2005 02:24
Kernel Mode Driver for NT	SPeY	General Discussion	12	04-22-2004 15:34

All times are GMT +8. The time now is 05:26.