You're right, ignore this patch. It happens to work for my particular
application but then I think it is just passed as a parameter to another
function (which happens to ignore it.)
-- Chris Wulff
On Sat, 2008-12-20 at 13:29 +0200, Paul Chitescu wrote:
> On Saturday 20 December 2008 13:12:53 Pa
On Saturday 20 December 2008 13:12:53 Paul Chitescu wrote:
> On Saturday 20 December 2008 07:31:53 Chris Wulff wrote:
> > Redirect for IoGetCurrentProcess to kernel32.GetCurrentProcess
> >
> > -- Chris Wulff
>
> This is incorrect. Please provide a separate stub for IoGetCurrentProcess
> as it ret
On Saturday 20 December 2008 07:31:53 Chris Wulff wrote:
> Redirect for IoGetCurrentProcess to kernel32.GetCurrentProcess
>
> -- Chris Wulff
This is incorrect. Please provide a separate stub for IoGetCurrentProcess as
it returns something else:
"The IoGetCurrentProcess routine returns a pointe
I believe this is wrong - IoGetCurrentProcess return pointer to kernel
EPROCESS structure instance, and GetCurrentProcess return constant
(HANDLE)-1 . The structure is declared opaque so drivers must not
dereference it, but some drivers surely won't obey.
2008/12/20 Chris Wulff
> Redirect for Io