page fault on 0x7ffe02d8

[Ivan Leo Puoti]

Vitaliy Margolen wrote:
> 0x7ffe0000 is SharedUserData that is present on all NT+ systems. It's format
> only documented in DDK for kernel address space and only for some first several values.
> This structure keeps growing as I understand and no one except MS knows what's
> all in it. We do need this structure for some programs that use it. The trick
> is, that it's in the space allocated with read only access (for user programs).
> And marked as private. I think we'll have to do something like that. And update
> from the server.

Vitaly, don't know if you've done some tests on this but IIRC the KSHARED_USER_DATA that we have in 
ddk/wdm.h should describe it all.

Ivan.