ntoskrnl.exe: Add a redirect for IoGetCurrentProcess

Chris Wulff crwulff at rochester.rr.com
Sat Dec 20 14:00:56 CST 2008


You're right, ignore this patch. It happens to work for my particular
application but then I think it is just passed as a parameter to another
function (which happens to ignore it.)

  -- Chris Wulff

On Sat, 2008-12-20 at 13:29 +0200, Paul Chitescu wrote:
> On Saturday 20 December 2008 13:12:53 Paul Chitescu wrote:
> > On Saturday 20 December 2008 07:31:53 Chris Wulff wrote:
> > > Redirect for IoGetCurrentProcess to kernel32.GetCurrentProcess
> > >
> > >   -- Chris Wulff
> >
> > This is incorrect. Please provide a separate stub for IoGetCurrentProcess
> > as it returns something else:
> > [...]
> 
> Actually, investigating further it would be better to NOT provide at all a 
> stub for this function since the _EPROCESS structure is huge and different on 
> each Windows version (and sometimes service pack).
> 
> IMHO it's better to have the driver abort in a controlled way (calling this 
> function) than crashing later trying to access some obscure location in the 
> structure returned by it.
> 
> Paul Chitescu
> 
> 




More information about the wine-devel mailing list