As a file system filter developer, one of the great pains in life is when a file system operation fails deep in the bowels of the file system. For example, Read more
17
Oct
Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results
All posts in DEBUG
Path: Home / Developer's Blog /
Kernel mode debugging
22
JunI was looking at a few different crashes today that were all eerily similar. In doing so, I realized that I hadn’t asked if these were all different systems or Read more
20
JunWell, this one took us by surprise… MmBuildMdlForNonPagedPool is the standard shortcut function drivers use to build MDLs describing non-pageable memory. Despite the name, the buffer described by the MDL Read more
14
FebDiagnosed yet another crash today that is likely due to the usage of IoBuildDeviceIoControlRequest. Long ago I was burned by this API and vowed to never use it again, but Read more
14
JulI found myself in a situation this week where I really wanted to call the API SeTokenIsAdmin. I vaguely remembered some issues around this API, and Googling quickly brought up Read more
18
MayIn case you’ve missed it, there are tons of changes going on under the covers in WinDbg. There is a fundamental paradigm shift going on in terms of how WinDbg Read more
07
AprTL;DR: Don’t waste your time like we did – 1394 boot debugging no longer works on the latest builds on Windows 10. As you might already be aware, native 1394 kernel Read more
17
FebYet another interesting case lands on our doorstep thanks to NTDEV (original post here). I firmly believe that you have zero chance in diagnosing a non-trivial crash if you don’t Read more
26
Aug[Last updated 31 Aug 2016, 16:11 Eastern time] Update: As of 31 August 2016, we have verified that RS1 symbols are now present and indexed on the MSFT Symbol Server. Yay! Read more
26
FebTurning DbgPrint Statements into WPP Tracing
by PeterGV
As surprising as you may find this, I’m going to write a couple of blog posts about WPP Tracing. Some Background for Context Those of you who’ve followed us for Read more
What’s New at OSR
FESF for Linux is Now Shipping!
OSR's Framework for building transparent per-file encryption solutions now supports Linux!
Read More..
Join the OSR Hints and Tips Email List
Want to receive regular technical hints, tips, and notifications of new tech blog postings from OSR? Join our Hints and Tips list!
To join the list just send a blank email to join-osrhints@lists.osr.com.
Upcoming Seminars
Developing File System Minifilters
29 July - 2 August 2019, Manchester, NH
Course Outline..
Writing WDF Drivers I: Core Concepts
23-27 September 2019, Manchester, NH
Course Outline..
Kernel Debugging & Crash Analysis
21-25 October 2019, Manchester, NH
Course Outline..
Windows Internals & Software Drivers
18-22 November 2019, Dulles, VA
Course Outline..
Subscribe to The NT Insider
Signup to get an email whenever a new issue of The NT Insider is available for download. Note: We never share your email address with others, and we won’t spam you. Why would we?
Be sure to check your junk mail folder for your confirmation, which will come from the “mcsignup.com” domain.,
- NDIS Protocol driver not getting ProtocolReceiveNetBufferLists function called 26 June 2019 Shane_Corbin
- Windows 10 1903 Scheduled Task causing network Filter Driver Filter Reset 25 June 2019 Tim_Chan
- generic table usage 23 June 2019 Pavel_S
- WHLK fails on CHAOS and IOCTL tests for Windows 10 1903 23 June 2019 zx2c4
- Does "physicaldrive0" always represent the HDD which installed the Windows OS ? 21 June 2019 iFengHuang
This site uses cookies to improve your experience. Click OK to indicate your consent.
Click NO to refuse 3rd party cookies. OKNOCookie and Privacy Policy