I’ve been doing some research into the Windows Filtering Platform and the information available at each of the various filtering layers. In particular, I’ve been focusing on the information available Read more
02
Jul
Windows System Software -- Consulting, Training, Development -- Engineering Excellence, Every Time.
All posts in DEBUG
Path: Home / Developer's Blog /
Kernel mode debugging
17
OctAs a file system filter developer, one of the great pains in life is when a file system operation fails deep in the bowels of the file system. For example, Read more
22
JunI was looking at a few different crashes today that were all eerily similar. In doing so, I realized that I hadn’t asked if these were all different systems or Read more
20
JunWell, this one took us by surprise… MmBuildMdlForNonPagedPool is the standard shortcut function drivers use to build MDLs describing non-pageable memory. Despite the name, the buffer described by the MDL Read more
14
FebDiagnosed yet another crash today that is likely due to the usage of IoBuildDeviceIoControlRequest. Long ago I was burned by this API and vowed to never use it again, but Read more
14
JulI found myself in a situation this week where I really wanted to call the API SeTokenIsAdmin. I vaguely remembered some issues around this API, and Googling quickly brought up Read more
18
MayIn case you’ve missed it, there are tons of changes going on under the covers in WinDbg. There is a fundamental paradigm shift going on in terms of how WinDbg Read more
07
AprTL;DR: Don’t waste your time like we did – 1394 boot debugging no longer works on the latest builds on Windows 10. As you might already be aware, native 1394 kernel Read more
17
FebYet another interesting case lands on our doorstep thanks to NTDEV (original post here). I firmly believe that you have zero chance in diagnosing a non-trivial crash if you don’t Read more
26
Aug[Last updated 31 Aug 2016, 16:11 Eastern time] Update: As of 31 August 2016, we have verified that RS1 symbols are now present and indexed on the MSFT Symbol Server. Yay! Read more
What’s New at OSR
FESF for Linux is Now Shipping!
OSR's Framework for building transparent per-file encryption solutions now supports Linux!
Read More..
Join the OSR Hints and Tips Email List
Want to receive regular technical hints, tips, and notifications of new tech blog postings from OSR? Join our Hints and Tips list!
To join the list just send a blank email to join-osrhints@lists.osr.com.
Upcoming Seminars
Developing File System Minifilters
24-28 May 2021, ONLINE ONLY
Course Outline..
Writing WDF Drivers I: Core Concepts
14-18 June 2021, ONLINE ONLY
Course Outline..
Windows Internals & Software Drivers
27 Sept - 1 Oct 2021, ONLINE ONLY
Course Outline..
Kernel Debugging & Crash Analysis
15-19 Nov 2021 ONLINE ONLY
Course Outline..
Subscribe to The NT Insider
Signup to get an email whenever a new issue of The NT Insider is available for download. Note: We never share your email address with others, and we won’t spam you. Why would we?
Be sure to check your junk mail folder for your confirmation, which will come from the “mcsignup.com” domain.,
- AppcertDLLs do not work in GUI apps 29 July 2021 lapaz
- Moved: Associate original process ID for IRP_MJ_CREATE from localhost UNC file access 26 July 2021 Peter_Viscarola_(OSR)
- WdfDeviceGetSystemPowerAction During Hibernate 26 July 2021 phanikcs
- Proper way of freeing buffers when using NdisSendPackets? (NDIS 5.0) 25 July 2021 brad_H
- Wdf tester not found WDK in 20h1 Os 23 July 2021 jaya