Driver Problems? Questions? Issues?
Put OSR's experience to work for you! Contact us for assistance with:
  • Creating the right design for your requirements
  • Reviewing your existing driver code
  • Analyzing driver reliability/performance issues
  • Custom training mixed with consulting and focused directly on your specific areas of interest/concern.
Check us out. OSR, the Windows driver experts.

OSR Seminars

Go Back   OSR Online Lists > ntdev
Welcome, Guest
You must login to post to this list
  Message 1 of 1  
11 May 18 08:52
Mayur K
Join Date: 04 Mar 2018
Posts To This List: 3
DRIVER_IRQL_NOT_LESS_OR_EQUAL on trying to set variable in classifyfn!!

Hi, I am developing a WFP callout driver which then logs all the network requests. In a ALE_CONNECT_AUTH classify function am trying to set the flow context so that the next layers can get some more context related information. Following is the offending code which is triggering the bug check. 139: RtlZeroMemory(context, sizeof(FLOW_DATA)); > 140: context->previousLayerId[context->currentLayerIndex++] = inFixedValues->layerId; 141: // Associate the flow context structure with the data flow The declaration of previousLayerId looks something like this : INT previousLayerId[10]; Also there is a check before this code to make sure that ExAllocatePoolWithTag(allocated from NonPagedPool) is succeeding in the allocation or not. So with my code, what could be triggering the bug check? Also as a side question, will this flowcontext be shared different WFP layers and their callouts? Like I am assuming that this context will be shared between the ALE_AUTH_CONNECT & OUTBOUND_TRANSPORT classify callouts. Is my assumption correct? Thanks in advance.
Posting Rules  
You may not post new threads
You may not post replies
You may not post attachments
You must login to OSR Online AND be a member of the ntdev list to be able to post.

All times are GMT -5. The time now is 23:47.

Copyright ©2015, OSR Open Systems Resources, Inc.
Based on vBulletin Copyright ©2000 - 2005, Jelsoft Enterprises Ltd.
Modified under license