Driver Problems? Questions? Issues?
Put OSR's experience to work for you! Contact us for assistance with:
  • Creating the right design for your requirements
  • Reviewing your existing driver code
  • Analyzing driver reliability/performance issues
  • Custom training mixed with consulting and focused directly on your specific areas of interest/concern.
Check us out. OSR, the Windows driver experts.

OSR Seminars

Go Back   OSR Online Lists > ntdev
Welcome, Guest
You must login to post to this list
  Message 1 of 2  
12 Feb 18 11:28
Yuval Ohana
Join Date: 12 Feb 2018
Posts To This List: 1
Reading/Writing to Physical Memory

Hello, im building a ring0 kmdf driver. I am using KeStackAttachProcess to read virtual memory of a specific process. The problem is, i do not seem to have write permissions to the specific memory area id like to change. Iv'e tried using NtVirtualProtect but it does not seem to work. I assumed as kernel id have write access to whichever address i wanted, but i dont seem to have that priviledge. I thought about, since i can read from the process, reading all physical memory (4GB of ram in my case) - and searching for the specific thing i want to change, and somehow writing over it. Can anyone please point me in the right direction to doing such thing or an alternative? Thanks, Yuval.
  Message 2 of 2  
12 Feb 18 18:14
Alex Grig
Join Date: 14 Apr 2008
Posts To This List: 3235
Reading/Writing to Physical Memory

Keep in mind that not all memory of a process is mapped.
Posting Rules  
You may not post new threads
You may not post replies
You may not post attachments
You must login to OSR Online AND be a member of the ntdev list to be able to post.

All times are GMT -5. The time now is 13:01.

Copyright ©2015, OSR Open Systems Resources, Inc.
Based on vBulletin Copyright ©2000 - 2005, Jelsoft Enterprises Ltd.
Modified under license