Click here to Skip to main content
15,881,882 members
Please Sign up or sign in to vote.
5.00/5 (1 vote)
See more:
In fact,I did a bus hook driver for capturing IRP.
And then I want to send the captured IRP from my driver to user mode application.

RtlCopyMemory(outBuf,&MyIrp,sizeof(IRP)); //driver code,
//and I used DeviceIoControl in the application.

So I need to define an structure of IRP to receive data in the application.
But I fail to do it.In the application only including wdm.h to use IRP will cause a lot of errors.
And the structure of IRP is too complex to define by myself.
How can I do?

Sorry for my poor English.
Thank you for you help.
Posted

1 solution

The IRP contains pointers to members that won't be accessible in user space.

You'll need to process these packets in your driver and then convert them to a form that can be processed by your user mode application.

By doing this, you can define structures that can be shared between your driver and your application.
 
Share this answer
 

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900