- Log Mejor Functions
- Posted by Maruf Maniruzzaman on January 29th, 2008
I want to log (in memory in circular list type space- so I get it on BSOD)
all mejor function calls with some call parameters. I am thinking about
setting all mejor function to a single function, log it there and forward to
real function and log again on return. Would that be a good idea? Any idea or
comment?
--
Sincerely,
Maruf Maniruzzaman,
Software Engineer,
KAZ Software Limited,
Dhaka, Bangladesh.
http://kaz.com.bd
http://kuashaonline.com
This posting is provided "AS IS", and confers no rights.
- Posted by Volodymyr Shcherbyna on January 29th, 2008
You're quite limited on what you can do at HIGH_LEVEL (this is IRQL of
DispatchCallback), so don't expect that you will be able to save the log
data into log file. This is impossible.
Major function of what device are you trying to filter?
--
V
This posting is provided "AS IS" with no warranties, and confers no
rights.
"Maruf Maniruzzaman" <MarufManiruzzaman@discussions.microsoft.com> wrote in
message news:134AA3B0-78F7-4D1E-A289-7E0A8A138475@microsoft.com...
- Posted by Maruf Maniruzzaman on January 29th, 2008
I am sorry that I could not make my question clear. I am not working with
filter. Its a FSD. I am changing the source code of MajorFunction array to
assign a common dispatch function. Then in that function calling the actual
dispatch function switching using pIrpStack->MajorFunction:
DriverObject->MajorFunction[IRP_MJ_Whatever] = CommonDispatch;
--
Sincerely,
Maruf Maniruzzaman,
Software Engineer,
KAZ Software Limited,
Dhaka, Bangladesh.
http://kaz.com.bd
http://kuashaonline.com
This posting is provided "AS IS", and confers no rights.
"Volodymyr Shcherbyna" wrote:
- Posted by Doron Holan [MSFT] on January 29th, 2008
it is doable, but what are you going to log? the major function value and
PIRP pointer value? or are you going to look at the current stack
location's Parameters and log the specifics of each request (like buffer,
length, mdl, etc)?
d
--
Please do not send e-mail directly to this alias. this alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Maruf Maniruzzaman" <MarufManiruzzaman@discussions.microsoft.com> wrote in
message news:E834811A-E865-4FAC-BA7E-79A39F190691@microsoft.com...
- Posted by Maruf Maniruzzaman on January 31st, 2008
As much as possible. Actually it is not required in release version. Trying
to find out the cause of a rare BSOD. For a significant number of client
installations this happens on one or two systems per month. The code is 0x50
and we could not reproduce in lab.
--
Sincerely,
Maruf Maniruzzaman,
Software Engineer,
KAZ Software Limited,
Dhaka, Bangladesh.
http://kaz.com.bd
http://kuashaonline.com
This posting is provided "AS IS", and confers no rights.
"Doron Holan [MSFT]" wrote:
