从 Windows KMD 调用用户空间 API 函数? [英] Calling user space API functions from a windows KMD?

问题描述

我想从 KMD(内核模式驱动程序)调用用户空间 Windows API 函数，但我不确定从哪里开始.我搜索了windows KMD 反向调用"，但找不到任何内容.我对 IRP 等有一点了解，但还不足以自己弄清楚.任何帮助将不胜感激！

I would like to call user space windows API functions from a KMD (Kernel mode driver) but I'm not sure where to go from here. I searched for "windows KMD inverted call" but couldn't find anything. I know a little bit about IRPs and such but not enough to be able to figure it out on my own. Any help would be appreciated!

推荐答案

您需要一个在用户模式下为您的驱动程序进行调用的辅助服务.反向调用模型已经在 WinNT 上使用了很长时间，也可以使用在使用 KMDF.

You need a helper service in user mode that makes the call for your driver. The inverted call model has been used on WinNT for ages and can also be used in with KMDF.

在 OSR 邮件列表 中搜索有关此模型和其他模型的无休止的讨论替代方案.

Search the OSR mailing list for endless discussions about this model and other alternatives.

这篇关于从 Windows KMD 调用用户空间 API 函数?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！