Satoshi Tanda

One idea is to map all 512GB (or whatever Windows supports) PA ranges except for ones backed by RAM with 1GB and 2MB mappings where possible. This, unfortunately, still requires...

I thought 250+ entries are a a lot, on second thought, it may be not as bad as I initially felt, especially because code architecture can be simpler and allocation...

Thank you for letting me know a way to "fix" the issue. I was unable to figure out that DriverVerifier was looking at PFN for the thread stack check. It...

Note that this issue prevent us from using a checked build too. It would be worth considering fixing this issue to have better tools for testing. Using KeExpandKernelStackAndCalloutEx() without returning...

Hi, thanks for the idea. I consciously made the decision to use #BP for few reasons. The primary one is actually to be able to handle smaller functions (especially on...

It does indeed look quite weird crash dump. What would you get if you set a break point onto `nt!RtlpGetStackLimitsEx+0x14acc5` (ie, int 29h) and reproduce the issue?

Windows driver developers (including Windows kernel developers) tend to prefer Windows software trace preprocessor (WPP), which is backed by the ETW technology, over debug prints in production code, since it...

Hi @janwilmans I also quickly coded the provider part with WPP and TraceLogging: [etw.zip](https://github.com/CobaltFusion/DebugViewPP/files/2454298/etw.zip) Some instructions and brief explanations are there as comments. Those are expected ouputs from the sample...

Thanks for explanation , Right, additional settings will be adding the VC++ directory path for the SDK in VS2013. What #3 should address is that projects are not loaded with...

Thank you for checking this tool and giving comments. Since the tool was written to satisfy just my purpose, it has very limited intelligence in it currently, and I do...