windowskernelprogrammingbook icon indicating copy to clipboard operation
windowskernelprogrammingbook copied to clipboard

Chapter 11 - IoGetDeviceObjectPointer for some devices return a wrong device object?!

Open subvert0r opened this issue 1 year ago • 0 comments

I am not sure what the problem is, but for volmgr devices, such as \device\harddiskvolumeX, IoGetDeviceObjectPointer returns a FltMgr device!

I know that IoGetDeviceObjectPointer returns the top most device in the stack, but FltMgr is on a whole different stack? At least based on !stack and device tree, FltMgr devices are completely on a different stack compared to the harddiskvolume devices, so is this normal or..? Any better way to do this other than using IoGetDeviceObjectPointer?

subvert0r avatar Sep 05 '24 13:09 subvert0r