Is a driver loading possible other driver in driver?

Discussion in 'Windows Vista Drivers' started by keandi, Nov 7, 2006.

  1. keandi

    keandi Guest


    I have two drivers. a.sys. b.sys

    Is a.sys possible loading b.sys? (kernel mode, not application, just
    keandi, Nov 7, 2006
    1. Advertisements

  2. Look at ZwLoadDriver().
    Jonathan Morrison, Nov 7, 2006
    1. Advertisements

  3. keandi

    soviet_bloke Guest

    Is a.sys possible loading b.sys?

    ZwLoadDriver() can do it - this is what SC Manager calls behind the

    Besides this, ZwSetSystemInformation() can do it, and, depending on
    info class, call its
    entry point. However, driver loaded with ZwSetSystemInformation() is
    pageable, and gets loaded into the address space of a calling process

    Why are you asking all this stuff????? Look - you are trying to do
    something advanced without knowing a *BASIC* system-level stuff, which
    is just ridiculous.....

    Anton Bassov
    soviet_bloke, Nov 7, 2006
  4. [off-topic mode on]

    Asking basic level questions is for sure not ridiculous in any way.

    The whole spirit and purpose of forums like this one is to help each
    other, not SHOUT or make fun of someone elses perplexity.

    If you feel like overqualified for this forum, you are welcome to find
    some other place to exchange driver development experiences.

    Otherwise, please confine yourself to helping people solve their
    technical problems.

    Thanks, Stephan
    [off-topic mode off]
    Stephan Wolf [MVP], Nov 7, 2006
  5. keandi

    soviet_bloke Guest


    It is obvious you are totally unaware what the whole thing is all about
    - you arguing against a statement that has been taken out of context.

    I would advise you, first of all, to check all threads where the OP has
    participated, so that you have a chance to see what the OP wants to do,
    as well as how much attention he pays to what we say. A this point you
    will understand what my statement actually says......

    Anton Bassov
    soviet_bloke, Nov 8, 2006
  6. ZwLoadDriver() will do what you want ... *BUT* it is does not work the way
    you think it works. First, it won't work for a pnp driver. Second, unlike
    FreeLibrary() in user mode, there is no reference count to keep the image in
    memory so anyone can ZwUnloadDriver later and if there are references, you
    can crash. If you make b.sys an export driver, the system does all of this
    for you.

    Doron Holan [MS], Nov 8, 2006
  7. keandi

    soviet_bloke Guest

    This is the only reason why I said the OP's approach is just ridiculous
    (apart from loading drivers right from the kernel the OP also plans to
    hook SSDT, although, in his particular situation, the whole thing can
    be easily handled by writing a conventional FS filter driver ).
    Whenever you go for something "not-so-conventional" you have to know
    what you are actually doing, and all the questions that the OP has
    asked us up to this point strongly suggest exactly the opposite......

    Anton Bassov
    soviet_bloke, Nov 8, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.