|
[求助]64 NDIS 驱动 获取并访问TCP头问题
谢谢各位回复, zhouws 说的对! 改成: pTcpHeader = (PTCP_HEADER)((char*)pIPHeader + HeaderLength); 可以了! |
|
[求助]64 NDIS 驱动 获取并访问TCP头问题
32位下访问没有问题,64位下崩溃,有没有搞过NDIS 64 的高手呀,帮忙指定一下,谢了! |
|
[求助]64 NDIS 驱动 获取并访问TCP头问题
kd> !analyze -v ERROR: FindPlugIns 80070015 ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If kernel debugger is available get stack backtrace. Arguments: Arg1: 000000000259afca, memory referenced Arg2: 0000000000000002, IRQL Arg3: 0000000000000000, value 0 = read operation, 1 = write operation Arg4: fffff88004cbde7d, address which referenced memory Debugging Details: ------------------ READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800040cf0e8 000000000259afca CURRENT_IRQL: 2 FAULTING_IP: passthru!AnalysisPacket+4cd [f:\work_ndis\sys\analysispacket.c @ 335] fffff880`04cbde7d 440fb74002 movzx r8d,word ptr [rax+2] CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0xD1 PROCESS_NAME: svchost.exe LAST_CONTROL_TRANSFER: from 0000000000000000 to 0000000000000000 STACK_TEXT: 00000000`00000000 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0 STACK_COMMAND: .bugcheck ; kb FOLLOWUP_IP: passthru!AnalysisPacket+4cd [f:\work_ndis\sys\analysispacket.c @ 335] fffff880`04cbde7d 440fb74002 movzx r8d,word ptr [rax+2] FAULTING_SOURCE_CODE: 331: pBiosBuffer = (void*)VirtualAddress; 332: } 333: }*/ 334: > 335: DbgPrint(" ### SourcePort=%u DestinationPort=%u" ,pTcpHeader->SourcePort ,pTcpHeader->DestinationPort); 336: 338: |
|
[原创]TDI防火墙框架
ConnectEventHandler , 连入的Event一直没有响应? |
|
[原创]TDI防火墙框架
// 备注: 拦截就返回 STATUS_FILE_CLOSED NTSTATUS TdiDispSend( IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp ) 返回 STATUS_FILE_CLOSED 就蓝屏? 是什么原因呀? |
操作理由
RANk
{{ user_info.golds == '' ? 0 : user_info.golds }}
雪币
{{ experience }}
课程经验
{{ score }}
学习收益
{{study_duration_fmt}}
学习时长
基本信息
荣誉称号:
{{ honorary_title }}
能力排名:
No.{{ rank_num }}
等 级:
LV{{ rank_lv-100 }}
活跃值:
在线值:
浏览人数:{{ visits }}
最近活跃:{{ last_active_time }}
注册时间:{{ user_info.create_date_jsonfmt }}
勋章
兑换勋章
证书
证书查询 >
能力值