NTSTATUS
IoCompletionRoutine(
        IN PDEVICE_OBJECT  DeviceObject,
        IN PIRP  Irp,
        IN PVOID  Context
        )
{
        *Irp->UserIosb = Irp->IoStatus;

        if (Irp->UserEvent)
                KeSetEvent(Irp->UserEvent, IO_NO_INCREMENT, 0);

        if (Irp->MdlAddress)
        {
                IoFreeMdl(Irp->MdlAddress);
                Irp->MdlAddress = NULL;
        }

        IoFreeIrp(Irp);

        return STATUS_MORE_PROCESSING_REQUIRED;
}

NTSTATUS
IrpFileWrite(
        IN PDEVICE_OBJECT DeviceObject,
        IN PFILE_OBJECT FileObject,
        IN PLARGE_INTEGER ByteOffset OPTIONAL,
        IN ULONG Length,
        IN PVOID Buffer,
        OUT PIO_STATUS_BLOCK IoStatusBlock
        )
{
        NTSTATUS status;
        KEVENT event;
        PIRP irp;
        PIO_STACK_LOCATION irpSp;
        IO_STATUS_BLOCK ioStatus;

        if (ByteOffset == NULL)
        {
                if (!(FileObject->Flags & FO_SYNCHRONOUS_IO))
                        return STATUS_INVALID_PARAMETER;

                ByteOffset = &FileObject->CurrentByteOffset;
        }

        if (FileObject->Vpb == 0 || FileObject->Vpb->RealDevice == NULL)
                return STATUS_UNSUCCESSFUL;

        //deviceObject = FileObject->Vpb->DeviceObject;
        irp = IoAllocateIrp(DeviceObject->StackSize, FALSE);

        if (irp == NULL)
                return STATUS_INSUFFICIENT_RESOURCES;

        irp->MdlAddress = IoAllocateMdl(Buffer, Length, FALSE, TRUE, NULL);

        if (irp->MdlAddress == NULL)
        {
                IoFreeIrp(irp);
                return STATUS_INSUFFICIENT_RESOURCES;;
        }

        MmBuildMdlForNonPagedPool(irp->MdlAddress);

        irp->Flags = IRP_WRITE_OPERATION;
        irp->RequestorMode = KernelMode;
        irp->UserIosb = &ioStatus;
        irp->UserEvent = &event;
        irp->Tail.Overlay.Thread = (PETHREAD)KeGetCurrentThread();
        irp->Tail.Overlay.OriginalFileObject = FileObject;

        irpSp = IoGetNextIrpStackLocation(irp);
        irpSp->MajorFunction = IRP_MJ_WRITE;
        irpSp->MinorFunction = IRP_MN_NORMAL;
        irpSp->DeviceObject = DeviceObject ;
        irpSp->FileObject = FileObject;
        irpSp->Parameters.Write.Length = Length;
        irpSp->Parameters.Write.ByteOffset = *ByteOffset;

        KeInitializeEvent(&event, SynchronizationEvent, FALSE);
        IoSetCompletionRoutine(irp, IoCompletionRoutine, NULL, TRUE, TRUE, TRUE);
        status = IoCallDriver(DeviceObject , irp);

        if (status == STATUS_PENDING)
                status = KeWaitForSingleObject(&event, Executive, KernelMode, TRUE, NULL);
       
       
        status = ioStatus.Status ;

        *IoStatusBlock = ioStatus;

        return status;
}

这段代码是从网上找的,  我用在 fs filter 里 写文件,  可是会出错, 那里不对劲呢?

[课程]Linux pwn 探索篇！