hoonzang's CFPs: 25 new messages in 12 topics

microsoft.public.development.device.drivers
http://groups.google.com/group/microsoft.public.development.device.drivers?hl=en

microsoft.public.development.device.drivers@googlegroups.com

Today's topics:

==============================================================================
TOPIC: Will R200 sample in WDK6000 work when VidPN support changed to MMDMM_
SUPPORT_TEST?
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/34235baa4de50a41?hl=en
==============================================================================

== 1 of 2 ==
Date: Fri, May 23 2008 12:17 am
From: jerry lee

In line 1887 of source file miniport.c, if changing the
dwMMDMMSupportType from MMDMM_SUPPORT_XDDM_PARITY to
MMDMM_SUPPORT_TEST, it seems that the built driver will light only
one of two pixel in VGA monitor and the rest be black. If changed
back to MMDMM_SUPPORT_XDDM_PARITY, then everything will be OK. I am
using a Radeon 8500 with 64M DDR installed.

Anyone encounter such probelm?

== 2 of 2 ==
Date: Fri, May 23 2008 4:23 am
From: jerry lee

After some tracing work, It seems all of the 4 source mode IDs used in
the VidPN test path are not included in correspoding XDDM version. Why
DDK provide VidPN test in this way?

==============================================================================
TOPIC: How to block system copy commands at driver level
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/2c573ec4329d1cbc?hl=en
==============================================================================

== 1 of 5 ==
Date: Fri, May 23 2008 12:21 am
From: "David Craig"

This question has been asked and answered many times in the last few months.
I guess there is someone out there hiring companies to implement an
anti-copy driver. Maybe they are offering a large completion payment with
nothing until it is done. The answer is NO. Until you learn how Windows
works, you cannot prevent copying and you can't understand why it cannot be
done. I can think of only one solution for Windows and it is not practical.
The other choice is to write your own OS that has different rules.

Put the data to be protected in a directory. Encrypt that directory's files
with a symmetric key or multiple keys. Store those keys on a SmartCard
protected with the public key used to encrypt them before they are added.
Issue a CD/DVD/USB drive with the files on it, a SmartCard reader, & the
fully initialized SmartCard. Write an application that permits the files to
be viewed, but does not respond to any key strokes that might copy the data
in the viewer. That still won't protect against cameras or screen capture
programs, but it is about as good as it can be done. You need a separate
encryption key for each copy of the files to provide post compromise
security. If you try and use normal programs such as Notepad, Wordpad, or
Word the data must be placed in plaintext in the buffers where another
driver can obtain access easily. The Windows filesystems just don't work if
encryption is done closer to the application unless it is within the
application's context as part of its code or an injected DLL.

"Bipin Mistry" <bpnmistry@gmail.com> wrote in message
news:6a3688db-4c57-4671-a27c-30043ef6aa32@s33g2000pri.googlegroups.com...
> Hello,
>
> How can I trace following System Copy commands and block them, so as
> secured folder/drive do not react to these commands.
>
> 1. [Ctrl + C],
> 2. Right Click Menu -> Copy
> 3. File Menu -> Copy
> 4. Command prompt copy
>
> As per me all above command will be calling a single rutine process at
> driver level.
> I am unable to identify which rutine dose it call & how can I identify
> that the any of above 4 are triggered.
>
> During my RnD till now I reached till IRP_MJ_READ & WRITE where by
> related parameters and their properties do not describe about COPY in
> specifically.
>
> Some place I read about this can be posible with keeping watch on
> Clipboard, dont know how much this will be useful, as there was no
> extra informaiton was provided.
>
> If any one can help me out for this situation then please do share
> your knowledge with me.
>
> Best regards,
> Bipin

== 2 of 5 ==
Date: Fri, May 23 2008 12:49 am
From: Bipin Mistry

Hello David,

Up to the extent I agree with you that this task can not be done
unless we know how Windows works with these events at low level.

> Put the data to be protected in a directory. Encrypt that directory's files
> with a symmetric key or multiple keys. Store those keys on a SmartCard
> protected with the public key used to encrypt them before they are added.
> Issue a CD/DVD/USB drive with the files on it, a SmartCard reader, & the
> fully initialized SmartCard. Write an application that permits the files to
> be viewed, but does not respond to any key strokes that might copy the data
> in the viewer.

I also do agree as am currently working on bit similer system, now
requirements dose says that copy protection for basic copy commands
need to be ignored/blocked when such restricted data are concerned.

If you have / come accross to know about any thing that can help me
then please do post it, so as I can work arround & complete my task.

Bipin

On May 23, 4:21 pm, "David Craig" <driv...@nowhere.us> wrote:
> This question has been asked and answered many times in the last few months.
> I guess there is someone out there hiring companies to implement an
> anti-copy driver. Maybe they are offering a large completion payment with
> nothing until it is done. The answer is NO. Until you learn how Windows
> works, you cannot prevent copying and you can't understand why it cannot be
> done. I can think of only one solution for Windows and it is not practical.
> The other choice is to write your own OS that has different rules.
>
> Put the data to be protected in a directory. Encrypt that directory's files
> with a symmetric key or multiple keys. Store those keys on a SmartCard
> protected with the public key used to encrypt them before they are added.
> Issue a CD/DVD/USB drive with the files on it, a SmartCard reader, & the
> fully initialized SmartCard. Write an application that permits the files to
> be viewed, but does not respond to any key strokes that might copy the data
> in the viewer. That still won't protect against cameras or screen capture
> programs, but it is about as good as it can be done. You need a separate
> encryption key for each copy of the files to provide post compromise
> security. If you try and use normal programs such as Notepad, Wordpad, or
> Word the data must be placed in plaintext in the buffers where another
> driver can obtain access easily. The Windows filesystems just don't work if
> encryption is done closer to the application unless it is within the
> application's context as part of its code or an injected DLL.
>
> "Bipin Mistry" <bpnmis...@gmail.com> wrote in message
>
> news:6a3688db-4c57-4671-a27c-30043ef6aa32@s33g2000pri.googlegroups.com...
>
>
>
> > Hello,
>
> > How can I trace following System Copy commands and block them, so as
> > secured folder/drive do not react to these commands.
>
> > 1. [Ctrl + C],
> > 2. Right Click Menu -> Copy
> > 3. File Menu -> Copy
> > 4. Command prompt copy
>
> > As per me all above command will be calling a single rutine process at
> > driver level.
> > I am unable to identify which rutine dose it call & how can I identify
> > that the any of above 4 are triggered.
>
> > During my RnD till now I reached till IRP_MJ_READ & WRITE where by
> > related parameters and their properties do not describe about COPY in
> > specifically.
>
> > Some place I read about this can be posible with keeping watch on
> > Clipboard, dont know how much this will be useful, as there was no
> > extra informaiton was provided.
>
> > If any one can help me out for this situation then please do share
> > your knowledge with me.
>
> > Best regards,
> > Bipin- Hide quoted text -
>
> - Show quoted text -

== 3 of 5 ==
Date: Fri, May 23 2008 5:01 am
From: "Don Burn"

And the answer is there are no basic copy commands. All you are going to
see are reads and writes, there is no concept of copying at the kernel
level. So unless you want to make a file so it cannot be read (which makes
it rather useless) you cannot stop copying. Go to http://www.osronline.com/

and join the NTFSD newsgroup, and then start reading the archives, this has
been discussed way too many times.

--
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply

"Bipin Mistry" <bpnmistry@gmail.com> wrote in message
news:7b8f425d-e3c1-41c5-a321-5cb18c07899b@l17g2000pri.googlegroups.com...
Hello David,

Up to the extent I agree with you that this task can not be done
unless we know how Windows works with these events at low level.

> Put the data to be protected in a directory. Encrypt that directory's
> files
> with a symmetric key or multiple keys. Store those keys on a SmartCard
> protected with the public key used to encrypt them before they are added.
> Issue a CD/DVD/USB drive with the files on it, a SmartCard reader, & the
> fully initialized SmartCard. Write an application that permits the files
> to
> be viewed, but does not respond to any key strokes that might copy the
> data
> in the viewer.

If you have / come accross to know about any thing that can help me
then please do post it, so as I can work arround & complete my task.

Bipin

On May 23, 4:21 pm, "David Craig" <driv...@nowhere.us> wrote:
> This question has been asked and answered many times in the last few
> months.
> I guess there is someone out there hiring companies to implement an
> anti-copy driver. Maybe they are offering a large completion payment with
> nothing until it is done. The answer is NO. Until you learn how Windows
> works, you cannot prevent copying and you can't understand why it cannot
> be
> done. I can think of only one solution for Windows and it is not
> practical.
> The other choice is to write your own OS that has different rules.
>
> Put the data to be protected in a directory. Encrypt that directory's
> files
> with a symmetric key or multiple keys. Store those keys on a SmartCard
> protected with the public key used to encrypt them before they are added.
> Issue a CD/DVD/USB drive with the files on it, a SmartCard reader, & the
> fully initialized SmartCard. Write an application that permits the files
> to
> be viewed, but does not respond to any key strokes that might copy the
> data
> in the viewer. That still won't protect against cameras or screen capture
> programs, but it is about as good as it can be done. You need a separate
> encryption key for each copy of the files to provide post compromise
> security. If you try and use normal programs such as Notepad, Wordpad, or
> Word the data must be placed in plaintext in the buffers where another
> driver can obtain access easily. The Windows filesystems just don't work
> if
> encryption is done closer to the application unless it is within the
> application's context as part of its code or an injected DLL.
>
> "Bipin Mistry" <bpnmis...@gmail.com> wrote in message
>
> news:6a3688db-4c57-4671-a27c-30043ef6aa32@s33g2000pri.googlegroups.com...
>
>
>
> > Hello,
>
> > How can I trace following System Copy commands and block them, so as
> > secured folder/drive do not react to these commands.
>
> > 1. [Ctrl + C],
> > 2. Right Click Menu -> Copy
> > 3. File Menu -> Copy
> > 4. Command prompt copy
>
> > As per me all above command will be calling a single rutine process at
> > driver level.
> > I am unable to identify which rutine dose it call & how can I identify
> > that the any of above 4 are triggered.
>
> > During my RnD till now I reached till IRP_MJ_READ & WRITE where by
> > related parameters and their properties do not describe about COPY in
> > specifically.
>
> > Some place I read about this can be posible with keeping watch on
> > Clipboard, dont know how much this will be useful, as there was no
> > extra informaiton was provided.
>
> > If any one can help me out for this situation then please do share
> > your knowledge with me.
>
> > Best regards,
> > Bipin- Hide quoted text -
>
> - Show quoted text -

== 4 of 5 ==
Date: Fri, May 23 2008 7:13 am
From: "Alexander Grigoriev"

No can do. Sorry. If you can read the file, you can copy it. If you cannot
read the file, you cannot copy it, then the file just like it does not exist
for you, you can't see its contents. No File, no copy. Have file, can read
it, can copy. So simple.

The best thing you can do is to disable write to removeable devices, or to
disable them altogether. Search MS Kludge^H^H^H^H^^HKnowlegebase for that.
And only enable launch of approved applications.

Customers who order such kind of things again and again just don't
understand it. They just ask to implement wrong solution for a problem.

== 5 of 5 ==
Date: Fri, May 23 2008 9:08 am
From: "Eugene Mayevski"

Hello!
You wrote on Fri, 23 May 2008 00:49:11 -0700 (PDT):

BM> I also do agree as am currently working on bit similer system, now
BM> requirements dose says that copy protection for basic copy commands
BM> need to be ignored/blocked when such restricted data are concerned.
BM> If you have / come accross to know about any thing that can help me
BM> then please do post it, so as I can work arround & complete my task.

While you can't restrict copying, you can control, what processes are
allowed to open the file and so restrict copying.

Check this article: http://eldos.com/solfs/articles/5016.php

With best regards,
Eugene Mayevski
http://mayevski.blogspot.com/

==============================================================================
TOPIC: nonpnp driver installation fialed in vista
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/c326654f1fc5708a?hl=en
==============================================================================

== 1 of 1 ==
Date: Fri, May 23 2008 12:50 am
From: vijay

> did you instal KMDF v1.7 on the machine before starting the exe?
yes i have instaled(on target system) wdk which using "KMDF lib
version Major 0x1, minor 0x7 ".
and stil i am geting "Service open failed with error code=1060"

any more i need to do in the target system

> Please do not send e-mail directly to this alias. this alias is for
> newsgroup purposes only.
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "vijay" <vijaykati...@gmail.com> wrote in message
>
> news:19c48936-4f59-4029-90fc-160e51b28d8c@t12g2000prg.googlegroups.com...
>
>
>
> > Hello everyone
> > I am using "WinDDK\6001.17121" and trying to install nonpnpdriver
> > given in the sample "\src\kmdf\nonpnp" in WDK onVISTAusing
> > application given in "\src\kmdf\nonpnp\exe" and it is giving error
> > ---------
> > "Service open failed with error code=1060" and DriverEntry is not
> > called.
> > i think problem is in "service(DriverType)" creation and open it.
> > i don't know why it is happening inVISTA.......????
> > [ while it is working fine in WINXP].
>
> > thanks
> > vijay- Hide quoted text -
>
> - Show quoted text -

==============================================================================
TOPIC: INF for 2008 x64
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/ed6caab66b0fb3c9?hl=en
==============================================================================

== 1 of 1 ==
Date: Fri, May 23 2008 1:06 am
From: "muriwai"

It was because of Windows failing to install drivers from Z:\ mapped to
VMWare's \\.host. Once copied to a local drive, the INF file is displayed as
signed with Authenticode and installs.

"muriwai" <muriwai@nospam.nospam> wrote in message
news:%23KhWGazuIHA.1220@TK2MSFTNGP04.phx.gbl...
> Hi,
>
> I have an INF file for a 32/64-bit driver which works fine on 2003 x86/x64
> and 2008 x86. Server 2008 x64 does not recognize the INF saying that the
> folder does not contain a compatible software driver for my device. I
> enabled TESTSIGNING and signed the CAT with a WHQL test signature, but
> that didn't help. Is there a magical word I need to put into INF specially
> for Server 2008 x64?
>
> Thank you

==============================================================================
TOPIC: 2008 x64 signing
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/a5de999e2d4317f2?hl=en
==============================================================================

== 1 of 4 ==
Date: Fri, May 23 2008 1:05 am
From: "muriwai"

Thank you Gianluca.

The problem of the INF file not being recognized was because of Windows
failing to install drivers from Z:\ mapped to VMWare's \\.host. Once copied
to a local drive, the INF file is displayed as signed with Authenticode and
installs. It took hours to figure out what was happening.

However, the driver still won't start. I will post an updated question
separately.

Cheers

"Gianluca Varenni" <gianluca.varenni@community.nospam> wrote in message
news:%23MNk341uIHA.5472@TK2MSFTNGP06.phx.gbl...
>
> "muriwai" <muriwai@nospam.nospam> wrote in message
> news:edL9JKsuIHA.1220@TK2MSFTNGP04.phx.gbl...
>> Hi,
>>
>> I had the impression that I need to get a WHQL signature to have my
>> driver loaded on Server 2008 x64.
>>
>> After carefully studying the latest DDK documentation along with the
>> white paper
>> http://download.microsoft.com/download/9/c/5/9c5b2167-8017-4bae-9fde-d599bac8184a/kmsigning.doc I
>> started to think that an SPC from Verisign with a cross-certificate is
>> enough, as long as the Windows Logo is not required, even for the drivers
>> for which there's a WHQL test.
>>
>> ms-help://MS.WDK.v10.6001.071220/DevInst_d/hh/DevInst_d/driver-signing-over_838ed908-96ff-411c-a5f3-c253e7e7cb53.xml.htm
>>
>> "To be considered signed by PnP device installation, the catalog file of
>> the driver must be signed by WHQL ***or*** signed by a third-party
>> release certificate (a Software Publisher Certificate (SPC) or a
>> commercial release certificate). A WHQL release signature ***should***
>> (not MUST) be used if one can be obtained. "
>>
>> "Note also that for 64-bit versions of Windows Server 2008 and Windows
>> Vista, the kernel-mode code signing policy further requires that a
>> kernel-mode driver be signed by WHQL ***or*** by an SPC"
>>
>> I did a quick test and my non-boot driver doesn't get loaded on Windows
>> 2008 x64 even when it has an embedded SPC signature and an SPC-signed
>> .CAT file, both with the cross certificate. 2008 x64 doesn't even
>> recognize the INF as valid (it works fine on 2003 x64).
>>
>> Where's the truth?
>
> On vista x64 and 2k8 x64, drivers should either be WHQL signed or signed
> with a third certificate+cross signing. I have at least a couple of
> drivers that are in the latter way.
> Did you follow the instructions at
> http://www.microsoft.com/whdc/winlogo/drvsign/kmcs_walkthrough.mspx to
> sign your driver?
> It's my understanding that you signed both the binary and the CAT file.
> You need to sign just one of them. If you sign both (binary and CAT) you
> need to be careful to generate the CAT file *after* you have signed the
> binary, otherwise the CAT file does not contain the right hash for the
> binary.
>
> Have a nice day
> GV
>
> --
> Gianluca Varenni, Windows DDK MVP
>
> CACE Technologies
> http://www.cacetech.com
>
>
>>
>> Thanks
>
>

== 2 of 4 ==
Date: Fri, May 23 2008 3:29 am
From: "muriwai"

"Gianluca Varenni" <gianluca.varenni@community.nospam> wrote in message
news:%23MNk341uIHA.5472@TK2MSFTNGP06.phx.gbl...
> On vista x64 and 2k8 x64, drivers should either be WHQL signed or signed
> with a third certificate+cross signing. I have at least a couple of
> drivers that are in the latter way.

Well, it does not seem to be the case. During installation, my tape driver
is displayed as signed by my company.

Once installed, the driver fails to start - "Windows cannot load the device
driver for this hardware. The driver may be corrupted or missing (Code 39)".

The CodeIntegrity log displays "3004 Windows is unable to verify the image
integrity of the file
\Device\HarddiskVolume1\Windows\System32\drivers\MyDriver.sys because file
hash could not be found on the system. A recent hardware or software change
might have installed a file that is signed incorrectly or damaged, or that
might be malicious software from an unknown source."

When I do "bcdedit -set TESTSIGNING ON" and restart, the driver starts up
OK.

When I do "bcdedit -set TESTSIGNING OFF" and restart, the driver fails to
start.

In both cases, Windows displays "Digital signer: My Company" in the driver's
properties.

I sign the CAT file with:
c:\winddk\6001.18001\BIN\catalog\signtool.exe sign /ac
c:\CrossCertificates\MSCV-VSClass3.cer /du "http://www.company.com"
/n "Company Name" /t "http://timestamp.verisign.com/scripts/timstamp.dll"
MyDriver.cat

I verify the signature with:
SignTool verify /kp /v /c MyDriver.cat MyDriver.sys

It looks like it wants ONLY WHQL-signed drivers.

I also suspect that the cross-certificate doesn't get embedded into the
signature. SignTool produces a file of the same length regardless of whether
the "/ac MSCV-VSClass3.cer" option is specified or not. How do I verify the
cross-certificate is there?

Thanks,

Andrew

== 3 of 4 ==
Date: Fri, May 23 2008 7:00 am
From: "Maxim S. Shatskih"

Try signing the binary itself instead of the CAT file.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@storagecraft.com
http://www.storagecraft.com

"muriwai" <muriwai@nospam.nospam> wrote in message
news:uM0oa$LvIHA.4876@TK2MSFTNGP02.phx.gbl...
> "Gianluca Varenni" <gianluca.varenni@community.nospam> wrote in message
> news:%23MNk341uIHA.5472@TK2MSFTNGP06.phx.gbl...
> > On vista x64 and 2k8 x64, drivers should either be WHQL signed or signed
> > with a third certificate+cross signing. I have at least a couple of
> > drivers that are in the latter way.
>
> Well, it does not seem to be the case. During installation, my tape driver
> is displayed as signed by my company.
>
> Once installed, the driver fails to start - "Windows cannot load the device
> driver for this hardware. The driver may be corrupted or missing (Code 39)".
>
> The CodeIntegrity log displays "3004 Windows is unable to verify the image
> integrity of the file
> \Device\HarddiskVolume1\Windows\System32\drivers\MyDriver.sys because file
> hash could not be found on the system. A recent hardware or software change
> might have installed a file that is signed incorrectly or damaged, or that
> might be malicious software from an unknown source."
>
> When I do "bcdedit -set TESTSIGNING ON" and restart, the driver starts up
> OK.
>
> When I do "bcdedit -set TESTSIGNING OFF" and restart, the driver fails to
> start.
>
> In both cases, Windows displays "Digital signer: My Company" in the driver's
> properties.
>
> I sign the CAT file with:
> c:\winddk\6001.18001\BIN\catalog\signtool.exe sign /ac
> c:\CrossCertificates\MSCV-VSClass3.cer /du "http://www.company.com"
> /n "Company Name" /t "http://timestamp.verisign.com/scripts/timstamp.dll"
> MyDriver.cat
>
> I verify the signature with:
> SignTool verify /kp /v /c MyDriver.cat MyDriver.sys
>
> It looks like it wants ONLY WHQL-signed drivers.
>
> I also suspect that the cross-certificate doesn't get embedded into the
> signature. SignTool produces a file of the same length regardless of whether
> the "/ac MSCV-VSClass3.cer" option is specified or not. How do I verify the
> cross-certificate is there?
>
>
> Thanks,
>
> Andrew
>
>
>
>
>
> "Gianluca Varenni" <gianluca.varenni@community.nospam> wrote in message
> news:%23MNk341uIHA.5472@TK2MSFTNGP06.phx.gbl...
> >
> > "muriwai" <muriwai@nospam.nospam> wrote in message
> > news:edL9JKsuIHA.1220@TK2MSFTNGP04.phx.gbl...
> >> Hi,
> >>
> >> I had the impression that I need to get a WHQL signature to have my
> >> driver loaded on Server 2008 x64.
> >>
> >> After carefully studying the latest DDK documentation along with the
> >> white paper
> >>
http://download.microsoft.com/download/9/c/5/9c5b2167-8017-4bae-9fde-d599bac8184a/kmsigning.doc I
> >> started to think that an SPC from Verisign with a cross-certificate is
> >> enough, as long as the Windows Logo is not required, even for the drivers
> >> for which there's a WHQL test.
> >>
> >>
ms-help://MS.WDK.v10.6001.071220/DevInst_d/hh/DevInst_d/driver-signing-over_838
ed908-96ff-411c-a5f3-c253e7e7cb53.xml.htm
> >>
> >> "To be considered signed by PnP device installation, the catalog file of
> >> the driver must be signed by WHQL ***or*** signed by a third-party
> >> release certificate (a Software Publisher Certificate (SPC) or a
> >> commercial release certificate). A WHQL release signature ***should***
> >> (not MUST) be used if one can be obtained. "
> >>
> >> "Note also that for 64-bit versions of Windows Server 2008 and Windows
> >> Vista, the kernel-mode code signing policy further requires that a
> >> kernel-mode driver be signed by WHQL ***or*** by an SPC"
> >>
> >> I did a quick test and my non-boot driver doesn't get loaded on Windows
> >> 2008 x64 even when it has an embedded SPC signature and an SPC-signed
> >> .CAT file, both with the cross certificate. 2008 x64 doesn't even
> >> recognize the INF as valid (it works fine on 2003 x64).
> >>
> >> Where's the truth?
> >
> > On vista x64 and 2k8 x64, drivers should either be WHQL signed or signed
> > with a third certificate+cross signing. I have at least a couple of
> > drivers that are in the latter way.
> > Did you follow the instructions at
> > http://www.microsoft.com/whdc/winlogo/drvsign/kmcs_walkthrough.mspx to
> > sign your driver?
> > It's my understanding that you signed both the binary and the CAT file.
> > You need to sign just one of them. If you sign both (binary and CAT) you
> > need to be careful to generate the CAT file *after* you have signed the
> > binary, otherwise the CAT file does not contain the right hash for the
> > binary.
> >
> > Have a nice day
> > GV
> >
> > --
> > Gianluca Varenni, Windows DDK MVP
> >
> > CACE Technologies
> > http://www.cacetech.com
> >
> >
> >>
> >> Thanks
> >
> >
>

== 4 of 4 ==
Date: Fri, May 23 2008 12:19 pm
From: "muriwai"

It doesn't help to sign the binaries.

I can't see "Microsoft Root" in the signature. It looks like the
cross-certificate is not embedded. /ac is definitely processed by SignTool
because it fails when I pass an invalid file. I checked that the thumbprint
of the Verisign root certificate matches the cross-certificate. I use a
"Verisign Class 3 Code Signing 2004 CA" certificate issued in March this
year. I tried SignTool from recent both DDK and WDK.

Thanks

"Maxim S. Shatskih" <maxim@storagecraft.com> wrote in message
news:u3qQc1NvIHA.552@TK2MSFTNGP06.phx.gbl...
> Try signing the binary itself instead of the CAT file.
>
> --
> Maxim Shatskih, Windows DDK MVP
> StorageCraft Corporation
> maxim@storagecraft.com
> http://www.storagecraft.com
>
> "muriwai" <muriwai@nospam.nospam> wrote in message
> news:uM0oa$LvIHA.4876@TK2MSFTNGP02.phx.gbl...
>> "Gianluca Varenni" <gianluca.varenni@community.nospam> wrote in message
>> news:%23MNk341uIHA.5472@TK2MSFTNGP06.phx.gbl...
>> > On vista x64 and 2k8 x64, drivers should either be WHQL signed or
>> > signed
>> > with a third certificate+cross signing. I have at least a couple of
>> > drivers that are in the latter way.
>>
>> Well, it does not seem to be the case. During installation, my tape
>> driver
>> is displayed as signed by my company.
>>
>> Once installed, the driver fails to start - "Windows cannot load the
>> device
>> driver for this hardware. The driver may be corrupted or missing (Code
>> 39)".
>>
>> The CodeIntegrity log displays "3004 Windows is unable to verify the
>> image
>> integrity of the file
>> \Device\HarddiskVolume1\Windows\System32\drivers\MyDriver.sys because
>> file
>> hash could not be found on the system. A recent hardware or software
>> change
>> might have installed a file that is signed incorrectly or damaged, or
>> that
>> might be malicious software from an unknown source."
>>
>> When I do "bcdedit -set TESTSIGNING ON" and restart, the driver starts up
>> OK.
>>
>> When I do "bcdedit -set TESTSIGNING OFF" and restart, the driver fails to
>> start.
>>
>> In both cases, Windows displays "Digital signer: My Company" in the
>> driver's
>> properties.
>>
>> I sign the CAT file with:
>> c:\winddk\6001.18001\BIN\catalog\signtool.exe sign /ac
>> c:\CrossCertificates\MSCV-VSClass3.cer /du "http://www.company.com"
>> /n "Company Name" /t "http://timestamp.verisign.com/scripts/timstamp.dll"
>> MyDriver.cat
>>
>> I verify the signature with:
>> SignTool verify /kp /v /c MyDriver.cat MyDriver.sys
>>
>> It looks like it wants ONLY WHQL-signed drivers.
>>
>> I also suspect that the cross-certificate doesn't get embedded into the
>> signature. SignTool produces a file of the same length regardless of
>> whether
>> the "/ac MSCV-VSClass3.cer" option is specified or not. How do I verify
>> the
>> cross-certificate is there?
>>
>>
>> Thanks,
>>
>> Andrew
>>
>>
>>
>>
>>
>> "Gianluca Varenni" <gianluca.varenni@community.nospam> wrote in message
>> news:%23MNk341uIHA.5472@TK2MSFTNGP06.phx.gbl...
>> >
>> > "muriwai" <muriwai@nospam.nospam> wrote in message
>> > news:edL9JKsuIHA.1220@TK2MSFTNGP04.phx.gbl...
>> >> Hi,
>> >>
>> >> I had the impression that I need to get a WHQL signature to have my
>> >> driver loaded on Server 2008 x64.
>> >>
>> >> After carefully studying the latest DDK documentation along with the
>> >> white paper
>> >>
> http://download.microsoft.com/download/9/c/5/9c5b2167-8017-4bae-9fde-d599bac8184a/kmsigning.doc I
>> >> started to think that an SPC from Verisign with a cross-certificate is
>> >> enough, as long as the Windows Logo is not required, even for the
>> >> drivers
>> >> for which there's a WHQL test.
>> >>
>> >>
> ms-help://MS.WDK.v10.6001.071220/DevInst_d/hh/DevInst_d/driver-signing-over_838
> ed908-96ff-411c-a5f3-c253e7e7cb53.xml.htm
>> >>
>> >> "To be considered signed by PnP device installation, the catalog file
>> >> of
>> >> the driver must be signed by WHQL ***or*** signed by a third-party
>> >> release certificate (a Software Publisher Certificate (SPC) or a
>> >> commercial release certificate). A WHQL release signature ***should***
>> >> (not MUST) be used if one can be obtained. "
>> >>
>> >> "Note also that for 64-bit versions of Windows Server 2008 and Windows
>> >> Vista, the kernel-mode code signing policy further requires that a
>> >> kernel-mode driver be signed by WHQL ***or*** by an SPC"
>> >>
>> >> I did a quick test and my non-boot driver doesn't get loaded on
>> >> Windows
>> >> 2008 x64 even when it has an embedded SPC signature and an SPC-signed
>> >> .CAT file, both with the cross certificate. 2008 x64 doesn't even
>> >> recognize the INF as valid (it works fine on 2003 x64).
>> >>
>> >> Where's the truth?
>> >
>> > On vista x64 and 2k8 x64, drivers should either be WHQL signed or
>> > signed
>> > with a third certificate+cross signing. I have at least a couple of
>> > drivers that are in the latter way.
>> > Did you follow the instructions at
>> > http://www.microsoft.com/whdc/winlogo/drvsign/kmcs_walkthrough.mspx to
>> > sign your driver?
>> > It's my understanding that you signed both the binary and the CAT file.
>> > You need to sign just one of them. If you sign both (binary and CAT)
>> > you
>> > need to be careful to generate the CAT file *after* you have signed the
>> > binary, otherwise the CAT file does not contain the right hash for the
>> > binary.
>> >
>> > Have a nice day
>> > GV
>> >
>> > --
>> > Gianluca Varenni, Windows DDK MVP
>> >
>> > CACE Technologies
>> > http://www.cacetech.com
>> >
>> >
>> >>
>> >> Thanks
>> >
>> >
>>
>

==============================================================================
TOPIC: Remote Wakeup via USB Device Doesn't Wake Monitor Options
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/27ba453c5b3cc3f9?hl=en
==============================================================================

== 1 of 1 ==
Date: Fri, May 23 2008 3:11 am
From: Neo

Hi,

Can any one redirect me to any Knowledge Base for the same.

http://groups.google.co.in/group/microsoft.public.development.device.drivers/browse_thread/thread/33a19660fa2ff339/412401802f45f23d?hl=en&lnk=gst&q=monitor+wake+up#412401802f45f23d

My usb driver supports remote wake up. When I go into stand by mode,
and fore the remote wake up, the device come back up, but the monitor
stays in a suspended state. The only way to "wake up" the monitor is
to push a key on the keyboard?

It seems like windows (XP) is treating suspend like this:

1) Issue Suspend to Driver
2) Power off Monitor

---WAIT 4 REMOTE WAKEUP---

3) Remote wake up issued from microcontroller firmware
4) Driver receives event, and set's power back to D0.
5) Device in on, but monitor is in suspend state.

---PRESS KEY ON KEYBOARD---

6) Monitor wakes back up and displays desktop.

Thanks and Regards,
Neo

==============================================================================
TOPIC: IPrintOemDriverPS::DrvGetDriverSetting example
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/19a2276942e2b533?hl=en
==============================================================================

== 1 of 1 ==
Date: Fri, May 23 2008 3:33 am
From: patricerolland

hi all, i have a pb to use DrvGetDriverSetting it is not working with
some feature like "Orientation", do you have an example ?

thanks in advance
Patrice

==============================================================================
TOPIC: LEGACY_DRIVER question
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/cdcef8cb8419d52b?hl=en
==============================================================================

== 1 of 1 ==
Date: Fri, May 23 2008 3:31 am
From: qwert

I have a legacy driver.
In few systems I see my driver entry in Non plug and play section in device
manager.
But few systems doesnt have my driver in plug and play section.
In registry also i dont see Root\LEGACY_MYDRIVER\0000 entry in enum section
of my driver.
ie, HKLMcurrentcontrolset\services\mydriver\enum\
I believe that if only this entry is present in the registry I can see the
driver in non plug and play section in device manager.
who puts this entry in registry.
I see my driver appears in only few systems.
where can I check???

==============================================================================
TOPIC: How to show an cn n system tray of win XP when a USB devce is plug
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/3e304b56effd0976?hl=en
==============================================================================

== 1 of 5 ==
Date: Fri, May 23 2008 6:39 am
From: Electronic75

Hello, I've posted this question to different forums, including "code
project" but nobody answered me. I hope someone here can help me. I have a
USB instrument that uses FT232 USB chip with its own supplied drivers. I want
when I plug in the USB cord, an icon to be displayed in system tray that
shows a text tip message when mouse is over it. and when I unplug the cord
the icon goes away. How should I do this? I suspect that I have to edit .inf
files of driver but I don't know how. can anybody help me or give me a tip.
thanks a lot!

== 2 of 5 ==
Date: Fri, May 23 2008 7:20 am
From: "Kerem Gümrükcü"

Hi,

if your driver does not have a way to communicate to some
sort of user mode interface/application, then you have to write
a backgrounding application that receives Device Notifications
and ceates on device arrival a notification icon in the tray. The
Windows API comes with two API Functions that will help
you here: Shell_NotifyIcon(...) and RegisterDeviceNotification(...)
You also could write some Kernel Code, but if this is the only
requirement, displaying an icon in the tray and a tooltip,...this
usermode approach is sufficient,...

These are your friends:

RegisterDeviceNotification(...)
Shell_NotifyIcon(...)

See MSDN for more Information,...

There are tons of examples out there,...

Regards

Kerem

== 3 of 5 ==
Date: Fri, May 23 2008 8:05 am
From: Electronic75

Thanks a million time kerem!
you absolutely helped! I have developed a user mode application with MFC
that manages to communicate with instrument. So can I change text of tip
message from this program ? what function should I look for to change
properties of tray icon.

thanks a lot again
Best regards,

"Kerem Gümrükcü" wrote:

> Hi,
>
> if your driver does not have a way to communicate to some
> sort of user mode interface/application, then you have to write
> a backgrounding application that receives Device Notifications
> and ceates on device arrival a notification icon in the tray. The
> Windows API comes with two API Functions that will help
> you here: Shell_NotifyIcon(...) and RegisterDeviceNotification(...)
> You also could write some Kernel Code, but if this is the only
> requirement, displaying an icon in the tray and a tooltip,...this
> usermode approach is sufficient,...
>
> These are your friends:
>
> RegisterDeviceNotification(...)
> Shell_NotifyIcon(...)
>
> See MSDN for more Information,...
>
> There are tons of examples out there,...
>
> Regards
>
> Kerem
>
> --
> -----------------------
> Beste Grüsse / Best regards / Votre bien devoue
> Kerem Gümrükcü
> Microsoft Live Space: http://kerem-g.spaces.live.com/
> Latest Open-Source Projects: http://entwicklung.junetz.de
> -----------------------
> "This reply is provided as is, without warranty express or implied."
> "Electronic75" <Electronic75@discussions.microsoft.com> schrieb im
> Newsbeitrag news:070FFF26-5BE9-46CA-BD66-9A97E639A1E8@microsoft.com...
> > Hello, I've posted this question to different forums, including "code
> > project" but nobody answered me. I hope someone here can help me. I have a
> > USB instrument that uses FT232 USB chip with its own supplied drivers. I
> > want
> > when I plug in the USB cord, an icon to be displayed in system tray that
> > shows a text tip message when mouse is over it. and when I unplug the cord
> > the icon goes away. How should I do this? I suspect that I have to edit
> > .inf
> > files of driver but I don't know how. can anybody help me or give me a
> > tip.
> > thanks a lot!
> >
>
>
>

== 4 of 5 ==
Date: Fri, May 23 2008 8:14 am
From: Electronic75

Sorry you have mention it shell_notifyicon
I was too excited about a response that I didn't look carefully.
thanks a lot !
god bless you!
I wish you the best in your life!

"Kerem Gümrükcü" wrote:

== 5 of 5 ==
Date: Fri, May 23 2008 8:33 am
From: "Kerem Gümrükcü"

Hi,

>Sorry you have mention it shell_notifyicon
>I was too excited about a response that I didn't look carefully.
>thanks a lot !

You are welcome,...

>god bless you!
I really need it, i am/got very ill,....looks bad for me,...:(

>I wish you the best in your life!

Thanks,...

Regards

Kerem

--
-----------------------
Beste Grüsse / Best regards / Votre bien devoue
Kerem Gümrükcü
Microsoft Live Space: http://kerem-g.spaces.live.com/
Latest Open-Source Projects: http://entwicklung.junetz.de
-----------------------
"This reply is provided as is, without warranty express or implied."
"Electronic75" <Electronic75@discussions.microsoft.com> schrieb im
Newsbeitrag news:CACA9152-2D05-4F79-BE88-D3BB6CF734AE@microsoft.com...
>
> Sorry you have mention it shell_notifyicon
> I was too excited about a response that I didn't look carefully.
> thanks a lot !
> god bless you!
> I wish you the best in your life!
>
>
>
> "Kerem Gümrükcü" wrote:
>
>> Hi,
>>
>> if your driver does not have a way to communicate to some
>> sort of user mode interface/application, then you have to write
>> a backgrounding application that receives Device Notifications
>> and ceates on device arrival a notification icon in the tray. The
>> Windows API comes with two API Functions that will help
>> you here: Shell_NotifyIcon(...) and RegisterDeviceNotification(...)
>> You also could write some Kernel Code, but if this is the only
>> requirement, displaying an icon in the tray and a tooltip,...this
>> usermode approach is sufficient,...
>>
>> These are your friends:
>>
>> RegisterDeviceNotification(...)
>> Shell_NotifyIcon(...)
>>
>> See MSDN for more Information,...
>>
>> There are tons of examples out there,...
>>
>> Regards
>>
>> Kerem
>>
>> --
>> -----------------------
>> Beste Grüsse / Best regards / Votre bien devoue
>> Kerem Gümrükcü
>> Microsoft Live Space: http://kerem-g.spaces.live.com/
>> Latest Open-Source Projects: http://entwicklung.junetz.de
>> -----------------------
>> "This reply is provided as is, without warranty express or implied."
>> "Electronic75" <Electronic75@discussions.microsoft.com> schrieb im
>> Newsbeitrag news:070FFF26-5BE9-46CA-BD66-9A97E639A1E8@microsoft.com...
>> > Hello, I've posted this question to different forums, including "code
>> > project" but nobody answered me. I hope someone here can help me. I
>> > have a
>> > USB instrument that uses FT232 USB chip with its own supplied drivers.
>> > I
>> > want
>> > when I plug in the USB cord, an icon to be displayed in system tray
>> > that
>> > shows a text tip message when mouse is over it. and when I unplug the
>> > cord
>> > the icon goes away. How should I do this? I suspect that I have to edit
>> > .inf
>> > files of driver but I don't know how. can anybody help me or give me a
>> > tip.
>> > thanks a lot!
>> >
>>
>>
>>

==============================================================================
TOPIC: Where can I get a Full-Speed USB 2.0 Compliance test board?
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/3911137b2b7cac9e?hl=en
==============================================================================

== 1 of 1 ==
Date: Fri, May 23 2008 7:32 am
From: mdrissel

I need to do Windows Logo testing on my USB hub
(http://msdn.microsoft.com/en-us/library/bb892402.aspx) and the required
Cypress Full-Speed USB 2.0 Compliance test board sold by USB.org is
backordered for 3-6 months.

Where can I get one of these boards in the mean time? Or is my only option
to pay MCCI or NTS for WHQL certification?

==============================================================================
TOPIC: Jump to label
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/198317ef7afe42df?hl=en
==============================================================================

== 1 of 2 ==
Date: Fri, May 23 2008 8:50 am
From: Ray Trent

Doron Holan [MSFT] wrote:
> it is all a matter of style. typically you see one of three options
> 1) alot of nested if()s which check for success
> 2) a flat strucure of if()s, on failure goto error;
> 3) a do { } while (FALSE) loop. on error, you see a break; this is the
> same as #2

Or, in C++ (hehe), using the "resource allocation is initialization"
(RAII) paradigm to clean up from error conditions (or any other exit
from a block) automatically in a destructor. Kind of a pain to write in
the general case, but it does make maintaining the code a lot less
hazardous for junior programmers.

Lots of nested if's tend to make my head hurt, especially when it's time
to maintain the code. So to me this is one of the rare circumstances
where goto's actually make a lot of sense.

I don't much like the do while false trick because it leaves you stuck
in lots of situations like this:

do {
for(...) {
success = DoSomething();
if (!success) {
?????????
}
}
} while(FALSE);

It's especially pernicious when this happens accidentally because
another programmer came along and added the for loop.

Yes, you can get around that by having a error holding stack variable
that is checked after any nested loops, but ugh.
--
Ray

== 2 of 2 ==
Date: Fri, May 23 2008 9:03 am
From: "Egidio [MSFT]"

Plus applications often use try/catch/finally to be 'more' object oriented.

Egi.

"Doron Holan [MSFT]" <doronh@online.microsoft.com> wrote in message
news:u0Ji6uJvIHA.3780@TK2MSFTNGP03.phx.gbl...
> it is all a matter of style. typically you see one of three options
> 1) alot of nested if()s which check for success
> 2) a flat strucure of if()s, on failure goto error;
> 3) a do { } while (FALSE) loop. on error, you see a break; this is the
> same as #2
>
> it really just dpeends on what you want to maintain...
>
> d
>
> --
> Please do not send e-mail directly to this alias. this alias is for
> newsgroup purposes only.
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
> "Kid" <Kid@discussions.microsoft.com> wrote in message
> news:771ACB4A-2D5C-4699-AEB4-EF91CB6DABEB@microsoft.com...
>> Hi
>>
>> I've seen many driver source use goto error label in functions .
>>
>> Is it a good way to write driver functions ? I seldom found goto label
>> in
>> application
>> project source .
>>
>> Thank you.
>

==============================================================================
TOPIC: Register to wmi via wdf driver
http://groups.google.com/group/microsoft.public.development.device.drivers/browse_thread/thread/9df7f374843c9e91?hl=en
==============================================================================

== 1 of 1 ==
Date: Fri, May 23 2008 11:27 am
From: "Kumar Rajeev [MSFT]"

> NOTE:
> In the wdk 6001.1800 documentation, at the control logic devices section :
> there is an explanation about control logic devices and the possibility to
> register wmi provider for control logic device.

That would be a bug in documentation. You will find the following
description of Device parameter for WdfWmiProviderCreate DDI (and this is
correct):

Device
A handle to a framework device object that will be the new provider object's
parent object. The device object cannot be a control device object.

-kumar

"ariels" <ariels@discussions.microsoft.com> wrote in message
news:6A54DA84-3A55-4473-9EF9-5686AD10AE1A@microsoft.com...
> Hi Doron,
>
> So,if i have 4 pnp devices that i want to gather them under one control
> logic device, and to expose for the user mode only the control logic
> device
> handle
> (after all 4 pnp devices were found).
>
> there is away to expose it ??
> (for now the driver holds array of the control logic devices symbolic
> names
> and the user must first open handle to the driver and send ioctl to the
> driver for getting the symbolic names array )
>
> I tried to do it via the wmi (fire wmi event with the symbolic name each
> time logic device is ready for work).
>
> NOTE:
> In the wdk 6001.1800 documentation, at the control logic devices section :
> there is an explanation about control logic devices and the possibility to
> register wmi provider for control logic device.
>
> Please advice
> Thanks,
> Ariels
>
>
> "Doron Holan [MSFT]" wrote:
>
>> to further clarify, KMDF does not support registering with WMI on a
>> control
>> WDFDEVICE.
>>
>> d
>>
>> --
>> Please do not send e-mail directly to this alias. this alias is for
>> newsgroup purposes only.
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>> "Doron Holan [MSFT]" <doronh@online.microsoft.com> wrote in message
>> news:uF1EeAFvIHA.552@TK2MSFTNGP06.phx.gbl...
>> > which WDFDEVICE are you registering your WMI provider on? is it the
>> > same
>> > WDFDEVICE? or is each control logical device its own WDFDEVICE? If it
>> > is
>> > is own WDFDEVICE, is it a control WDFDEVICE or a PDO WDFDEVICE that you
>> > enumerate from the parent?
>> >
>> > d
>> >
>> > --
>> > Please do not send e-mail directly to this alias. this alias is for
>> > newsgroup purposes only.
>> > This posting is provided "AS IS" with no warranties, and confers no
>> > rights.
>> >
>> >
>> > "ariels" <ariels@discussions.microsoft.com> wrote in message
>> > news:99212326-1313-4E1C-8354-441FEF2A82A0@microsoft.com...
>> >> Hi,
>> >>
>> >> I have a problem with registering new wmi provider for my device
>> >> driver :
>> >>
>> >> My driver has control logical devices that controls pnp devices , each
>> >> control logical device registers one wmi provider.
>> >>
>> >> After the device created and the wmi create provider function
>> >> terminated
>> >> succesfuly.
>> >> it seems that it enter to the wdf01000.sys driver (swithing to other
>> >> thread
>> >> context that locks and raises the IRQL to dispatch then trying to
>> >> access
>> >> page
>> >> data and the driver crash)
>> >>
>> >> via the stack trace it seems that the bug check occures in the
>> >> wdf01000!FxWmiIrpHandler::_RegInfo function.
>> >>
>> >> I do not know if there is a problem in the wdf01000.sys or a problem
>> >> with
>> >> the parameters that were sent to wdf01000.sys driver by my driver via
>> >> the
>> >> WdfWmiInstanceCreate function .
>> >>
>> >> my driver crash with bugcheck IRQL_NOT_LESS_OR_EQUAL (a).
>> >>
>> >> here is the dump :
>> >>
>> >> IRQL_NOT_LESS_OR_EQUAL (a)
>> >> An attempt was made to access a pageable (or completely invalid)
>> >> address
>> >> at an
>> >> interrupt request level (IRQL) that is too high. This is usually
>> >> caused by drivers using improper addresses.
>> >> If a kernel debugger is available get the stack backtrace.
>> >> Arguments:
>> >> Arg1: ffffffe8, memory referenced
>> >> Arg2: d0000002, IRQL
>> >> Arg3: 00000001, bitfield :
>> >> bit 0 : value 0 = read operation, 1 = write operation
>> >> bit 3 : value 0 = not an execute operation, 1 = execute operation
>> >> (only
>> >> on
>> >> chips which support this level of status)
>> >> Arg4: 8086c736, address which referenced memory
>> >>
>> >> Debugging Details:
>> >> ------------------
>> >>
>> >>
>> >> WRITE_ADDRESS: ffffffe8
>> >>
>> >> CURRENT_IRQL: 2
>> >>
>> >> FAULTING_IP:
>> >> nt!ObfReferenceObject+18
>> >> 8086c736 f00fc106 lock xadd dword ptr [esi],eax
>> >>
>> >> DEFAULT_BUCKET_ID: DRIVER_FAULT
>> >>
>> >> BUGCHECK_STR: 0xA
>> >>
>> >> PROCESS_NAME: System
>> >>
>> >> TRAP_FRAME: f78f2b84 -- (.trap 0xfffffffff78f2b84)
>> >> ErrCode = 00000002
>> >> eax=00000001 ebx=85702000 ecx=00000000 edx=00000000 esi=ffffffe8
>> >> edi=85702024
>> >> eip=8086c736 esp=f78f2bf8 ebp=f78f2c40 iopl=0 nv up ei pl nz
>> >> na
>> >> po nc
>> >> cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
>> >> nt!ObfReferenceObject+0x18:
>> >> 8086c736 f00fc106 lock xadd dword ptr [esi],eax
>> >> ds:0023:ffffffe8=????????
>> >> Resetting default scope
>> >>
>> >> LAST_CONTROL_TRANSFER: from 80826967 to 80871f20
>> >>
>> >> STACK_TEXT:
>> >> f78f2780 80826967 00000003 00000000 00000000
>> >> nt!RtlpBreakWithStatusInstruction
>> >> f78f27cc 8082786b 00000003 ffffffe8 8086c736
>> >> nt!KiBugCheckDebugBreak+0x19
>> >> f78f2b64 8088c963 0000000a ffffffe8 d0000002 nt!KeBugCheck2+0x5e1
>> >> f78f2b64 8086c736 0000000a ffffffe8 d0000002 nt!KiTrap0E+0x2a7
>> >> f78f2bf8 f53bcaeb 8596ffa0 860edba4 f53d0ba0
>> >> nt!ObfReferenceObject+0x18
>> >> f78f2c40 f53bd1cb 8596ffa0 860eda38 00000000
>> >> wdf01000!FxWmiIrpHandler::_RegInfo+0x14c
>> >> f78f2c88 f5398665 860eda38 f78f2cb0 f5398888
>> >> wdf01000!FxWmiIrpHandler::Dispatch+0x1d8
>> >> f78f2c94 f5398888 8567a4f8 860eda38 c00000bb
>> >> wdf01000!FxDevice::Dispatch+0x7f
>> >> f78f2cb0 8081df65 8567a4f8 860eda38 860eda38
>> >> wdf01000!FxDevice::DispatchWithLock+0x7b
>> >> f78f2cc4 80980320 f78f2d48 860eda38 85702000 nt!IofCallDriver+0x45
>> >> f78f2cf0 809803e9 860eda38 0000000b 8567a402
>> >> nt!WmipForwardWmiIrp+0x17e
>> >> f78f2d1c 809821d3 0000000b 8567a4f8 00000000 nt!WmipSendWmiIrp+0x59
>> >> f78f2d58 80982275 85662ba0 00000000 f78f2d80
>> >> nt!WmipRegisterOrUpdateDS+0x53
>> >> f78f2d68 809825c2 85662ba0 8639b8d0 808ae5fc nt!WmipRegisterDS+0xf
>> >> f78f2d80 8088043d 00000000 00000000 8639b8d0
>> >> nt!WmipRegistrationWorker+0x50
>> >> f78f2dac 80949b7c 00000000 00000000 00000000 nt!ExpWorkerThread+0xeb
>> >> f78f2ddc 8088e062 80880352 00000001 00000000
>> >> nt!PspSystemThreadStartup+0x2e
>> >> 00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
>> >>
>> >>
>> >> STACK_COMMAND: kb
>> >>
>> >> FOLLOWUP_IP:
>> >> wdf01000!FxWmiIrpHandler::_RegInfo+14c
>> >> f53bcaeb 8b45e8 mov eax,dword ptr [ebp-18h]
>> >>
>> >> SYMBOL_STACK_INDEX: 5
>> >>
>> >> SYMBOL_NAME: wdf01000!FxWmiIrpHandler::_RegInfo+14c
>> >>
>> >> FOLLOWUP_NAME: MachineOwner
>> >>
>> >> MODULE_NAME: wdf01000
>> >>
>> >> IMAGE_NAME: wdf01000.sys
>> >>
>> >> DEBUG_FLR_IMAGE_TIMESTAMP: 47919015
>> >>
>> >> FAILURE_BUCKET_ID: 0xA_W_wdf01000!FxWmiIrpHandler::_RegInfo+14c
>> >>
>> >> BUCKET_ID: 0xA_W_wdf01000!FxWmiIrpHandler::_RegInfo+14c
>> >>
>> >> Followup: MachineOwner
>> >> ---------
>> >>
>> >> please advice
>> >> Thanks,
>> >> Ariels
>> >>
>> >>
>> >
>>
>>

==============================================================================

You received this message because you are subscribed to the Google Groups "microsoft.public.development.device.drivers"
group.

To post to this group, visit http://groups.google.com/group/microsoft.public.development.device.drivers?hl=en

To unsubscribe from this group, send email to microsoft.public.development.device.drivers-unsubscribe@googlegroups.com

To change the way you get mail from this group, visit:
http://groups.google.com/group/microsoft.public.development.device.drivers/subscribe?hl=en

To report abuse, send email explaining the problem to abuse@googlegroups.com

==============================================================================
Google Groups: http://groups.google.com?hl=en

hoonzang's CFPs

2008-05-23

25 new messages in 12 topics - digest

No comments:

About Me

Search This Blog

Blog Archive

Followers