none
How can i retrieve info about IRP ? RRS feed

  • Question

  • When debugging a device driver how can retrieve the driver IRP information ? the irp it has registered ans sending and receiving ?

    which Commands i use from my windbg ? 


    Thanks 

     
    Sunday, October 30, 2016 6:00 AM

All replies

  • Place a breakpoint on the IRP dispatch routines (read, write, IOCTL, ...) and examine the IRP as it comes in.  If you are debugging a driver without source code look at the DriverObject then put breakpoints at all the addresses of the MajorFunction array.


    Don Burn Windows Driver Consulting Website: http://www.windrvr.com

    Sunday, October 30, 2016 11:47 AM