windows kernel mode IOCTL returns random results

Posted by clyfe on Stack Overflow See other posts from Stack Overflow or by clyfe
Published on 2010-06-10T14:40:51Z Indexed on 2010/06/10 14:42 UTC
Read the original article Hit count: 373

Filed under:
|
|
|

I use the following code to fetch PSTORAGE_HOTPLUG_INFO capabilities from disks via IOCTL in a minifilter driver, but the returning hotplugInfo structure has all the fields set to random nonzero values on subsequent executions.
What am I doing wrong?

RESULT:

00000014 0.00046322 IOCTL Volume Media Removable, 64 
00000015 0.00046451 IOCTL Volume Media Hotplug 154 
00000016 0.00046562 IOCTL Volume Device Hotplug 244 

00000054 1020.44311523 IOCTL Volume Media Removable, 240 
00000055 1020.44311523 IOCTL Volume Media Hotplug 102 
00000056 1020.44311523 IOCTL Volume Device Hotplug 244 

Sample code:

 //int SomeFunction(PFLT_VOLUME pFLTVolume)

 STORAGE_HOTPLUG_INFO storageHotplugInfo;
 KEVENT event;
 IO_STATUS_BLOCK ioStatus;
 PIRP pirp;
 PDEVICE_OBJECT deviceObject;
 PSTORAGE_HOTPLUG_INFO hotplugInfo;

 ASSERT(KeGetCurrentIrql() <= DISPATCH_LEVEL);

 status = FltGetDiskDeviceObject(pFLTVolume, &deviceObject);

 if(!NT_SUCCESS(status)){
  DbgPrint("No Device for Volume\n");
  return 0;
 }

 KeInitializeEvent(&event, NotificationEvent, FALSE);

 ASSERT(KeGetCurrentIrql() <= APC_LEVEL);

 pirp = IoBuildDeviceIoControlRequest(
   IOCTL_STORAGE_GET_HOTPLUG_INFO,
   deviceObject,
   NULL,
   0,
   &storageHotplugInfo,
   sizeof(STORAGE_HOTPLUG_INFO),
   FALSE,
   &event,
   &ioStatus
 );

 if(!pirp){
  return 0;
 }

 ASSERT(KeGetCurrentIrql() <= DISPATCH_LEVEL);

 status = IoCallDriver(deviceObject, pirp);

 if (status == STATUS_PENDING) {

  status = KeWaitForSingleObject(
        &event,
        Executive,
        KernelMode,
        FALSE,
        NULL);

 } else {
  ioStatus.Status = status;
 }

 status = ioStatus.Status;

 hotplugInfo = (PSTORAGE_HOTPLUG_INFO) &pirp->AssociatedIrp.SystemBuffer;

 if(hotplugInfo->MediaRemovable){
  DbgPrint("IOCTL Volume Media Removable, %d\n", 
   hotplugInfo->MediaRemovable);
 }

 if(hotplugInfo->MediaHotplug){
  DbgPrint("IOCTL Volume Media Hotplug %d\n", 
   hotplugInfo->MediaHotplug);
 }

 if(hotplugInfo->DeviceHotplug){
  DbgPrint("IOCTL Volume Device Hotplug %d\n", 
   hotplugInfo->DeviceHotplug);
 }

 ObDereferenceObject(deviceObject);

© Stack Overflow or respective owner

Related posts about Windows

Related posts about driver