windows - Windbg ethread - IrpList location -

-

i'm struggling make sense of output windbg.

what i'm trying find out how many irps (interrupt request packets) queued in particular thread, here have:

lkd> !thread thread fffffa8001fce270 irp list: fffffa8001cf3b60 ...

so tells me current thread has 1 irp in it's list, , it's address.

however, next command what's confusing me slightly:

lkd> ??@$thread->irplist struct _list_entry [ 0xfffffa8001cf3b80 - 0xfffffa8001cf3b80 ] +0x000 flink   0xfffffa8001cf3b80 _list_entry [ 0xfffffa8001fce658 -     0xfffffa8001fce658] +0x000 blink   0xfffffa8001cf3b80 _list_entry [ 0xfffffa8001fce658 -     0xfffffa8001fce658]

all of information coming out of _ethread structure, , according windbg offset 'irplist' element in structure 0x3e8.

so if thread (_ethread) starts @ offset 0xfffffa8001fce270, irplist element should @ offset 0xfffffa8001fce658 (0xfffffa8001fce270 + 0x3e8)

however, don't understand why windbg reporting irp list entry @ offset 0xfffffa8001cf3b80.

i'm getting wrong end of stick here, if can point me in right direction, i'd appreciate it.

thanks

the list address not 0xfffffa8001cf3b80. that's address of list entry in irp, @ irp+0x20 (0xfffffa8001cf3b60 + 0x20 = 0xfffffa8001cf3b80). list entry address in ethread 0xfffffa8001fce658 (0xfffffa8001fce658 - fffffa8001fce270 = 0x3e8).


Comments

Post a Comment

Popular posts from this blog

c++ - Creating new partition disk winapi -

-
i'am trying create new partition , mount volume new, thought createfile let me this, code : lpctstr lpfilename=l"\\\\.\\device\\harddisk0\\partition3"; handle handl=createfile( lpfilename, generic_read | generic_write, file_share_read | file_share_write, null, create_always, file_attribute_normal, null ); if (handl==invalid_handle_value) { qdebug()<<"handl invalid"<<" error"<<getlasterror();} bool success = definedosdevice(ddd_raw_target_path,l"i:",l"\\device\\harddisk0\\partition3"); if(!success) qdebug()<<" definedosdevice failed "<<getlasterror(); bflag = getvolumenameforvolumemountpoint( l"i:\\", // input volume mount point or directory /** u in dir
Read more

Android Prevent Bluetooth Pairing Dialog -

-
i'm developing internal application uses bluetooth printing. want bluetooth pairing occur without user input. have managed working trapping android.bluetooth.device.action.pairing_request broadcast. in broadcast receiver call setpin method, , pairing works ok, bluetoothpairingdialog displayed second or two, disappears - see link below. https://github.com/android/platform_packages_apps_settings/blob/master/src/com/android/settings/bluetooth/bluetoothpairingdialog.java since broadcast non-ordered, can't call abortbroadcast() , , wondering if there other way prevent pairing dialog appearing. can hook window manager in way? i haven't been able come way without modifying sdk. if you're oem, it's easy (i'm on 4.3): in packages/apps/settings/androidmanifest.xml, comment intent filter pairing dialog: <activity android:name=".bluetooth.bluetoothpairingdialog" android:label="@string/bluetooth_pairing_request"
Read more

VBA function to include CDATA -

-
i have following function include cdata: function cdatasection() dim objdom domdocument dim objkmlrootelement ikmldomelement dim objkmlelement ikmldomelement dim cdata ikmldomcdatasection set objdom = new domdocument set objkmlrootelement = objdom.createelement("balloonstyle") objdom.appendchild objkmlrootelement set objkmlelement = objdom.createelement("text") objkmlrootelement.appendchild objkmlelement set cdata = objdom.createcdatasection("text") cdata.data = "<![cdata[<b>latitude = $[latitude]</b>?]]>;" end function when run above, getting error "user defined data type not found" function. yes ripster says find library reference. vba window tools>references for list of relevant references see... http://msdn.microsoft.com/en-us/library/windows/desktop/ms763701%28v=vs.85%29.aspx however, if have hard time tracking down reference, replace dim sta
Read more