Reply To: strange IRQL

Home Forums Discussions General Discussion strange IRQL Reply To: strange IRQL

#6208

Taras
Participant

ObjPtr[0] = &g_pWaitItem->hAllow;
ObjPtr[1] = &g_pWaitItem->hDeny;

hAllow, hDeny – are they handle of events? KeWaitForMultipleObjects may operate only with direct pointer to KEVENT struct. If you have handles, you should retrieve direct pointer by call ObReferenceObjectByHandle