ZwReadFile crash on Windows 7 x64 (sysvad sample)

  • Thread starter Thread starter iz111
  • Start date Start date
I

iz111

Guest
Hi,

I'm developing audio driver which needs to read some data from the pipe.
To read the data, driver starts new thread using PsCreateSystemThread. New created thread connects to pipe
and read data using ZwReadFile. Read using ZwReadFile works on all machines (Win10, 7 x32, 8) except on Windows 7 x64 where sometimes crashes. Note that ZwReadFile reads data to preallocated BYTE array. Also, the IRQL level before ZwReadFile is PASSIVE_LEVEL.

On Windows 7 x64 crashes with following error:

BSOD error is IRQL_NOT_LESS_OR_EQUAL.1501524.png

When I remove ZwReadFile from code everything works fine. I've tried to use KeAcquireSpinLock and KeReleaseSpinLock
but with no effect.

What could cause this issue?

Continue reading...
 
Back
Top