PrepAway - Latest Free Exam Questions & Answers

Which field of the IRP contains the kernel address?

You are the IT professional who work in an International company named Wiikigo. You are experienced in troubleshooting operating systems and applications that are not working correctly, identifying code defects and so on. You have enough knowledge on windows internals and you provide technical support for the company. According to the company requirement, an I/O dispatch routine is being written by you for a Windows device driver. buffered I/O is supported by the device driver. 1 KB of data to the user process is transferred by the dispatch routine. The kernel address of the 1-KB buffer needs to be retrieved from the I/O request packet (IRP). Which field of the IRP contains the kernel address?

PrepAway - Latest Free Exam Questions & Answers

A.
Irp->UserBuffer

B.
Irp->Overlay.UserApcContext

C.
Irp->Tail.Overlay.DriverContext[0]

D.
Irp->AssociatedIrp.SystemBuffer


Leave a Reply