Skip to content

Missing error handling in DriverEntry for process lookup and memory operations #2

@jsramesh1990

Description

@jsramesh1990

Description:
Current implementation assumes success of:

PsLookupProcessByProcessId
MmCopyVirtualMemory

Questions:

What is the correct way to handle failure cases in kernel drivers?
Should the driver return failure status instead of STATUS_SUCCESS if operations fail?
How should cleanup be handled on partial initialization failure?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions