madshi.net

1. Is Universal installer possible? -- If, for Windows 10, we need to submit to the MS portal to get drivers that work, I don't think anyone has verified these also work on previous Windows. If not, then it seems we would need to distribute a separate Windows 10 installer, and another installer for ...

I am very confused about the changes to code signing! Not only for Madshi's kernel drivers, but for my user-mode exe's as well! 1. Madshi kernel driving - K Software http://certhelp.ksoftware.net/support/solutions/articles/52448-how-do-i-use-a-kernel-mode-driver-signing-certificate-to-sign-driver-fi...

Assuming the hooking is being implemented correctly, could the original hooked function be calling itself recursively? Is it a problem if your hook function only calls NextHook() and returns? Does it cause infinite recursion as Madshi or is the behavior OK? If it is OK with the empty hook function, ...

You're welcome, I'm glad the EV certificate is affordable. :wink: But I am starting to get a bit worried after reading https://www.osr.com/blog/2015/07/24/questions-answers-windows-10-driver-signing/ Q: I want to create a single driver package that works for Windows 7 through Windows 10. How can I d...

Thanks for verifying we need an EV certificate. Through the [wmaudiodev] mailing list, I have heard that you can get a very good price from DigiCert. The trick is to go via the Microsoft link to get the 50% discount ... https://msdn.microsoft.com/en-us/library/windows/hardware/hh801887.aspx leads he...

It's too bad mailslots don't support the reader sending back a response to the caller; as it is, Madshi's MCH IPC could be implemented using mailslots, were it not for the "answer" that is supported. Named pipes do support the "answer". Do they have any problems, compared to mail...

@Iconic - thanks, I wasn't aware that shared data in DLL's did not work across sessions (e.g. to a service). But that may be OK for the OP. If it is, they are simpler than MMF. However, MMF are simple(r) because Madshi has made nice MCH API's for them. :D I don't think either mailslots or named pipe...

FWIW, I had to start hooking GetAddrInfo(Ex)W starting with IE 10 on Win 8.

Besides the global file mapping, another method is to have a shared data section in the DLL. Your initial EXE would LoadLibrary() the DLL and call one of its exported functions which sets the data in some global variable stored in the shared data section. Then each instance of the DLL can read this ...

Thanks for your tremendous (offline) help Madshi! The root cause is Chrome/Firefox are using a single thread to call WSASend/send; therefore the IPC calls are similarly single threaded. It's not a MCH problem after all.

Thanks,
David

Hi Madshi, Please find a stripped down EXE and DLL (32 bit only) with source code: http://dcsoft.com/private/ipcthread2.zip The EXE displays a line each time the IPC callback is called, with the thread id. Please let us know how it goes! Good luck. The symptoms occur on many PC's but I've only been ...

Hello Madshi! Using latest release of MadCollection 2.7.8 released December, 2013 (and also tried old release from 2012), I call CreateIpcQueue() or CreateIpcQueueEx(..., 16) to specify multiple worker threads for the IPC. The problem is that the callback thread is almost always the same one, and si...

My DLL is lightweight, but it requires a number of other system DLLs (ie WinInet.dll) that I don't really want to load into every process. I know that I could change all the static references in my DLL to dynamic ones, but that would be a lot of work for little gain. If your DLL is written in VC++,...

pi.id:=MSGTYPE_GETADDRINFO; lstrcpy(pi.target,nodename); SendIpcMessage(pchar('ProtexProc'),@pi,sizeOf(pi),@result,sizeOf(result)); Does it crash if you don't call SendIpcMessage()? The problem maybe you are overrunning the pi.target buffer (you don't check the size) in the lstrcpy. I have running ...

I log messages using SendMessage(WM_COPYDATA, ...) and wrote a viewer app similar to DbgView to receive the messages and display the strings. I could post that, if there's any interest. The advantage of this is that it works in file hooks like CreateFile() which is not permissible to call OutputDebu...