The relationship between kernel modes and user mode

I created a WFP callout driver that runs in kernel mode. Now I'm trying to figure out how to establish a connection between this driver and my graphical interface, which works in user mode. Any ideas?

Exactly what I want is something like this:

  • The leader driver detects an incoming connection on port 4444 (this is not included in my question)
  • Drivers send a message to the user application.
  • The application displays a notification to the user and asks him if we should accept / block the connection.
  • The user mode application sends a user response to the leader driver.

Thank!

+5
source share
2 answers

I agree with LordDoskias. You need to create a device object and make it accessible to the Win32 area. Then you can use CreateFile, ReadFile, WriteFileand the already mentioned DeviceIoControlfor sending requests.

, . IRP ( ) ( ). , -, IRP. - - , - ...

, , - .

+4

API - DeviceIoControl

, , GUI ( ), IOCTL (. WDK).

+2

All Articles