Find centralized, trusted content and collaborate around the technologies you use most.
Teams
Q&A for work
Connect and share knowledge within a single location that is structured and easy to search.
我试图在 Windows 内核中使用的回调函数中找到堆栈的顶部(或底部)。我想为此使用IoGetInitialStack函数,但不幸的是它的文档指出:
IoGetInitialStack
IRQL "<=APC_LEVEL"
我用反汇编程序查看了它,它似乎在我的副本中所做的ntoskrnl就是:
ntoskrnl
他们为什么将其限制为IRQL<=APC_LEVEL?
IRQL<=APC_LEVEL