S Scoot3r Member Joined Apr 21, 2021 Posts 10 Apr 29, 2021 #1 Hi, I wanna enable wpp tracing for my first minifilter driver, i do that on normal driver but for minifilter i can't find any sample how can i enable this feature ? thank you
Hi, I wanna enable wpp tracing for my first minifilter driver, i do that on normal driver but for minifilter i can't find any sample how can i enable this feature ? thank you
S Scoot3r Member Joined Apr 21, 2021 Posts 10 Apr 29, 2021 #2 Hi again i finally SOLVED it but i have another problem how can use unicode string to wpp tracing? i mean like this :> TraceEvents(TRACE_LEVEL_INFORMATION, TRACE_DRIVER, &Data->Iopb->TargetFileObject->FileName); // got error
Hi again i finally SOLVED it but i have another problem how can use unicode string to wpp tracing? i mean like this :> TraceEvents(TRACE_LEVEL_INFORMATION, TRACE_DRIVER, &Data->Iopb->TargetFileObject->FileName); // got error
x BlueRobot Administrator Staff member Joined May 7, 2013 Posts 10,234 Location %systemroot% Apr 30, 2021 #3 What is the error message that you're receiving?
S Scoot3r Member Joined Apr 21, 2021 Posts 10 Apr 30, 2021 #4 Error wpp Parsing "&Data->Iopb->TargetFileObject->FileName", cannot find format string (i even add %wZ but i'm not sure is correct for some situation) i trying search for find a sample but
Error wpp Parsing "&Data->Iopb->TargetFileObject->FileName", cannot find format string (i even add %wZ but i'm not sure is correct for some situation) i trying search for find a sample but
x BlueRobot Administrator Staff member Joined May 7, 2013 Posts 10,234 Location %systemroot% Apr 30, 2021 #5 Have you inspected the value of that string?
S Scoot3r Member Joined Apr 21, 2021 Posts 10 Apr 30, 2021 #6 UNICODE STRING and i use kdprint with that format string
x BlueRobot Administrator Staff member Joined May 7, 2013 Posts 10,234 Location %systemroot% Apr 30, 2021 #7 Could you please provide what values you've passed to the fields of the unicode string structure? Is the structure initialised?
Could you please provide what values you've passed to the fields of the unicode string structure? Is the structure initialised?
S Scoot3r Member Joined Apr 21, 2021 Posts 10 Apr 30, 2021 #8 this is my unicode string &Data->Iopb->TargetFileObject->FileName this is correct ? TraceEvents(TRACE_LEVEL_INFORMATION, TRACE_DRIVER, "File Name: %wZ", &Data->Iopb->TargetFileObject->FileName);
this is my unicode string &Data->Iopb->TargetFileObject->FileName this is correct ? TraceEvents(TRACE_LEVEL_INFORMATION, TRACE_DRIVER, "File Name: %wZ", &Data->Iopb->TargetFileObject->FileName);
x BlueRobot Administrator Staff member Joined May 7, 2013 Posts 10,234 Location %systemroot% Apr 30, 2021 #9 That's the pointer to the object, what is the actual unicode string structure initialised to?
x BlueRobot Administrator Staff member Joined May 7, 2013 Posts 10,234 Location %systemroot% Apr 30, 2021 #10 Scoot3r said: TraceEvents(TRACE_LEVEL_INFORMATION, TRACE_DRIVER, "File Name: %wZ", &Data->Iopb->TargetFileObject->FileName); Click to expand... I've just noticed that you've changed the arguments you've passed in from your last example. For your third parameter, I would advise using the predefined formatting strings, see if that makes a difference.
Scoot3r said: TraceEvents(TRACE_LEVEL_INFORMATION, TRACE_DRIVER, "File Name: %wZ", &Data->Iopb->TargetFileObject->FileName); Click to expand... I've just noticed that you've changed the arguments you've passed in from your last example. For your third parameter, I would advise using the predefined formatting strings, see if that makes a difference.
S Scoot3r Member Joined Apr 21, 2021 Posts 10 Apr 30, 2021 #11 x BlueRobot said: I've just noticed that you've changed the arguments you've passed in from your last example. For your third parameter, I would advise using the predefined formatting strings, see if that makes a difference. Click to expand... yes, i read it but i can't find sample for my situation edit: i finally see some example microsoft/Windows-driver-samples Last edited: Apr 30, 2021
x BlueRobot said: I've just noticed that you've changed the arguments you've passed in from your last example. For your third parameter, I would advise using the predefined formatting strings, see if that makes a difference. Click to expand... yes, i read it but i can't find sample for my situation edit: i finally see some example microsoft/Windows-driver-samples
x BlueRobot Administrator Staff member Joined May 7, 2013 Posts 10,234 Location %systemroot% May 2, 2021 #12 Glad you were able to find something useful.