Crashes on reading FILE_OBJECT

[archie426]

Hi (me again),

I'm trying to map a driver with the drvmap function. However, my PC blue screens on reading FILE_OBJECT (I assume where it calls ReadKernelVM?). This only happens for one of the drivers I am using, both of them I have compiled and made driverless.
(The other one works perfectly). The driver entry point does not appear to be called before the crash. When I debugged the kernel crash dump in WinDbg with my driver source, it did not reference it in the slightest. Instead it gave the NTSTATUS error "reached breakpoint"?

I read that there is an issue when having vgc installed, so I uninstalled it yet I get the same result.

If you want I can attach a copy of the driver I am trying to map. I have tried providers 1 and 2 and concluded after it crashing on both of them that it was independent of that.

Thanks

[hfiref0x]

Attach your driver.

[archie426]

https://ninkynonk.co.uk/cdn/RinglandDriver.sys

Can't upload it to GH due to file restrictions

[hfiref0x]

Well, it has NETIO.sys (dll) in a dependencies. It won't work when loaded with KDU because KDU only resolves ntoskrnl import. You have to do this part manually in your driver.

[archie426]

Alright, thanks