Hi!
I make hook for ClientEventReceive, ClientEventChainedReceive, etc
How can I complete correctly the NewClientEventReceive function without calling OldClientEventReceive?
It’s necessary to interrupt input data.
NTSTATUS NewClientEventReceive(IN PVOID EventContext,
IN CONNECTION_CONTEXT ConnectionContext,
IN ULONG Flags,
IN ULONG BytesIndicated,
IN ULONG BytesAvailable,
OUT ULONG *BytesTaken,
IN PVOID Tsdu,
OUT PIRP *IoRequestPacket
)
{
NTSTATUS status;
DbgPrint("
NewClientEventReceive
");
// here need complete this function, if simply return error status then BSOD (((
status = OldClientEventReceive(EventContext, ConnectionContext, Flags, BytesIndicated, BytesAvailable, BytesTaken, Tsdu, IoRequestPacket);
return status;
}
P. S.
If you are Russian, write russian )))