阅读:1542回复:3
编译驱动问题???
代码为
NTSTATUS rc; PROCESS_BASIC_INFORMATION pbi; PEPROCESS pEProcess; rc=ZwQueryInformationProcess(ProcessHandle,ProcessBasicInformation, (PVOID)&pbi, sizeof(PROCESS_BASIC_INFORMATION), NULL); if(!NT_SUCCESS(rc)) { DbgPrint("Error ZwQueryInformationProcess"); return; } //根据pbi的UniqueProcessId rc=PsLookupProcessByProcessId((ULONG)pbi.UniqueProcessId,&pEProcess); if(!NT_SUCCESS(rc)) { DbgPrint("Error PsLookupProcessByProcessId"); return; } if(0 == memcmp(&pEProcess->ImageFileName[0], "WinSyse", 7)) { return STATUS_ACCESS_DENIED; } else { return; } 编译发生错误: 1>windrvn.cpp(240) : error C2027: use of undefined type '_EPROCESS' 1>c:\winddk\2600\inc\ddk\wxp\ntddk.h(84) : error see declaration of '_EPROCESS' 我是菜鸟,请各位大侠HELP ME! [p:4] |
|
沙发#
发布于:2007-03-31 09:59
![]() |
|
板凳#
发布于:2007-03-31 12:55
&pEProcess->ImageFileName[0]
_eprocess在ntddk.h里面没有定义, 要用的话自己定义一下, 注意各个版本的Windows这个结构有细微差别。。。。 |
|
地板#
发布于:2007-03-31 13:47
我定义进去以后,还是报错误,提示KPROCESS' : missing storage-class or type specifiers
结构中好多类型好像都没有找到定义 |
|