Re: [PATCH 1/2] ntoskrnl.exe: Implement IoGetCurrentProcess and KeGetCurrentThread.

[Dmitry Timoshkov]

Christian Costa <titan.costa(a)gmail.com> wrote:
> PEPROCESS WINAPI IoGetCurrentProcess(void)
>  {
> -    FIXME("() stub\n");
> -    return NULL;
> +    TRACE("()\n");
> +
> +    /* Return current process id since PEPROCESS is opaque and drivers should not access the struct directly */
> +    return (PEPROCESS)PsGetCurrentProcessId();
>  }

The returned pointer is supposed to be passed to various other ntoskrnl APIs,
and it's needs to be a valid pointer to the kernel object. Besides many not
trivial kernel drivers (if not all) really dig into internal kernel structures.

Same for KeGetCurrentThread.

-- 
Dmitry.