Re: [PATCH 2/3] ntoskrnl.exe: Improve IoGetCurrentProcess stub.

[Dmitry Timoshkov]

Christian Costa <titan.costa(a)gmail.com> wrote:
> > Why do you think that returning the structure filled with garbage is better
> > than returning NULL?
>
> It is not supposed to return NULL afaik but a valid pointer as you said
> before.
> The structure is zeroed except UniqueProcessId I need for MDL functions.
> MDL struct have a PEPROCESS field and I would like to do things in a clean
> way.
> What's the problem with that ?

The problem is that the returned info in the structure must be valid, you
can't initialize single field and pretend as done with it.

-- 
Dmitry.