Re: [PATCH] ntoskrnl: Add MmIsThisAnNtAsSystem

[Alex Henrie]

On Thu, Aug 1, 2019 at 10:27 PM Zebediah Figura  wrote:
> Is the application really calling this function from a user-mode
> process? If not, I think this test should go in driver.c, instead,
> somewhere around main_test(). I suspect that will also get rid of the
> missing function workaround.

Ah, that makes a lot more sense. When I call MmIsThisAnNtAsSystem from
within the driver, it returns FALSE on all test VMs except Windows
Server 2003. Since there isn't a nice way to write a test that
excludes Windows Server 2003, I think I'll just drop the test
altogether. Thanks for the help!

-Alex