_KUM_EXCEPTION Struct Reference

Describe a kernel-user mode exception. More...

#include <exceptions.h>

Data Fields
LIST_ENTRY	Link
union {
DWORD   NameHash
	Contains the originator name-hash. More...
DWORD   DriverHash
	Contains the originator driver name-hash. More...
DWORD   ProcessHash
	Contains the originator process name-hash. More...
}	Originator
struct {
DWORD   NameHash
DWORD   ProcessHash
	Contains the name-hash of the process in which the modification takes place. More...
}	Victim
DWORD	Flags
	Contains any flags from EXCEPTION_FLG. More...
KUM_EXCEPTION_OBJECT	Type
	Contains the type of the exception (KM_EXCEPTION_OBJECT). More...
QWORD	Context
	Contains the context given by the integrator. More...
WORD	SigCount
	Contains the number of signatures. More...
EXCEPTION_SIGNATURE_ID	Signatures []
	Contains a array of signatures ID. More...

Detailed Description

Describe a kernel-user mode exception.

Definition at line 275 of file exceptions.h.

Field Documentation

Context

QWORD _KUM_EXCEPTION::Context

Contains the context given by the integrator.

Definition at line 297 of file exceptions.h.

Referenced by IntUpdateAddKmUmException().

DriverHash

DWORD _KUM_EXCEPTION::DriverHash

Contains the originator driver name-hash.

Definition at line 282 of file exceptions.h.

Flags

DWORD _KUM_EXCEPTION::Flags

Contains any flags from EXCEPTION_FLG.

Definition at line 293 of file exceptions.h.

Referenced by IntUpdateAddKernelUserException(), and IntUpdateAddKmUmException().

Link

LIST_ENTRY _KUM_EXCEPTION::Link

Definition at line 277 of file exceptions.h.

Referenced by IntUpdateAddKernelUserException().

NameHash

DWORD _KUM_EXCEPTION::NameHash

Contains the originator name-hash.

Contains the name-hash of the modified module.

Definition at line 281 of file exceptions.h.

Referenced by IntUpdateAddKernelUserException(), and IntUpdateAddKmUmException().

Originator

union { ... } _KUM_EXCEPTION::Originator

Referenced by IntUpdateAddKernelUserException(), and IntUpdateAddKmUmException().

ProcessHash

DWORD _KUM_EXCEPTION::ProcessHash

Contains the originator process name-hash.

Contains the name-hash of the process in which the modification takes place.

Definition at line 283 of file exceptions.h.

Referenced by IntUpdateAddKernelUserException(), and IntUpdateAddKmUmException().

SigCount

WORD _KUM_EXCEPTION::SigCount

Contains the number of signatures.

Definition at line 299 of file exceptions.h.

Referenced by IntUpdateAddKernelUserException(), and IntUpdateAddKmUmException().

Signatures

EXCEPTION_SIGNATURE_ID _KUM_EXCEPTION::Signatures[]

Contains a array of signatures ID.

Definition at line 300 of file exceptions.h.

Referenced by IntUpdateAddKernelUserException(), and IntUpdateAddKmUmException().

Type

KUM_EXCEPTION_OBJECT _KUM_EXCEPTION::Type

Contains the type of the exception (KM_EXCEPTION_OBJECT).

Definition at line 295 of file exceptions.h.

Referenced by IntUpdateAddKernelUserException(), and IntUpdateAddKmUmException().

Victim

struct { ... } _KUM_EXCEPTION::Victim

Referenced by IntUpdateAddKernelUserException(), and IntUpdateAddKmUmException().

---

The documentation for this struct was generated from the following file:

• introcore/include/exceptions.h