irqlMmApcLte 规则 (wdm)

IrqlMmApcLte 规则指定驱动程序仅在 IRQL <= APC_LEVEL 执行以下内存管理器例程时调用：

• MmAllocateNonCachedMemory

• MmFreeNonCachedMemory

• MmAllocatePagesForMdl

• MmFreePagesFromMdl

• MmLockPagableDataSection

• MmLockPagableSectionByHandle

• MmPageEntireDriver

• MmResetDriverPaging

• MmSecureVirtualMemory

• MmUnlockPagableImageSection

• MmUnsecureVirtualMemory

驱动程序模型：WDM

通过以下规则找到的 bug 检查 () ：Bug 检查0xC4：DRIVER_VERIFIER_DETECTED_VIOLATION (0x00020019)

如何测试

适用于

MmAllocateNonCachedMemoryMmAllocatePagesForMdlMmAllocatePagesForMdlExMmFreeNonCachedMemoryMmFreePagesFromMdlMmLockPagableDataSectionMmLockPagableSectionByHandleMmPageEntireDriverMmResetDriverPagingMmSecureVirtualMemoryMmUnlockPagableImageSectionMmUnsecureVirtualMemory