Questions tagged [usermode]
61 questions
13
votes
1 answer
Difference between processes running in kernel mode and running as root?
I am aware of the difference between a process running in user mode and one running in kernel mode (based on access restrictions, access to hardware etc.). But just out of curiosity, what is the difference between a process running in kernel mode…
![](../../users/profiles/184046.webp)
Legend
- 104,480
- 109
- 255
- 385
8
votes
2 answers
Executing a user-mode executable from kernel-mode
I'm building a HW-simulator for our driver team. Now, the simulator is devided in to 2 modules:
First module runs inside the driver, in kernel mode and that's where the main interface between the driver and the HW-Simulator.
Second module is an…
![](../../users/profiles/372912.webp)
eladidan
- 2,564
- 2
- 22
- 37
7
votes
0 answers
Windows User Mode Scheduler (UMS) Retired?
I just came around the following post which seems to say that the user mode scheduler which was introduced with Windows 7 is (going to be) retired?
Don McCrady, Microsoft: As you may know from reading other forum entries here, the UMS scheduler is…
![](../../users/profiles/346804.webp)
ronag
- 43,567
- 23
- 113
- 204
6
votes
0 answers
How to call usermode from Windows kernel?
I'd like to call my app from my driver when an interesting event happens in the Windows kernel. I need to be able to pass at least 4 bytes of data back to user mode. How to achieve this? These events might happen quite, but not too, often, so I…
![](../../users/profiles/373525.webp)
Raimo Helminen
- 65
- 1
- 3
5
votes
4 answers
C and resource protection in memory
When we compile a C program, it just generates some machine-understandable code. This code can directly run on the hardware, telling from this question.
So my questions are:
If a C program can directly run on the hardware, how can the kernel handle…
![](../../users/profiles/2809547.webp)
shiv garg
- 671
- 1
- 7
- 25
5
votes
1 answer
What is the main difference between drivers and user applications?
I know that user applications can run only in user mode, which is for system security. On the contrary most drivers run in kernel mode, to access I/O devices. Nevertheless some driver run in user mode, but are allowed to access I/O devices. So I…
![](../../users/profiles/4808130.webp)
user1289
- 1,160
- 2
- 10
- 22
4
votes
2 answers
How to add user to a group without usermod?
Is it possible to add a user to a group without usermod?
I'm working on embedded Linux 3.14.52 and I don't have the usermod command line.
If it is not possible, how add this command to kernel with Buildroot?
![](../../users/profiles/6194206.webp)
M.Ferru
- 320
- 6
- 19
3
votes
2 answers
Is there a difference in dt nt!_TEB and dt ntdll!_TEB?
I can dump types from an arbitrary module using
dt modulename!type
In some cases I saw e.g.
dt nt!_TEB
(and it works) although the module is called ntdll:
0:001> lm m nt
start end module name
0:001> lm m ntdll
start …
![](../../users/profiles/480982.webp)
Thomas Weller
- 43,638
- 16
- 101
- 185
3
votes
1 answer
Why driver in kernel mode must be very careful about directly reading from or writing to addresses in user space?
From msdn:
Drivers that run in kernel mode must be very careful about directly
reading from or writing to addresses in user space. This scenario
illustrates why.
A user-mode program initiates a request to read some data from a device. The program…
![](../../users/profiles/530589.webp)
Nüsrat Nuriyev
- 952
- 1
- 11
- 27
2
votes
0 answers
Implementing User Mode and Kernel Mode Switching in 64 bit UEFI OS
I am writing a 64 Bit UEFI OS ( GNU-EFI - Bootloader ). I am wondered about User Mode and Kernel Mode in OS, I have to Implement User Mode and Kernel Mode in My OS, I found some on the Internet but It won't works for me ( I thinks it is because of…
![](../../users/profiles/16028858.webp)
user16028858
- 41
- 3
2
votes
1 answer
using arm LDM instruction to transfer data into user mode registers
I'm trying to restore user mode registers from svc mode on a cortex-a5 chip by using LDM instruction. I referred a technical guide for instruction LDM, the syntax is:
LDM{addr_mode}{cond} Rn{!},reglist{^}
'^' if specified (in a mode other than…
![](../../users/profiles/3197437.webp)
user3197437
- 71
- 6
2
votes
1 answer
How do I get user-mode breakpoints to hit in windbg while kernel debugging?
I'm having trouble getting user mode breakpoints to hit in windbg when I am kernel debugging. I know that I have to be in the target process's context to set a user mode breakpoint, but that still doesn't seem to work reliably. Sometimes it works,…
![](../../users/profiles/8418130.webp)
R. Alabaster
- 53
- 3
2
votes
1 answer
Is There Ever an Advantage to User Mode Debug over Kernel Mode Debug?
From what I understand, on a high level, user mode debugging provides you with access to the private virtual address for a process. A debug session is limited to that process and it cannot overwrite or tamper w/ other process' virtual address…
![](../../users/profiles/1575699.webp)
mattkgross
- 711
- 1
- 10
- 23
2
votes
0 answers
Decoding activation context error 0xC015000f
I need to identify the root cause of
EXCEPTION_CODE: (NTSTATUS) 0xc015000f - The activation context being deactivated is not the most recently activated one.
using a user mode post mortem crash dump.
Callstack:
# ChildEBP RetAddr Args to…
![](../../users/profiles/3679359.webp)
user3679359
- 41
- 7
2
votes
5 answers
switching to user stack in kernel dumps
Is there a way to switch to user mode of a particular process in a kernel dump while doing postmortem debugging ?
I remember doing this while live debugging using the .process command.
![](../../users/profiles/3279954.webp)
user3279954
- 384
- 3
- 19