Handle exception cause by a specific module

Question

Handle exception cause by a specific module

Closed this issue 5 years ago · 1 comments

YangKi1902 commented 5 years ago

hello, is there a way i can detect and only handle exception of a specific module or current module ?, example mydriver.sys, thanks.

Answer 1 · 2019-10-25T11:05:08.000Z

void* ImageBase; 
RtlPcToFileHeader(ContextRecord->Rip, &ImageBase);

This will give you the module image base at ImageBase, simply compare it against the module you want to handle exceptions of. "Normal" exceptions from other modules will not reach your exception handler anyways as they are not supposed to bug-check unless there is something wrong.