A forum for reverse engineering, OS internals and malware analysis 

 #23807  by Carlbyte
 Fri Sep 05, 2014 9:29 pm
My mistake ... I was using readfile (usermode) instead of zwreadfile.
...
Fact is I'm working on a driver and dealing with the issue of multiple threads accessing the same file. I'm currently having problem with BSOD and it seems that is related to zwreadfile. The idea to post the question is whether it is feasible. In fact I had never dealt with this situation. The situation is that I have a driver that would store the data generated in a database.
 #23808  by Vrtule
 Sat Sep 06, 2014 12:16 am
Well, I am not sure whether your problem related to multiple threads accessing the same file has been solved or not.

Anyway, ZwReadFile is a quite high-level function so it usually BSODs only when you pass invalid arguments to it.