Edit

ObIsKernelHandle function (ntifs.h)

  • Article

The ObIsKernelHandle routine determines whether the specified handle is a kernel handle.

Syntax

BOOLEAN ObIsKernelHandle(
  [in] HANDLE Handle
);

Parameters

[in] Handle

The handle to check.

Return value

ObIsKernelHandle returns TRUE if Handle is a kernel handle and FALSE otherwise.

Remarks

You can use kernel handles only in kernel mode. A driver can mark a handle as a kernel handle by specifying the OBJ_KERNEL_HANDLE flag in OBJECT_ATTRIBUTES when it creates the handle.

Note  ObIsKernelHandle does not verify that the parameter is a valid handle. This routine only determines if a valid handle is a kernel handle. If the parameter is not a valid handle, the result of the routine is undefined.
 

Requirements

Requirement Value
Target Platform Universal
Header ntifs.h (include FltKernel.h, Ntifs.h, FltKernel.h)
Library NtosKrnl.lib
DLL NtosKrnl.exe
IRQL <= APC_LEVEL

See also

OBJECT_ATTRIBUTES