IrqlPsPassive rule (wdm)

The IrqlPsPassive rule specifies that the driver calls the following Process Structure routines only when it is executing at IRQL = PASSIVE_LEVEL:

• PsCreateSystemThread

• PsGetVersion

• PsSetCreateProcessNotifyRoutine

• PsSetCreateThreadNotifyRoutine

• PsSetLoadImageNotifyRoutine

• PsTerminateSystemThread

Driver model: WDM

Bug check(s) found with this rule: Bug Check 0xC4: DRIVER_VERIFIER_DETECTED_VIOLATION (0x0002001C)

How to test

At compile time
Run Static Driver Verifier and specify the IrqlPsPassive rule. Use the following steps to run an analysis of your code: Prepare your code (use role type declarations). Run Static Driver Verifier. View and analyze the results. For more information, see Using Static Driver Verifier to Find Defects in Drivers.

At run time
Run Driver Verifier and select the DDI compliance checking option.

Applies to

PsCreateSystemThread PsGetVersion PsSetCreateProcessNotifyRoutine PsSetCreateThreadNotifyRoutine PsSetLoadImageNotifyRoutine PsTerminateSystemThread