A forum for reverse engineering, OS internals and malware analysis 

Forum for discussion about kernel-mode development.
 #20133  by vs2099
 Wed Jul 17, 2013 2:52 am
Hi, everyone.
I use FWPM_LAYER_ALE_AUTH_CONNECT_V4 to register a classifyFn.
I want to use FwpsPendClassify0, that means I should get classifyHandle.
But classifyContext in classifyFn1 is NULL, so I cannot get the classifyHandle by FwpsAcquireClassifyHandle0.
How to solve this problem?