Windows Driver Kit: Kernel-Mode Driver Architecture
ETHREAD
[This is preliminary documentation and subject to change.]

The ETHREAD structure is an opaque structure that serves as the thread object for a thread.

Some routines, such as PsIsSystemThread, use ETHREAD to identify the thread to operate on. Drivers can use the PsGetCurrentThread routine to obtain a pointer to the thread object for the current thread and can use the ObReferenceObjectByHandle routine to obtain a pointer to the thread object that is associated with the specified handle.

Note that a thread object is an Object Manager object. Drivers should use Object Manager routines such as ObReferenceObject and ObDereferenceObject to maintain the object’s reference count.

Requirements

Versions: All supported operating systems.

Headers: Defined in Wdm.h. Include Wdm.h, Ntddk.h, or Ntifs.h.

See Also

ObReferenceObjectByHandle, PsGetCurrentThread, PsIsSystemThread

Tags :


Page view tracker