Ring0 to Ring3 Memory Corrupted Bug #1
Description
DeviceIoControl(device, RING0TO3_OBJ, NULL, 0, &a, sizeof(MonikaObj), &ret_code, 0);
After this function called in UserMode, the process's some memory will be corrupted, but Ring3 to Ring0 is no problem.