ObfReferenceObject - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// wdm.h
LONG_PTR ObfReferenceObject(
[in] PVOID Object
);
View the official Windows Driver Kit DDI referenceNo description available.
The ObfReferenceObject routine increments the reference count to the given object.
Object [in]Pointer to the object. The caller obtained this parameter either when it created the object or from a preceding call to ObReferenceObjectByHandle after it opened the object.
ObfReferenceObject returns a value that is reserved for system use. Drivers must treat this value as VOID.
ObfReferenceObject simply increments the pointer reference count for an object, without making any access checks on the given object, as ObReferenceObjectByHandle and ObReferenceObjectByPointer do.
ObfReferenceObject prevents deletion of the object at least until the driver subsequently calls its reciprocal, ObDereferenceObject, or closes the given object. The caller must decrement the reference count with ObDereferenceObject as soon as it is done with the object.
When the reference count for an object reaches zero, a kernel-mode component can remove the object from the system. However, a driver can remove only those objects that it created, and a driver should never attempt to remove any object that it did not create.