ObReferenceObject - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
// wdm.h

void ObReferenceObject(
  [in] Object
);

View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Windows Driver Kit DDI reference (nf-wdm-obreferenceobject)

ObReferenceObject macro

Description

The ObReferenceObject routine increments the reference count to the given object.

Parameters

Object [in]

Pointer to the object. The caller obtained this parameter either when it created the object or from a preceding call to ObReferenceObjectByHandle after it opened the object.

Remarks

ObReferenceObject returns a value that is reserved for system use. Drivers must treat this value as VOID.

ObReferenceObject simply increments the pointer reference count for an object, without making any access checks on the given object, as ObReferenceObjectByHandle and ObReferenceObjectByPointer do.

ObReferenceObject prevents deletion of the object at least until the driver subsequently calls its reciprocal, ObDereferenceObject, or closes the given object. The caller must decrement the reference count with ObDereferenceObject as soon as it is done with the object.

When the reference count for an object reaches zero, a kernel-mode component can remove the object from the system. However, a driver can remove only those objects that it created, and a driver should never attempt to remove any object that it did not create.

See also

ObDereferenceObject

ObReferenceObjectByHandle

ObReferenceObjectByPointer

ZwClose