Luca91 Posted December 15, 2022 Share Posted December 15, 2022 In the NT kernel, syscalls numbers (ids) are not stable and unlike in Linux, they tend to change from every major (or even minor) OS release. That's why it is dangerous to directly use syscall and instead the proper way is to call kernel32.dll. Now my question is: why in Linux kernel we get a more stable syscall ids? Is there any practical reason why MS is changing so often the syscall ids on NT? I'm just asking out of curiosity. Thanks, Luca Link to comment Share on other sites More sharing options...
deepzero Posted December 27, 2022 Share Posted December 27, 2022 There is no practical reason, they just want people to use their APIs instead. 1 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now