The remote address field is zeroed out in a completion context when a WFP callout driver calls the FwpsPendOperation0() API in Windows Vista or in Windows Server 2008
Consider the following scenario:
- You run a Windows Filtering Platform (WFP)-based network filtering application on a computer that is running Windows Vista or Windows Server 2008.
- A WPF callout driver is used to pend packet processing by calling the FwpsPendOperation0() API.
- This call returns a completion context.
In this scenario, the Remote Address field in the completion context is zeroed out. Additionally, the computer may crash, depending on how the callout driver handles the Remote Address field.
Note: This issue may occur if a reauthentication request is triggered by calling the FwpsCompleteOperation0() API.
For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB2635039.