Windows虚拟内存空间

• For a 32-bit process, the virtual address space is usually the 2-gigabyte range 0x00000000 through 0x7FFFFFFF.
• For a 64-bit process on 64-bit Windows, virtual address space is the 128-terabyte range 0x000’00000000 through 0x7FFF’FFFFFFFF.
  
• In 32-bit Windows, the total available virtual address space is 2^32 bytes (4 gigabytes). Usually the lower 2 gigabytes are used for user space, and the upper 2 gigabytes are used for system space.
  
• You can increase the size of user space to as much as 3 gigabytes, in which case only 1 gigabyte is available for system space. To increase the size of user space, use BCDEdit /set increaseuserva.
• Code running in user mode has access to user space but does not have access to system space.
• Code running in kernel mode has access to system space and the virtual address space of the current user-mode process.
• 内核态的驱动程序在在操作用户态的内存地址时，需要额外注意。否则会引起错误。比如一个用户态进程请求从设备上读取数据至自己的进程内存空间，而读取设备的实际操作者是内核态的驱动程序，此时的驱动程序操作的地址空间应该是用户态进程空间，而非操作者的地址空间。
• Paged pool and Nonpaged pool
  In user space, all physical memory pages can be paged out to a disk file as needed. In system space, some physical pages can be paged out and others cannot. System space has two regions for dynamically allocating memory: paged pool and nonpaged pool.Memory that is allocated in paged pool can be paged out to a disk file as needed. Memory that is allocated in nonpaged pool can never be paged out to a disk file.