Talk:IOCTL

Finding the IOCTL handler address for a device in kernel

Find a string of the device in kernel.
There should be only two cross-references from function: make_dev and mutex_init. make_dev is the interesting one.
The structure before the device string is where we want to go.
Follow the structure then go to the very last offset of the structure.
It is the handler function in charge of IOCTLs for that device.