sys: IRP_MJ_CREATE

This commit is contained in:
Bill Zissimopoulos 2015-12-03 16:59:31 -08:00
parent 3a3df24a40
commit ca8a02bd9d
4 changed files with 91 additions and 22 deletions

View File

@ -21,8 +21,8 @@ extern const __declspec(selectany) GUID FspFsvrtDeviceClassGuid =
/* alignment macros */
#define FSP_FSCTL_ALIGN_UP(x, s) (((x) + ((s) - 1L)) & ~((s) - 1L))
#define FSP_FSCTL_DEFAULT_ALIGNMENT (16)
#define FSP_FSCTL_DECLSPEC_ALIGN __declspec(align(16))
#define FSP_FSCTL_DEFAULT_ALIGNMENT (8)
#define FSP_FSCTL_DECLSPEC_ALIGN __declspec(align(8))
/* fsctl device codes */
#define FSP_FSCTL_CREATE \
@ -47,44 +47,97 @@ extern const __declspec(selectany) GUID FspFsvrtDeviceClassGuid =
/* marshalling */
#pragma warning(push)
#pragma warning(disable:4200) /* zero-sized array in struct/union */
enum
{
FspFsctlTransactUnknownKind = 0,
FspFsctlTransactCreateKind = 'C',
FspFsctlTransactCloseKind = 'c',
FspFsctlTransactReadKind = 'R',
FspFsctlTransactWriteKind = 'W',
FspFsctlTransactQueryInformationKind = 'I',
FspFsctlTransactSetInformationKind = 'i',
FspFsctlTransactQueryEaKind = 'E',
FspFsctlTransactSetEaKind = 'e',
FspFsctlTransactFlushBuffersKind = 'F',
FspFsctlTransactQueryVolumeInformationKind = 'V',
FspFsctlTransactSetVolumeInformationKind = 'v',
FspFsctlTransactDirectoryControlKind = 'D',
FspFsctlTransactFileSystemControlKind = 'K',
FspFsctlTransactDeviceControlKind = 'k',
FspFsctlTransactShutdownKind = 'd',
FspFsctlTransactLockControlKind = 'L',
FspFsctlTransactCleanupKind = 'l',
FspFsctlTransactQuerySecurityKind = 'S',
FspFsctlTransactSetSecurityKind = 's',
};
typedef struct
{
UINT16 Version;
UINT16 SectorSize;
UINT32 SerialNumber;
BOOLEAN EaSupported; /* supports extended attributes (unimplemented; set to 0) */
BOOLEAN FileNameRequired; /* FileName required for all operations (not just Create) */
UINT32 EaSupported:1; /* supports extended attributes (unimplemented; set to 0) */
UINT32 FileNameRequired:1; /* FileName required for all operations (not just Create) */
UINT32 NoAccessCheck:1; /* if set the user-mode flie system performs access checks */
} FSP_FSCTL_VOLUME_PARAMS;
typedef struct
{
UINT16 Version;
UINT16 Size;
UINT32 Kind;
UINT64 Hint;
UINT8 Kind;
union
{
struct
{
UINT8 Placeholder;
UINT32 CreateDisposition; /* FILE_{SUPERSEDE,CREATE,OPEN,OPEN_IF,OVERWRITE,OVERWRITE_IF} */
UINT32 CreateOptions; /* FILE_{DIRECTORY_FILE,NON_DIRECTORY_FILE,etc.} */
UINT32 FileAttributes; /* FILE_ATTRIBUTE_{NORMAL,DIRECTORY,etc.} */
UINT64 AllocationSize; /* initial allocation size */
UINT64 SecurityDescriptor; /* (PSECURITY_DESCRIPTOR); security to apply to new files */
UINT64 EaBuffer; /* (PVOID); reserved; not currently implemented */
UINT32 EaLength; /* (PVOID); reserved; not currently implemented */
UINT64 AccessToken; /* (HANDLE); request access token; sent if NoAccessCheck is 0 */
UINT32 DesiredAccess; /* FILE_{READ_DATA,WRITE_DATA,etc.} */
UINT32 ShareAccess; /* FILE_SHARE_{READ,WRITE,DELETE} */
UINT32 UserMode:1; /* request originated in user mode */
UINT32 HasTraversePrivilege:1;
/* requestor has TOKEN_HAS_TRAVERSE_PRIVILEGE */
UINT32 OpenTargetDirectory:1;
/* open target directory and report FILE_{EXISTS,DOES_NOT_EXIST} */
UINT32 CaseSensitive:1; /* filename comparisons should be case-sensitive */
} Create;
struct
{
UINT64 UserContext;
UINT64 UserContext2;
} Cleanup;
struct
{
UINT64 UserContext;
UINT64 UserContext2;
} Close;
} Req;
WCHAR FileName[];
FSP_FSCTL_DECLSPEC_ALIGN WCHAR FileName[];
} FSP_FSCTL_TRANSACT_REQ;
typedef struct
{
UINT16 Version;
UINT16 Size;
UINT32 Kind;
UINT64 Hint;
struct
{
UINT32 Status;
UINT64 Information;
UINT32 Status;
} IoStatus;
UINT8 Kind;
union
{
UINT8 Placeholder; // !!!: REMOVE
} Req;
struct
{
UINT64 UserContext; /* user context attached to an open file (unique file id) */
UINT64 UserContext2; /* user context attached to a kernel file object */
} Create;
} Rsp;
} FSP_FSCTL_TRANSACT_RSP;
#pragma warning(pop)
static inline FSP_FSCTL_TRANSACT_REQ *FspFsctlTransactProduceRequest(

View File

@ -57,17 +57,17 @@ static NTSTATUS FspFsvolCreate(
PFILE_OBJECT RelatedFileObject = FileObject->RelatedFileObject;
UNICODE_STRING FileName = FileObject->FileName;
ULONG Flags = IrpSp->Flags;
//KPROCESSOR_MODE RequestorMode = FlagOn(Flags, SL_FORCE_ACCESS_CHECK) ? UserMode : Irp->RequestorMode;
//PACCESS_STATE AccessState = IrpSp->Parameters.Create.SecurityContext->AccessState;
//ACCESS_MASK DesiredAccess = IrpSp->Parameters.Create.SecurityContext->DesiredAccess;
//USHORT ShareAccess = IrpSp->Parameters.Create.ShareAccess;
//ULONG CreateDisposition = (IrpSp->Parameters.Create.Options >> 24) & 0xff;
KPROCESSOR_MODE RequestorMode = FlagOn(Flags, SL_FORCE_ACCESS_CHECK) ? UserMode : Irp->RequestorMode;
PACCESS_STATE AccessState = IrpSp->Parameters.Create.SecurityContext->AccessState;
ACCESS_MASK DesiredAccess = IrpSp->Parameters.Create.SecurityContext->DesiredAccess;
USHORT ShareAccess = IrpSp->Parameters.Create.ShareAccess;
ULONG CreateDisposition = (IrpSp->Parameters.Create.Options >> 24) & 0xff;
ULONG CreateOptions = IrpSp->Parameters.Create.Options & 0xffffff;
//USHORT FileAttributes = IrpSp->Parameters.Create.FileAttributes;
//LARGE_INTEGER AllocationSize = Irp->Overlay.AllocationSize;
USHORT FileAttributes = IrpSp->Parameters.Create.FileAttributes;
LARGE_INTEGER AllocationSize = Irp->Overlay.AllocationSize;
PFILE_FULL_EA_INFORMATION EaBuffer = Irp->AssociatedIrp.SystemBuffer;
//ULONG EaLength = IrpSp->Parameters.Create.EaLength;
//BOOLEAN HasTraversePrivilege = BooleanFlagOn(AccessState->Flags, TOKEN_HAS_TRAVERSE_PRIVILEGE);
BOOLEAN HasTraversePrivilege = BooleanFlagOn(AccessState->Flags, TOKEN_HAS_TRAVERSE_PRIVILEGE);
BOOLEAN HasTrailingBackslash = FALSE;
FSP_FILE_CONTEXT *FsContext = 0;
FSP_FSCTL_TRANSACT_REQ *Request;
@ -173,7 +173,23 @@ static NTSTATUS FspFsvolCreate(
return Result;
}
/* !!!: populate the request */
/* populate the Create request */
Request->Kind = FspFsctlTransactCreateKind;
Request->Req.Create.CreateDisposition = CreateDisposition;
Request->Req.Create.CreateOptions = CreateOptions;
Request->Req.Create.FileAttributes = FileAttributes;
Request->Req.Create.AllocationSize = AllocationSize.QuadPart;
Request->Req.Create.SecurityDescriptor = 0;
Request->Req.Create.EaBuffer = 0;
Request->Req.Create.EaLength = 0;
Request->Req.Create.AccessToken = 0;
Request->Req.Create.DesiredAccess = DesiredAccess;
Request->Req.Create.ShareAccess = ShareAccess;
Request->Req.Create.DesiredAccess = DesiredAccess;
Request->Req.Create.UserMode = UserMode == RequestorMode;
Request->Req.Create.HasTraversePrivilege = HasTraversePrivilege;
Request->Req.Create.CaseSensitive = BooleanFlagOn(Flags, SL_CASE_SENSITIVE);
Request->Req.Create.OpenTargetDirectory = BooleanFlagOn(Flags, SL_OPEN_TARGET_DIRECTORY);
/*
* Post the IRP to our Ioq; we do this here instead of at FSP_LEAVE_MJ time,

View File

@ -38,7 +38,7 @@ NTSTATUS FspFileContextCreate(ULONG ExtraSize, FSP_FILE_CONTEXT **PFsContext)
ExInitializeResourceLite(&NonPaged->PagingIoResource);
ExInitializeFastMutex(&NonPaged->HeaderFastMutex);
RtlZeroMemory(FsContext, sizeof *FsContext);
RtlZeroMemory(FsContext, sizeof *FsContext + ExtraSize);
FsContext->Header.NodeTypeCode = 'F';
FsContext->Header.NodeByteSize = sizeof *FsContext;
FsContext->Header.IsFastIoPossible = FastIoIsQuestionable;

View File

@ -30,7 +30,7 @@ NTSTATUS FspIopCreateRequest(
if (0 == Request)
return STATUS_INSUFFICIENT_RESOURCES;
RtlZeroMemory(Request, sizeof *Request);
RtlZeroMemory(Request, sizeof *Request + ExtraSize);
Request->Size = (UINT16)(sizeof *Request + ExtraSize);
Request->Hint = (UINT_PTR)Irp;
if (0 != FileName)