Public/winfsp
1
0
Fork 0
mirror of https://github.com/winfsp/winfsp.git synced 2025-04-23 00:43:00 -05:00
Code Issues Packages Projects Releases Wiki Activity

sys: IRP_MJ_CREATE

Browse Source
This commit is contained in:
Bill Zissimopoulos 2015-12-04 12:02:15 -08:00
parent 3e4cfdd143
commit e56f3ac151
1 changed files with 21 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
src/sys/create.c
View File

@ -272,9 +272,7 @@ static NTSTATUS FspFsvolCreate(
RtlCopyMemory(Request->Buffer + Request->Req.Create.SecurityDescriptor, RtlCopyMemory(Request->Buffer + Request->Req.Create.SecurityDescriptor,
SecurityDescriptor, SecurityDescriptorSize); SecurityDescriptor, SecurityDescriptorSize);
/* if the user-mode file system is doing access checks, send it the access token */ /* open a kernel-mode access token handle for later access checks */
if (FsvrtDeviceExtension->VolumeParams.NoSystemAccessCheck)
{
Result = ObOpenObjectByPointer( Result = ObOpenObjectByPointer(
SeQuerySubjectContextToken(&AccessState->SubjectSecurityContext), SeQuerySubjectContextToken(&AccessState->SubjectSecurityContext),
OBJ_KERNEL_HANDLE, 0, 0, *SeTokenObjectType, KernelMode, &AccessToken); OBJ_KERNEL_HANDLE, 0, 0, *SeTokenObjectType, KernelMode, &AccessToken);
@ -283,11 +281,12 @@ static NTSTATUS FspFsvolCreate(
FspFileContextDelete(FsContext); FspFileContextDelete(FsContext);
goto exit; goto exit;
} }
/* send the kernel handle and change it into a process handle at prepare time */
Irp->Tail.Overlay.DriverContext[1] = AccessToken; Irp->Tail.Overlay.DriverContext[1] = AccessToken;
/* if the user-mode file system is doing access checks, send it the access token */
if (FsvrtDeviceExtension->VolumeParams.NoSystemAccessCheck)
/* send the kernel-mode handle and change it into a user-mode handle at prepare time */
Request->Req.Create.AccessToken = (UINT_PTR)AccessToken; Request->Req.Create.AccessToken = (UINT_PTR)AccessToken;
}
/* /*
* Post the IRP to our Ioq; we do this here instead of at FSP_LEAVE_MJ time, * Post the IRP to our Ioq; we do this here instead of at FSP_LEAVE_MJ time,
@ -321,27 +320,36 @@ NTSTATUS FspFsvolCreatePrepare(
HANDLE UserModeAccessToken; HANDLE UserModeAccessToken;
PACCESS_TOKEN AccessToken; PACCESS_TOKEN AccessToken;
/* if we are doing access checks, there is nothing to prepare */
if (0 == KernelModeAccessToken) if (0 == KernelModeAccessToken)
FSP_RETURN(Result = STATUS_SUCCESS); FSP_RETURN(Result = STATUS_SUCCESS);
/*
* The user-mode file system is doing access checks. We must convert the kernel-mode
* access token handle to user-mode and send it to them.
*/
FSP_FSVOL_DEVICE_EXTENSION *FsvolDeviceExtension = FspFsvolDeviceExtension(IrpSp->DeviceObject); FSP_FSVOL_DEVICE_EXTENSION *FsvolDeviceExtension = FspFsvolDeviceExtension(IrpSp->DeviceObject);
ASSERT(FspFsvolDeviceExtensionKind == FsvolDeviceExtension->Base.Kind); ASSERT(FspFsvolDeviceExtensionKind == FsvolDeviceExtension->Base.Kind);
Request->Req.Create.AccessToken = 0; Request->Req.Create.AccessToken = 0;
Irp->Tail.Overlay.DriverContext[1] = 0; Irp->Tail.Overlay.DriverContext[1] = 0;
/* get a pointer to the access token */
Result = ObReferenceObjectByHandle(KernelModeAccessToken, Result = ObReferenceObjectByHandle(KernelModeAccessToken,
0, *SeTokenObjectType, KernelMode, &AccessToken, 0); 0, *SeTokenObjectType, KernelMode, &AccessToken, 0);
ObCloseHandle(KernelModeAccessToken, KernelMode); ObCloseHandle(KernelModeAccessToken, KernelMode);
if (!NT_SUCCESS(Result)) if (!NT_SUCCESS(Result))
FSP_RETURN(); FSP_RETURN();
/* get a user-mode handle to the access token */
Result = ObOpenObjectByPointer(AccessToken, Result = ObOpenObjectByPointer(AccessToken,
0, 0, TOKEN_QUERY, *SeTokenObjectType, UserMode, &UserModeAccessToken); 0, 0, TOKEN_QUERY, *SeTokenObjectType, UserMode, &UserModeAccessToken);
ObDereferenceObject(AccessToken); ObDereferenceObject(AccessToken);
if (!NT_SUCCESS(Result)) if (!NT_SUCCESS(Result))
FSP_RETURN(); FSP_RETURN();
/* send the user-mode handle to the user-mode file system */
Irp->Tail.Overlay.DriverContext[1] = UserModeAccessToken; Irp->Tail.Overlay.DriverContext[1] = UserModeAccessToken;
Request->Req.Create.AccessToken = (UINT_PTR)UserModeAccessToken; Request->Req.Create.AccessToken = (UINT_PTR)UserModeAccessToken;