2007-11-02 23:12:22 +00:00
|
|
|
/*
|
|
|
|
* PROJECT: ReactOS Kernel
|
|
|
|
* LICENSE: GPL - See COPYING in the top level directory
|
|
|
|
* FILE: ntoskrnl/config/cmapi.c
|
|
|
|
* PURPOSE: Configuration Manager - Internal Registry APIs
|
|
|
|
* PROGRAMMERS: Alex Ionescu (alex.ionescu@reactos.org)
|
2010-09-26 11:37:40 +00:00
|
|
|
* Eric Kohl
|
2007-11-02 23:12:22 +00:00
|
|
|
*/
|
|
|
|
|
|
|
|
/* INCLUDES ******************************************************************/
|
|
|
|
|
|
|
|
#include "ntoskrnl.h"
|
|
|
|
#define NDEBUG
|
|
|
|
#include "debug.h"
|
|
|
|
|
2007-12-02 18:40:33 +00:00
|
|
|
BOOLEAN CmBootAcceptFirstTime = TRUE;
|
|
|
|
BOOLEAN CmFirstTime = TRUE;
|
|
|
|
|
2007-11-02 23:12:22 +00:00
|
|
|
/* FUNCTIONS *****************************************************************/
|
|
|
|
|
2007-12-09 19:36:04 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtCreateKey(OUT PHANDLE KeyHandle,
|
|
|
|
IN ACCESS_MASK DesiredAccess,
|
|
|
|
IN POBJECT_ATTRIBUTES ObjectAttributes,
|
|
|
|
IN ULONG TitleIndex,
|
2009-07-10 10:02:37 +00:00
|
|
|
IN PUNICODE_STRING Class OPTIONAL,
|
2007-12-09 19:36:04 +00:00
|
|
|
IN ULONG CreateOptions,
|
2009-07-10 10:02:37 +00:00
|
|
|
OUT PULONG Disposition OPTIONAL)
|
2007-12-09 19:36:04 +00:00
|
|
|
{
|
2009-08-24 19:58:15 +00:00
|
|
|
NTSTATUS Status;
|
2007-12-09 19:36:04 +00:00
|
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
|
|
|
CM_PARSE_CONTEXT ParseContext = {0};
|
2007-12-15 18:14:41 +00:00
|
|
|
HANDLE Handle;
|
2007-12-09 19:36:04 +00:00
|
|
|
PAGED_CODE();
|
2008-07-21 09:36:02 +00:00
|
|
|
DPRINT("NtCreateKey(OB name %wZ)\n", ObjectAttributes->ObjectName);
|
2007-12-15 20:51:40 +00:00
|
|
|
|
2008-06-23 12:45:27 +00:00
|
|
|
/* Check for user-mode caller */
|
2008-09-07 09:25:31 +00:00
|
|
|
if (PreviousMode != KernelMode)
|
2008-06-06 21:40:37 +00:00
|
|
|
{
|
2008-06-23 12:45:27 +00:00
|
|
|
/* Prepare to probe parameters */
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_TRY
|
2008-06-06 21:40:37 +00:00
|
|
|
{
|
|
|
|
/* Check if we have a class */
|
|
|
|
if (Class)
|
|
|
|
{
|
|
|
|
/* Probe it */
|
2009-01-04 01:50:37 +00:00
|
|
|
ParseContext.Class = ProbeForReadUnicodeString(Class);
|
2008-06-06 21:40:37 +00:00
|
|
|
ProbeForRead(ParseContext.Class.Buffer,
|
|
|
|
ParseContext.Class.Length,
|
|
|
|
sizeof(WCHAR));
|
|
|
|
}
|
2008-06-23 12:45:27 +00:00
|
|
|
|
2008-06-06 21:40:37 +00:00
|
|
|
/* Probe the key handle */
|
|
|
|
ProbeForWriteHandle(KeyHandle);
|
|
|
|
*KeyHandle = NULL;
|
2008-06-23 12:45:27 +00:00
|
|
|
|
2008-06-06 21:40:37 +00:00
|
|
|
/* Probe object attributes */
|
2008-09-07 09:25:31 +00:00
|
|
|
ProbeForRead(ObjectAttributes,
|
|
|
|
sizeof(OBJECT_ATTRIBUTES),
|
|
|
|
sizeof(ULONG));
|
2009-07-10 10:02:37 +00:00
|
|
|
|
|
|
|
if (Disposition) ProbeForWriteUlong(Disposition);
|
2008-06-06 21:40:37 +00:00
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
2008-06-06 21:40:37 +00:00
|
|
|
{
|
2009-08-24 19:58:15 +00:00
|
|
|
/* Return the exception code */
|
|
|
|
_SEH2_YIELD(return _SEH2_GetExceptionCode());
|
2008-06-06 21:40:37 +00:00
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_END;
|
2008-06-23 12:45:27 +00:00
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
/* Save the class directly */
|
|
|
|
if (Class) ParseContext.Class = *Class;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Setup the parse context */
|
|
|
|
ParseContext.CreateOperation = TRUE;
|
|
|
|
ParseContext.CreateOptions = CreateOptions;
|
2008-06-22 16:24:15 +00:00
|
|
|
|
2008-06-23 12:45:27 +00:00
|
|
|
/* Do the create */
|
|
|
|
Status = ObOpenObjectByName(ObjectAttributes,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
PreviousMode,
|
|
|
|
NULL,
|
|
|
|
DesiredAccess,
|
|
|
|
&ParseContext,
|
|
|
|
&Handle);
|
|
|
|
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_TRY
|
2008-06-23 12:45:27 +00:00
|
|
|
{
|
2008-06-22 16:24:15 +00:00
|
|
|
/* Return data to user */
|
2008-09-07 09:25:31 +00:00
|
|
|
if (NT_SUCCESS(Status)) *KeyHandle = Handle;
|
2008-06-22 16:24:15 +00:00
|
|
|
if (Disposition) *Disposition = ParseContext.Disposition;
|
2008-06-06 21:40:37 +00:00
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
2008-06-06 21:40:37 +00:00
|
|
|
{
|
|
|
|
/* Get the status */
|
2008-11-24 13:40:26 +00:00
|
|
|
Status = _SEH2_GetExceptionCode();
|
2008-06-06 21:40:37 +00:00
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_END;
|
2008-06-22 16:24:15 +00:00
|
|
|
|
|
|
|
/* Return status */
|
2007-12-09 19:36:04 +00:00
|
|
|
return Status;
|
|
|
|
}
|
|
|
|
|
2007-12-08 21:00:45 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtOpenKey(OUT PHANDLE KeyHandle,
|
|
|
|
IN ACCESS_MASK DesiredAccess,
|
|
|
|
IN POBJECT_ATTRIBUTES ObjectAttributes)
|
|
|
|
{
|
|
|
|
CM_PARSE_CONTEXT ParseContext = {0};
|
2007-12-15 18:14:41 +00:00
|
|
|
HANDLE Handle;
|
2009-08-24 19:58:15 +00:00
|
|
|
NTSTATUS Status;
|
2008-06-06 21:40:37 +00:00
|
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
2007-12-08 21:00:45 +00:00
|
|
|
PAGED_CODE();
|
2007-12-15 18:14:41 +00:00
|
|
|
DPRINT("NtOpenKey(OB 0x%wZ)\n", ObjectAttributes->ObjectName);
|
2007-12-15 20:51:40 +00:00
|
|
|
|
2008-06-23 12:45:27 +00:00
|
|
|
/* Check for user-mode caller */
|
2008-09-07 09:25:31 +00:00
|
|
|
if (PreviousMode != KernelMode)
|
2008-06-06 21:40:37 +00:00
|
|
|
{
|
2008-06-23 12:45:27 +00:00
|
|
|
/* Prepare to probe parameters */
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_TRY
|
2008-06-22 16:24:15 +00:00
|
|
|
{
|
2008-06-06 21:40:37 +00:00
|
|
|
/* Probe the key handle */
|
|
|
|
ProbeForWriteHandle(KeyHandle);
|
|
|
|
*KeyHandle = NULL;
|
2008-06-22 16:24:15 +00:00
|
|
|
|
2008-06-06 21:40:37 +00:00
|
|
|
/* Probe object attributes */
|
2008-09-07 09:25:31 +00:00
|
|
|
ProbeForRead(ObjectAttributes,
|
|
|
|
sizeof(OBJECT_ATTRIBUTES),
|
|
|
|
sizeof(ULONG));
|
2008-06-06 21:40:37 +00:00
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
2008-06-23 12:45:27 +00:00
|
|
|
{
|
2009-08-24 19:58:15 +00:00
|
|
|
/* Return the exception code */
|
|
|
|
_SEH2_YIELD(return _SEH2_GetExceptionCode());
|
2008-06-23 12:45:27 +00:00
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_END;
|
2008-06-06 21:40:37 +00:00
|
|
|
}
|
2008-06-23 12:45:27 +00:00
|
|
|
|
|
|
|
/* Just let the object manager handle this */
|
|
|
|
Status = ObOpenObjectByName(ObjectAttributes,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
ExGetPreviousMode(),
|
|
|
|
NULL,
|
|
|
|
DesiredAccess,
|
|
|
|
&ParseContext,
|
|
|
|
&Handle);
|
|
|
|
|
2008-09-07 09:25:31 +00:00
|
|
|
/* Only do this if we succeeded */
|
2008-06-23 12:45:27 +00:00
|
|
|
if (NT_SUCCESS(Status))
|
2008-06-06 21:40:37 +00:00
|
|
|
{
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_TRY
|
2008-06-23 12:45:27 +00:00
|
|
|
{
|
2008-09-07 09:25:31 +00:00
|
|
|
/* Return the handle to caller */
|
2008-06-23 12:45:27 +00:00
|
|
|
*KeyHandle = Handle;
|
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
2008-06-23 12:45:27 +00:00
|
|
|
{
|
|
|
|
/* Get the status */
|
2008-11-24 13:40:26 +00:00
|
|
|
Status = _SEH2_GetExceptionCode();
|
2008-06-23 12:45:27 +00:00
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
_SEH2_END;
|
2008-06-06 21:40:37 +00:00
|
|
|
}
|
2008-06-22 16:24:15 +00:00
|
|
|
|
2007-12-15 18:14:41 +00:00
|
|
|
/* Return status */
|
|
|
|
return Status;
|
2007-12-08 21:00:45 +00:00
|
|
|
}
|
|
|
|
|
2007-12-15 18:14:41 +00:00
|
|
|
|
2007-11-02 23:12:22 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtDeleteKey(IN HANDLE KeyHandle)
|
|
|
|
{
|
2007-12-06 21:11:57 +00:00
|
|
|
PCM_KEY_BODY KeyObject;
|
2007-11-02 23:12:22 +00:00
|
|
|
NTSTATUS Status;
|
|
|
|
REG_DELETE_KEY_INFORMATION DeleteKeyInfo;
|
|
|
|
REG_POST_OPERATION_INFORMATION PostOperationInfo;
|
|
|
|
PAGED_CODE();
|
|
|
|
DPRINT("NtDeleteKey(KH 0x%p)\n", KeyHandle);
|
|
|
|
|
|
|
|
/* Verify that the handle is valid and is a registry key */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
DELETE,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
ExGetPreviousMode(),
|
2007-12-15 20:51:40 +00:00
|
|
|
(PVOID*)&KeyObject,
|
2007-11-02 23:12:22 +00:00
|
|
|
NULL);
|
2007-12-15 20:51:40 +00:00
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
2007-11-02 23:12:22 +00:00
|
|
|
|
|
|
|
/* Setup the callback */
|
|
|
|
PostOperationInfo.Object = (PVOID)KeyObject;
|
|
|
|
DeleteKeyInfo.Object = (PVOID)KeyObject;
|
|
|
|
Status = CmiCallRegisteredCallbacks(RegNtPreDeleteKey, &DeleteKeyInfo);
|
|
|
|
if (NT_SUCCESS(Status))
|
|
|
|
{
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Check if we are read-only */
|
|
|
|
if ((KeyObject->KeyControlBlock->ExtFlags & CM_KCB_READ_ONLY_KEY) ||
|
|
|
|
(KeyObject->KeyControlBlock->ParentKcb->ExtFlags & CM_KCB_READ_ONLY_KEY))
|
|
|
|
{
|
|
|
|
/* Fail */
|
|
|
|
Status = STATUS_ACCESS_DENIED;
|
|
|
|
}
|
|
|
|
else
|
2007-11-02 23:12:22 +00:00
|
|
|
{
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Call the internal API */
|
2008-11-24 13:40:26 +00:00
|
|
|
Status = CmDeleteKey(KeyObject);
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/* Do post callback */
|
|
|
|
PostOperationInfo.Status = Status;
|
|
|
|
CmiCallRegisteredCallbacks(RegNtPostDeleteKey, &PostOperationInfo);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Dereference the object */
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return Status;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtEnumerateKey(IN HANDLE KeyHandle,
|
|
|
|
IN ULONG Index,
|
|
|
|
IN KEY_INFORMATION_CLASS KeyInformationClass,
|
|
|
|
OUT PVOID KeyInformation,
|
|
|
|
IN ULONG Length,
|
|
|
|
OUT PULONG ResultLength)
|
|
|
|
{
|
2009-07-10 10:02:37 +00:00
|
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
2007-11-02 23:12:22 +00:00
|
|
|
NTSTATUS Status;
|
2007-12-06 21:11:57 +00:00
|
|
|
PCM_KEY_BODY KeyObject;
|
2007-11-02 23:12:22 +00:00
|
|
|
REG_ENUMERATE_KEY_INFORMATION EnumerateKeyInfo;
|
|
|
|
REG_POST_OPERATION_INFORMATION PostOperationInfo;
|
|
|
|
PAGED_CODE();
|
2013-08-31 16:02:13 +00:00
|
|
|
DPRINT("NtEnumerateKey() KH 0x%p, Index 0x%x, KIC %d, Length %lu\n",
|
2007-12-15 20:51:40 +00:00
|
|
|
KeyHandle, Index, KeyInformationClass, Length);
|
|
|
|
|
|
|
|
/* Reject classes we don't know about */
|
|
|
|
if ((KeyInformationClass != KeyBasicInformation) &&
|
|
|
|
(KeyInformationClass != KeyNodeInformation) &&
|
|
|
|
(KeyInformationClass != KeyFullInformation))
|
|
|
|
{
|
|
|
|
/* Fail */
|
|
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
}
|
2007-11-02 23:12:22 +00:00
|
|
|
|
|
|
|
/* Verify that the handle is valid and is a registry key */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
KEY_ENUMERATE_SUB_KEYS,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
ExGetPreviousMode(),
|
2007-12-15 20:51:40 +00:00
|
|
|
(PVOID*)&KeyObject,
|
2007-11-02 23:12:22 +00:00
|
|
|
NULL);
|
2007-12-15 20:51:40 +00:00
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
2007-11-02 23:12:22 +00:00
|
|
|
|
2009-07-10 10:02:37 +00:00
|
|
|
if (PreviousMode != KernelMode)
|
|
|
|
{
|
|
|
|
_SEH2_TRY
|
|
|
|
{
|
|
|
|
ProbeForWriteUlong(ResultLength);
|
|
|
|
ProbeForWrite(KeyInformation,
|
|
|
|
Length,
|
|
|
|
sizeof(ULONG));
|
|
|
|
}
|
|
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
|
|
{
|
|
|
|
/* Dereference and return status */
|
|
|
|
ObDereferenceObject(KeyObject);
|
2009-08-24 19:58:15 +00:00
|
|
|
_SEH2_YIELD(return _SEH2_GetExceptionCode());
|
2009-07-10 10:02:37 +00:00
|
|
|
}
|
2009-08-24 19:58:15 +00:00
|
|
|
_SEH2_END;
|
2009-07-10 10:02:37 +00:00
|
|
|
}
|
|
|
|
|
2007-11-02 23:12:22 +00:00
|
|
|
/* Setup the callback */
|
|
|
|
PostOperationInfo.Object = (PVOID)KeyObject;
|
|
|
|
EnumerateKeyInfo.Object = (PVOID)KeyObject;
|
|
|
|
EnumerateKeyInfo.Index = Index;
|
|
|
|
EnumerateKeyInfo.KeyInformationClass = KeyInformationClass;
|
|
|
|
EnumerateKeyInfo.Length = Length;
|
|
|
|
EnumerateKeyInfo.ResultLength = ResultLength;
|
|
|
|
|
|
|
|
/* Do the callback */
|
|
|
|
Status = CmiCallRegisteredCallbacks(RegNtPreEnumerateKey, &EnumerateKeyInfo);
|
|
|
|
if (NT_SUCCESS(Status))
|
|
|
|
{
|
|
|
|
/* Call the internal API */
|
|
|
|
Status = CmEnumerateKey(KeyObject->KeyControlBlock,
|
|
|
|
Index,
|
|
|
|
KeyInformationClass,
|
|
|
|
KeyInformation,
|
|
|
|
Length,
|
|
|
|
ResultLength);
|
|
|
|
|
|
|
|
/* Do the post callback */
|
|
|
|
PostOperationInfo.Status = Status;
|
|
|
|
CmiCallRegisteredCallbacks(RegNtPostEnumerateKey, &PostOperationInfo);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Dereference and return status */
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return Status;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtEnumerateValueKey(IN HANDLE KeyHandle,
|
|
|
|
IN ULONG Index,
|
|
|
|
IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
|
|
|
|
OUT PVOID KeyValueInformation,
|
|
|
|
IN ULONG Length,
|
|
|
|
OUT PULONG ResultLength)
|
|
|
|
{
|
2009-07-10 10:02:37 +00:00
|
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
2007-11-02 23:12:22 +00:00
|
|
|
NTSTATUS Status;
|
2007-12-06 21:11:57 +00:00
|
|
|
PCM_KEY_BODY KeyObject;
|
2007-11-02 23:12:22 +00:00
|
|
|
REG_ENUMERATE_VALUE_KEY_INFORMATION EnumerateValueKeyInfo;
|
|
|
|
REG_POST_OPERATION_INFORMATION PostOperationInfo;
|
|
|
|
PAGED_CODE();
|
2013-08-31 16:02:13 +00:00
|
|
|
DPRINT("NtEnumerateValueKey() KH 0x%p, Index 0x%x, KVIC %d, Length %lu\n",
|
2007-12-15 20:51:40 +00:00
|
|
|
KeyHandle, Index, KeyValueInformationClass, Length);
|
|
|
|
|
|
|
|
/* Reject classes we don't know about */
|
|
|
|
if ((KeyValueInformationClass != KeyValueBasicInformation) &&
|
|
|
|
(KeyValueInformationClass != KeyValueFullInformation) &&
|
|
|
|
(KeyValueInformationClass != KeyValuePartialInformation))
|
|
|
|
{
|
|
|
|
/* Fail */
|
|
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
}
|
2007-11-02 23:12:22 +00:00
|
|
|
|
|
|
|
/* Verify that the handle is valid and is a registry key */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
KEY_QUERY_VALUE,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
ExGetPreviousMode(),
|
2007-12-15 20:51:40 +00:00
|
|
|
(PVOID*)&KeyObject,
|
2007-11-02 23:12:22 +00:00
|
|
|
NULL);
|
2007-12-15 20:51:40 +00:00
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
2007-11-02 23:12:22 +00:00
|
|
|
|
2009-07-10 10:02:37 +00:00
|
|
|
if (PreviousMode != KernelMode)
|
|
|
|
{
|
|
|
|
_SEH2_TRY
|
|
|
|
{
|
|
|
|
ProbeForWriteUlong(ResultLength);
|
|
|
|
ProbeForWrite(KeyValueInformation,
|
|
|
|
Length,
|
|
|
|
sizeof(ULONG));
|
|
|
|
}
|
|
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
|
|
{
|
|
|
|
/* Dereference and return status */
|
|
|
|
ObDereferenceObject(KeyObject);
|
2009-08-24 19:58:15 +00:00
|
|
|
_SEH2_YIELD(return _SEH2_GetExceptionCode());
|
2009-07-10 10:02:37 +00:00
|
|
|
}
|
2009-08-24 19:58:15 +00:00
|
|
|
_SEH2_END;
|
2009-07-10 10:02:37 +00:00
|
|
|
}
|
|
|
|
|
2007-11-02 23:12:22 +00:00
|
|
|
/* Setup the callback */
|
|
|
|
PostOperationInfo.Object = (PVOID)KeyObject;
|
|
|
|
EnumerateValueKeyInfo.Object = (PVOID)KeyObject;
|
|
|
|
EnumerateValueKeyInfo.Index = Index;
|
|
|
|
EnumerateValueKeyInfo.KeyValueInformationClass = KeyValueInformationClass;
|
|
|
|
EnumerateValueKeyInfo.KeyValueInformation = KeyValueInformation;
|
|
|
|
EnumerateValueKeyInfo.Length = Length;
|
|
|
|
EnumerateValueKeyInfo.ResultLength = ResultLength;
|
|
|
|
|
|
|
|
/* Do the callback */
|
|
|
|
Status = CmiCallRegisteredCallbacks(RegNtPreEnumerateValueKey,
|
|
|
|
&EnumerateValueKeyInfo);
|
|
|
|
if (NT_SUCCESS(Status))
|
|
|
|
{
|
|
|
|
/* Call the internal API */
|
|
|
|
Status = CmEnumerateValueKey(KeyObject->KeyControlBlock,
|
|
|
|
Index,
|
|
|
|
KeyValueInformationClass,
|
|
|
|
KeyValueInformation,
|
|
|
|
Length,
|
|
|
|
ResultLength);
|
|
|
|
|
|
|
|
/* Do the post callback */
|
|
|
|
PostOperationInfo.Status = Status;
|
|
|
|
CmiCallRegisteredCallbacks(RegNtPostEnumerateValueKey, &PostOperationInfo);
|
|
|
|
}
|
|
|
|
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return Status;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtQueryKey(IN HANDLE KeyHandle,
|
|
|
|
IN KEY_INFORMATION_CLASS KeyInformationClass,
|
|
|
|
OUT PVOID KeyInformation,
|
|
|
|
IN ULONG Length,
|
|
|
|
OUT PULONG ResultLength)
|
|
|
|
{
|
2009-07-10 10:02:37 +00:00
|
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
2007-11-02 23:12:22 +00:00
|
|
|
NTSTATUS Status;
|
2007-12-06 21:11:57 +00:00
|
|
|
PCM_KEY_BODY KeyObject;
|
2007-11-02 23:12:22 +00:00
|
|
|
REG_QUERY_KEY_INFORMATION QueryKeyInfo;
|
|
|
|
REG_POST_OPERATION_INFORMATION PostOperationInfo;
|
2007-12-15 20:51:40 +00:00
|
|
|
OBJECT_HANDLE_INFORMATION HandleInfo;
|
2007-11-02 23:12:22 +00:00
|
|
|
PAGED_CODE();
|
2013-08-31 16:02:13 +00:00
|
|
|
DPRINT("NtQueryKey() KH 0x%p, KIC %d, Length %lu\n",
|
2007-12-15 20:51:40 +00:00
|
|
|
KeyHandle, KeyInformationClass, Length);
|
|
|
|
|
|
|
|
/* Reject invalid classes */
|
|
|
|
if ((KeyInformationClass != KeyBasicInformation) &&
|
|
|
|
(KeyInformationClass != KeyNodeInformation) &&
|
|
|
|
(KeyInformationClass != KeyFullInformation) &&
|
|
|
|
(KeyInformationClass != KeyNameInformation) &&
|
|
|
|
(KeyInformationClass != KeyCachedInformation) &&
|
|
|
|
(KeyInformationClass != KeyFlagsInformation))
|
2007-11-02 23:12:22 +00:00
|
|
|
{
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Fail */
|
|
|
|
return STATUS_INVALID_PARAMETER;
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Check if just the name is required */
|
|
|
|
if (KeyInformationClass == KeyNameInformation)
|
|
|
|
{
|
|
|
|
/* Ignore access level */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
0,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
ExGetPreviousMode(),
|
|
|
|
(PVOID*)&KeyObject,
|
|
|
|
&HandleInfo);
|
|
|
|
if (NT_SUCCESS(Status))
|
|
|
|
{
|
|
|
|
/* At least a single bit of access is required */
|
|
|
|
if (!HandleInfo.GrantedAccess)
|
|
|
|
{
|
|
|
|
/* No such luck */
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
Status = STATUS_ACCESS_DENIED;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
/* Get a reference */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
KEY_QUERY_VALUE,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
ExGetPreviousMode(),
|
|
|
|
(PVOID*)&KeyObject,
|
|
|
|
NULL);
|
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Quit on failure */
|
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
2007-11-02 23:12:22 +00:00
|
|
|
|
2009-07-10 10:02:37 +00:00
|
|
|
if (PreviousMode != KernelMode)
|
|
|
|
{
|
|
|
|
_SEH2_TRY
|
|
|
|
{
|
|
|
|
ProbeForWriteUlong(ResultLength);
|
|
|
|
ProbeForWrite(KeyInformation,
|
|
|
|
Length,
|
|
|
|
sizeof(ULONG));
|
|
|
|
}
|
|
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
|
|
{
|
|
|
|
/* Dereference and return status */
|
|
|
|
ObDereferenceObject(KeyObject);
|
2009-08-24 19:58:15 +00:00
|
|
|
_SEH2_YIELD(return _SEH2_GetExceptionCode());
|
2009-07-10 10:02:37 +00:00
|
|
|
}
|
2009-08-24 19:58:15 +00:00
|
|
|
_SEH2_END;
|
2009-07-10 10:02:37 +00:00
|
|
|
}
|
|
|
|
|
2007-11-02 23:12:22 +00:00
|
|
|
/* Setup the callback */
|
|
|
|
PostOperationInfo.Object = (PVOID)KeyObject;
|
|
|
|
QueryKeyInfo.Object = (PVOID)KeyObject;
|
|
|
|
QueryKeyInfo.KeyInformationClass = KeyInformationClass;
|
|
|
|
QueryKeyInfo.KeyInformation = KeyInformation;
|
|
|
|
QueryKeyInfo.Length = Length;
|
|
|
|
QueryKeyInfo.ResultLength = ResultLength;
|
|
|
|
|
|
|
|
/* Do the callback */
|
|
|
|
Status = CmiCallRegisteredCallbacks(RegNtPreQueryKey, &QueryKeyInfo);
|
|
|
|
if (NT_SUCCESS(Status))
|
|
|
|
{
|
|
|
|
/* Call the internal API */
|
|
|
|
Status = CmQueryKey(KeyObject->KeyControlBlock,
|
|
|
|
KeyInformationClass,
|
|
|
|
KeyInformation,
|
|
|
|
Length,
|
|
|
|
ResultLength);
|
|
|
|
|
|
|
|
/* Do the post callback */
|
|
|
|
PostOperationInfo.Status = Status;
|
|
|
|
CmiCallRegisteredCallbacks(RegNtPostQueryKey, &PostOperationInfo);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Dereference and return status */
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return Status;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtQueryValueKey(IN HANDLE KeyHandle,
|
|
|
|
IN PUNICODE_STRING ValueName,
|
|
|
|
IN KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
|
|
|
|
OUT PVOID KeyValueInformation,
|
|
|
|
IN ULONG Length,
|
|
|
|
OUT PULONG ResultLength)
|
|
|
|
{
|
2009-07-10 10:02:37 +00:00
|
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
2007-11-02 23:12:22 +00:00
|
|
|
NTSTATUS Status;
|
2007-12-06 21:11:57 +00:00
|
|
|
PCM_KEY_BODY KeyObject;
|
2007-11-02 23:12:22 +00:00
|
|
|
REG_QUERY_VALUE_KEY_INFORMATION QueryValueKeyInfo;
|
|
|
|
REG_POST_OPERATION_INFORMATION PostOperationInfo;
|
2007-12-15 20:51:40 +00:00
|
|
|
UNICODE_STRING ValueNameCopy = *ValueName;
|
2007-11-02 23:12:22 +00:00
|
|
|
PAGED_CODE();
|
2013-08-31 16:02:13 +00:00
|
|
|
DPRINT("NtQueryValueKey() KH 0x%p, VN '%wZ', KVIC %d, Length %lu\n",
|
2007-11-02 23:12:22 +00:00
|
|
|
KeyHandle, ValueName, KeyValueInformationClass, Length);
|
|
|
|
|
|
|
|
/* Verify that the handle is valid and is a registry key */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
KEY_QUERY_VALUE,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
ExGetPreviousMode(),
|
2007-12-15 20:51:40 +00:00
|
|
|
(PVOID*)&KeyObject,
|
2007-11-02 23:12:22 +00:00
|
|
|
NULL);
|
2007-12-15 20:51:40 +00:00
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
|
|
|
2009-07-10 10:02:37 +00:00
|
|
|
if (PreviousMode != KernelMode)
|
|
|
|
{
|
|
|
|
_SEH2_TRY
|
|
|
|
{
|
|
|
|
ProbeForWriteUlong(ResultLength);
|
|
|
|
ProbeForWrite(KeyValueInformation,
|
|
|
|
Length,
|
|
|
|
sizeof(ULONG));
|
|
|
|
}
|
|
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
|
|
{
|
|
|
|
/* Dereference and return status */
|
|
|
|
ObDereferenceObject(KeyObject);
|
2009-08-24 19:58:15 +00:00
|
|
|
_SEH2_YIELD(return _SEH2_GetExceptionCode());
|
2009-07-10 10:02:37 +00:00
|
|
|
}
|
2009-08-24 19:58:15 +00:00
|
|
|
_SEH2_END;
|
2009-07-10 10:02:37 +00:00
|
|
|
}
|
|
|
|
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Make sure the name is aligned properly */
|
|
|
|
if ((ValueNameCopy.Length & (sizeof(WCHAR) - 1)))
|
2007-11-02 23:12:22 +00:00
|
|
|
{
|
2007-12-15 20:51:40 +00:00
|
|
|
/* It isn't, so we'll fail */
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
/* Ignore any null characters at the end */
|
|
|
|
while ((ValueNameCopy.Length) &&
|
|
|
|
!(ValueNameCopy.Buffer[ValueNameCopy.Length / sizeof(WCHAR) - 1]))
|
|
|
|
{
|
|
|
|
/* Skip it */
|
|
|
|
ValueNameCopy.Length -= sizeof(WCHAR);
|
|
|
|
}
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/* Setup the callback */
|
|
|
|
PostOperationInfo.Object = (PVOID)KeyObject;
|
|
|
|
QueryValueKeyInfo.Object = (PVOID)KeyObject;
|
2007-12-15 20:51:40 +00:00
|
|
|
QueryValueKeyInfo.ValueName = &ValueNameCopy;
|
2007-11-02 23:12:22 +00:00
|
|
|
QueryValueKeyInfo.KeyValueInformationClass = KeyValueInformationClass;
|
|
|
|
QueryValueKeyInfo.Length = Length;
|
|
|
|
QueryValueKeyInfo.ResultLength = ResultLength;
|
|
|
|
|
|
|
|
/* Do the callback */
|
|
|
|
Status = CmiCallRegisteredCallbacks(RegNtPreQueryValueKey, &QueryValueKeyInfo);
|
|
|
|
if (NT_SUCCESS(Status))
|
|
|
|
{
|
|
|
|
/* Call the internal API */
|
|
|
|
Status = CmQueryValueKey(KeyObject->KeyControlBlock,
|
2007-12-15 20:51:40 +00:00
|
|
|
ValueNameCopy,
|
2007-11-02 23:12:22 +00:00
|
|
|
KeyValueInformationClass,
|
|
|
|
KeyValueInformation,
|
|
|
|
Length,
|
|
|
|
ResultLength);
|
|
|
|
|
|
|
|
/* Do the post callback */
|
|
|
|
PostOperationInfo.Status = Status;
|
|
|
|
CmiCallRegisteredCallbacks(RegNtPostQueryValueKey, &PostOperationInfo);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Dereference and return status */
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return Status;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtSetValueKey(IN HANDLE KeyHandle,
|
|
|
|
IN PUNICODE_STRING ValueName,
|
|
|
|
IN ULONG TitleIndex,
|
|
|
|
IN ULONG Type,
|
|
|
|
IN PVOID Data,
|
|
|
|
IN ULONG DataSize)
|
|
|
|
{
|
|
|
|
NTSTATUS Status;
|
2007-12-06 21:11:57 +00:00
|
|
|
PCM_KEY_BODY KeyObject;
|
2007-11-02 23:12:22 +00:00
|
|
|
REG_SET_VALUE_KEY_INFORMATION SetValueKeyInfo;
|
|
|
|
REG_POST_OPERATION_INFORMATION PostOperationInfo;
|
2007-12-15 20:51:40 +00:00
|
|
|
UNICODE_STRING ValueNameCopy = *ValueName;
|
2007-11-02 23:12:22 +00:00
|
|
|
PAGED_CODE();
|
2013-08-31 16:02:13 +00:00
|
|
|
DPRINT("NtSetValueKey() KH 0x%p, VN '%wZ', TI %x, T %lu, DS %lu\n",
|
2007-11-02 23:12:22 +00:00
|
|
|
KeyHandle, ValueName, TitleIndex, Type, DataSize);
|
|
|
|
|
|
|
|
/* Verify that the handle is valid and is a registry key */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
KEY_SET_VALUE,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
ExGetPreviousMode(),
|
2007-12-15 20:51:40 +00:00
|
|
|
(PVOID*)&KeyObject,
|
2007-11-02 23:12:22 +00:00
|
|
|
NULL);
|
2007-12-15 20:51:40 +00:00
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
|
|
|
|
|
|
/* Make sure the name is aligned, not too long, and the data under 4GB */
|
|
|
|
if ( (ValueNameCopy.Length > 32767) ||
|
|
|
|
((ValueNameCopy.Length & (sizeof(WCHAR) - 1))) ||
|
|
|
|
(DataSize > 0x80000000))
|
|
|
|
{
|
|
|
|
/* Fail */
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Ignore any null characters at the end */
|
|
|
|
while ((ValueNameCopy.Length) &&
|
|
|
|
!(ValueNameCopy.Buffer[ValueNameCopy.Length / sizeof(WCHAR) - 1]))
|
2007-11-02 23:12:22 +00:00
|
|
|
{
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Skip it */
|
|
|
|
ValueNameCopy.Length -= sizeof(WCHAR);
|
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Don't touch read-only keys */
|
|
|
|
if (KeyObject->KeyControlBlock->ExtFlags & CM_KCB_READ_ONLY_KEY)
|
|
|
|
{
|
|
|
|
/* Fail */
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return STATUS_ACCESS_DENIED;
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/* Setup callback */
|
|
|
|
PostOperationInfo.Object = (PVOID)KeyObject;
|
|
|
|
SetValueKeyInfo.Object = (PVOID)KeyObject;
|
|
|
|
SetValueKeyInfo.ValueName = ValueName;
|
|
|
|
SetValueKeyInfo.TitleIndex = TitleIndex;
|
|
|
|
SetValueKeyInfo.Type = Type;
|
|
|
|
SetValueKeyInfo.Data = Data;
|
|
|
|
SetValueKeyInfo.DataSize = DataSize;
|
|
|
|
|
|
|
|
/* Do the callback */
|
|
|
|
Status = CmiCallRegisteredCallbacks(RegNtPreSetValueKey, &SetValueKeyInfo);
|
|
|
|
if (NT_SUCCESS(Status))
|
2008-11-24 13:40:26 +00:00
|
|
|
{
|
2007-11-02 23:12:22 +00:00
|
|
|
/* Call the internal API */
|
|
|
|
Status = CmSetValueKey(KeyObject->KeyControlBlock,
|
2007-12-15 20:51:40 +00:00
|
|
|
&ValueNameCopy,
|
2007-11-02 23:12:22 +00:00
|
|
|
Type,
|
|
|
|
Data,
|
|
|
|
DataSize);
|
|
|
|
}
|
|
|
|
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Do the post-callback */
|
2007-11-02 23:12:22 +00:00
|
|
|
PostOperationInfo.Status = Status;
|
|
|
|
CmiCallRegisteredCallbacks(RegNtPostSetValueKey, &PostOperationInfo);
|
|
|
|
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Dereference and return status */
|
|
|
|
ObDereferenceObject(KeyObject);
|
2007-11-02 23:12:22 +00:00
|
|
|
return Status;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtDeleteValueKey(IN HANDLE KeyHandle,
|
|
|
|
IN PUNICODE_STRING ValueName)
|
|
|
|
{
|
2007-12-06 21:11:57 +00:00
|
|
|
PCM_KEY_BODY KeyObject;
|
2007-11-02 23:12:22 +00:00
|
|
|
NTSTATUS Status;
|
|
|
|
REG_DELETE_VALUE_KEY_INFORMATION DeleteValueKeyInfo;
|
|
|
|
REG_POST_OPERATION_INFORMATION PostOperationInfo;
|
|
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
2008-12-13 15:49:41 +00:00
|
|
|
UNICODE_STRING ValueNameCopy = *ValueName;
|
2007-11-02 23:12:22 +00:00
|
|
|
PAGED_CODE();
|
|
|
|
|
|
|
|
/* Verify that the handle is valid and is a registry key */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
KEY_SET_VALUE,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
PreviousMode,
|
|
|
|
(PVOID *)&KeyObject,
|
|
|
|
NULL);
|
2007-12-15 20:51:40 +00:00
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
|
|
|
|
|
|
/* Don't touch read-only keys */
|
|
|
|
if (KeyObject->KeyControlBlock->ExtFlags & CM_KCB_READ_ONLY_KEY)
|
2007-11-02 23:12:22 +00:00
|
|
|
{
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Fail */
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return STATUS_ACCESS_DENIED;
|
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Make sure the name is aligned properly */
|
|
|
|
if ((ValueNameCopy.Length & (sizeof(WCHAR) - 1)))
|
|
|
|
{
|
|
|
|
/* It isn't, so we'll fail */
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return STATUS_INVALID_PARAMETER;
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/* Do the callback */
|
|
|
|
DeleteValueKeyInfo.Object = (PVOID)KeyObject;
|
|
|
|
DeleteValueKeyInfo.ValueName = ValueName;
|
|
|
|
Status = CmiCallRegisteredCallbacks(RegNtPreDeleteValueKey,
|
|
|
|
&DeleteValueKeyInfo);
|
|
|
|
if (NT_SUCCESS(Status))
|
|
|
|
{
|
|
|
|
/* Call the internal API */
|
2007-12-15 20:51:40 +00:00
|
|
|
Status = CmDeleteValueKey(KeyObject->KeyControlBlock, ValueNameCopy);
|
2007-11-02 23:12:22 +00:00
|
|
|
|
|
|
|
/* Do the post callback */
|
|
|
|
PostOperationInfo.Object = (PVOID)KeyObject;
|
|
|
|
PostOperationInfo.Status = Status;
|
|
|
|
CmiCallRegisteredCallbacks(RegNtPostDeleteValueKey,
|
|
|
|
&PostOperationInfo);
|
|
|
|
}
|
|
|
|
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Dereference the key body */
|
2007-11-02 23:12:22 +00:00
|
|
|
ObDereferenceObject(KeyObject);
|
2007-11-05 22:54:47 +00:00
|
|
|
return Status;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtFlushKey(IN HANDLE KeyHandle)
|
|
|
|
{
|
|
|
|
NTSTATUS Status;
|
2007-12-06 21:11:57 +00:00
|
|
|
PCM_KEY_BODY KeyObject;
|
2007-11-05 22:54:47 +00:00
|
|
|
PAGED_CODE();
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-05 22:54:47 +00:00
|
|
|
/* Get the key object */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
0,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
ExGetPreviousMode(),
|
|
|
|
(PVOID*)&KeyObject,
|
|
|
|
NULL);
|
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-05 22:54:47 +00:00
|
|
|
/* Lock the registry */
|
2007-12-15 20:51:40 +00:00
|
|
|
CmpLockRegistry();
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Lock the KCB */
|
|
|
|
CmpAcquireKcbLockShared(KeyObject->KeyControlBlock);
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-05 22:54:47 +00:00
|
|
|
/* Make sure KCB isn't deleted */
|
|
|
|
if (KeyObject->KeyControlBlock->Delete)
|
|
|
|
{
|
|
|
|
/* Fail */
|
|
|
|
Status = STATUS_KEY_DELETED;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
/* Call the internal API */
|
|
|
|
Status = CmFlushKey(KeyObject->KeyControlBlock, FALSE);
|
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-12-15 20:51:40 +00:00
|
|
|
/* Release the locks */
|
|
|
|
CmpReleaseKcbLock(KeyObject->KeyControlBlock);
|
|
|
|
CmpUnlockRegistry();
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-05 22:54:47 +00:00
|
|
|
/* Dereference the object and return status */
|
|
|
|
ObDereferenceObject(KeyObject);
|
2007-11-02 23:12:22 +00:00
|
|
|
return Status;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtLoadKey(IN POBJECT_ATTRIBUTES KeyObjectAttributes,
|
|
|
|
IN POBJECT_ATTRIBUTES FileObjectAttributes)
|
|
|
|
{
|
2007-12-08 21:00:45 +00:00
|
|
|
/* Call the newer API */
|
2008-08-25 15:10:27 +00:00
|
|
|
return NtLoadKeyEx(KeyObjectAttributes, FileObjectAttributes, 0, NULL);
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
2007-11-22 18:38:32 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtLoadKey2(IN POBJECT_ATTRIBUTES KeyObjectAttributes,
|
|
|
|
IN POBJECT_ATTRIBUTES FileObjectAttributes,
|
|
|
|
IN ULONG Flags)
|
|
|
|
{
|
2007-12-08 21:00:45 +00:00
|
|
|
/* Call the newer API */
|
2007-11-22 18:38:32 +00:00
|
|
|
return NtLoadKeyEx(KeyObjectAttributes, FileObjectAttributes, Flags, NULL);
|
|
|
|
}
|
|
|
|
|
2007-11-02 23:12:22 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtLoadKeyEx(IN POBJECT_ATTRIBUTES TargetKey,
|
|
|
|
IN POBJECT_ATTRIBUTES SourceFile,
|
|
|
|
IN ULONG Flags,
|
2007-11-22 18:38:32 +00:00
|
|
|
IN HANDLE TrustClassKey)
|
2007-11-02 23:12:22 +00:00
|
|
|
{
|
2007-11-22 18:38:32 +00:00
|
|
|
NTSTATUS Status;
|
|
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
2007-12-06 21:11:57 +00:00
|
|
|
PCM_KEY_BODY KeyBody = NULL;
|
2007-11-22 18:38:32 +00:00
|
|
|
PAGED_CODE();
|
|
|
|
|
|
|
|
/* Validate flags */
|
|
|
|
if (Flags & ~REG_NO_LAZY_FLUSH) return STATUS_INVALID_PARAMETER;
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-22 18:38:32 +00:00
|
|
|
/* Validate privilege */
|
|
|
|
if (!SeSinglePrivilegeCheck(SeRestorePrivilege, PreviousMode))
|
|
|
|
{
|
|
|
|
/* Fail */
|
|
|
|
DPRINT1("Restore Privilege missing!\n");
|
2007-12-12 11:42:20 +00:00
|
|
|
return STATUS_PRIVILEGE_NOT_HELD;
|
2007-11-22 18:38:32 +00:00
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-22 18:38:32 +00:00
|
|
|
/* Block APCs */
|
|
|
|
KeEnterCriticalRegion();
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-22 18:38:32 +00:00
|
|
|
/* Check if we have a trust class */
|
|
|
|
if (TrustClassKey)
|
|
|
|
{
|
|
|
|
/* Reference it */
|
|
|
|
Status = ObReferenceObjectByHandle(TrustClassKey,
|
|
|
|
0,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
PreviousMode,
|
|
|
|
(PVOID *)&KeyBody,
|
|
|
|
NULL);
|
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-22 18:38:32 +00:00
|
|
|
/* Call the internal API */
|
|
|
|
Status = CmLoadKey(TargetKey, SourceFile, Flags, KeyBody);
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-22 18:38:32 +00:00
|
|
|
/* Dereference the trust key, if any */
|
|
|
|
if (KeyBody) ObDereferenceObject(KeyBody);
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-22 18:38:32 +00:00
|
|
|
/* Bring back APCs */
|
|
|
|
KeLeaveCriticalRegion();
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-11-22 18:38:32 +00:00
|
|
|
/* Return status */
|
|
|
|
return Status;
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
2007-12-08 21:00:45 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtNotifyChangeKey(IN HANDLE KeyHandle,
|
|
|
|
IN HANDLE Event,
|
|
|
|
IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
|
|
|
|
IN PVOID ApcContext OPTIONAL,
|
|
|
|
OUT PIO_STATUS_BLOCK IoStatusBlock,
|
|
|
|
IN ULONG CompletionFilter,
|
|
|
|
IN BOOLEAN WatchTree,
|
|
|
|
OUT PVOID Buffer,
|
|
|
|
IN ULONG Length,
|
|
|
|
IN BOOLEAN Asynchronous)
|
|
|
|
{
|
|
|
|
/* Call the newer API */
|
|
|
|
return NtNotifyChangeMultipleKeys(KeyHandle,
|
|
|
|
0,
|
|
|
|
NULL,
|
|
|
|
Event,
|
|
|
|
ApcRoutine,
|
|
|
|
ApcContext,
|
|
|
|
IoStatusBlock,
|
|
|
|
CompletionFilter,
|
|
|
|
WatchTree,
|
|
|
|
Buffer,
|
|
|
|
Length,
|
|
|
|
Asynchronous);
|
|
|
|
}
|
|
|
|
|
2007-12-02 18:40:33 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtInitializeRegistry(IN USHORT Flag)
|
|
|
|
{
|
|
|
|
BOOLEAN SetupBoot;
|
|
|
|
NTSTATUS Status = STATUS_SUCCESS;
|
|
|
|
PAGED_CODE();
|
|
|
|
|
|
|
|
/* Always do this as kernel mode */
|
|
|
|
if (KeGetPreviousMode() == UserMode) return ZwInitializeRegistry(Flag);
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2010-01-28 15:51:18 +00:00
|
|
|
/* Enough of the system has booted by now */
|
2010-02-01 03:51:45 +00:00
|
|
|
Ki386PerfEnd();
|
2010-01-28 15:51:18 +00:00
|
|
|
|
2007-12-02 18:40:33 +00:00
|
|
|
/* Validate flag */
|
|
|
|
if (Flag > CM_BOOT_FLAG_MAX) return STATUS_INVALID_PARAMETER;
|
|
|
|
|
|
|
|
/* Check if boot was accepted */
|
|
|
|
if ((Flag >= CM_BOOT_FLAG_ACCEPTED) && (Flag <= CM_BOOT_FLAG_MAX))
|
|
|
|
{
|
|
|
|
/* Only allow once */
|
|
|
|
if (!CmBootAcceptFirstTime) return STATUS_ACCESS_DENIED;
|
|
|
|
CmBootAcceptFirstTime = FALSE;
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-12-02 18:40:33 +00:00
|
|
|
/* Get the control set accepted */
|
|
|
|
Flag -= CM_BOOT_FLAG_ACCEPTED;
|
|
|
|
if (Flag)
|
|
|
|
{
|
|
|
|
/* FIXME: Save the last known good boot */
|
|
|
|
//Status = CmpSaveBootControlSet(Flag);
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-12-02 18:40:33 +00:00
|
|
|
/* Notify HAL */
|
|
|
|
HalEndOfBoot();
|
|
|
|
|
|
|
|
/* Enable lazy flush */
|
|
|
|
CmpHoldLazyFlush = FALSE;
|
|
|
|
CmpLazyFlush();
|
|
|
|
return Status;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Otherwise, invalid boot */
|
|
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
}
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-12-02 18:40:33 +00:00
|
|
|
/* Check if this was a setup boot */
|
|
|
|
SetupBoot = (Flag == CM_BOOT_FLAG_SETUP ? TRUE : FALSE);
|
|
|
|
|
|
|
|
/* Make sure we're only called once */
|
|
|
|
if (!CmFirstTime) return STATUS_ACCESS_DENIED;
|
|
|
|
CmFirstTime = FALSE;
|
2008-11-24 13:40:26 +00:00
|
|
|
|
2007-12-02 18:40:33 +00:00
|
|
|
/* Acquire registry lock */
|
|
|
|
//CmpLockRegistryExclusive();
|
|
|
|
|
|
|
|
/* Initialize the hives and lazy flusher */
|
|
|
|
CmpCmdInit(SetupBoot);
|
|
|
|
|
2011-05-08 21:37:00 +00:00
|
|
|
/* Save version data */
|
|
|
|
CmpSetVersionData();
|
2007-12-02 18:40:33 +00:00
|
|
|
|
|
|
|
/* Release the registry lock */
|
|
|
|
//CmpUnlockRegistry();
|
|
|
|
return STATUS_SUCCESS;
|
|
|
|
}
|
|
|
|
|
2007-12-08 21:00:45 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtCompactKeys(IN ULONG Count,
|
|
|
|
IN PHANDLE KeyArray)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtCompressKey(IN HANDLE Key)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
2007-11-02 23:12:22 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtLockProductActivationKeys(IN PULONG pPrivateVer,
|
|
|
|
IN PULONG pSafeMode)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtLockRegistryKey(IN HANDLE KeyHandle)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtNotifyChangeMultipleKeys(IN HANDLE MasterKeyHandle,
|
|
|
|
IN ULONG Count,
|
|
|
|
IN POBJECT_ATTRIBUTES SlaveObjects,
|
|
|
|
IN HANDLE Event,
|
|
|
|
IN PIO_APC_ROUTINE ApcRoutine OPTIONAL,
|
|
|
|
IN PVOID ApcContext OPTIONAL,
|
|
|
|
OUT PIO_STATUS_BLOCK IoStatusBlock,
|
|
|
|
IN ULONG CompletionFilter,
|
|
|
|
IN BOOLEAN WatchTree,
|
|
|
|
OUT PVOID Buffer,
|
|
|
|
IN ULONG Length,
|
|
|
|
IN BOOLEAN Asynchronous)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtQueryMultipleValueKey(IN HANDLE KeyHandle,
|
|
|
|
IN OUT PKEY_VALUE_ENTRY ValueList,
|
|
|
|
IN ULONG NumberOfValues,
|
|
|
|
OUT PVOID Buffer,
|
|
|
|
IN OUT PULONG Length,
|
|
|
|
OUT PULONG ReturnLength)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtQueryOpenSubKeys(IN POBJECT_ATTRIBUTES TargetKey,
|
2008-08-03 19:24:09 +00:00
|
|
|
OUT PULONG HandleCount)
|
2007-11-02 23:12:22 +00:00
|
|
|
{
|
2010-09-26 11:37:40 +00:00
|
|
|
KPROCESSOR_MODE PreviousMode;
|
|
|
|
PCM_KEY_BODY KeyBody = NULL;
|
|
|
|
HANDLE KeyHandle;
|
|
|
|
NTSTATUS Status;
|
|
|
|
|
|
|
|
DPRINT("NtQueryOpenSubKeys()\n");
|
|
|
|
|
|
|
|
PAGED_CODE();
|
|
|
|
|
|
|
|
/* Get the processor mode */
|
|
|
|
PreviousMode = KeGetPreviousMode();
|
|
|
|
|
|
|
|
if (PreviousMode != KernelMode)
|
|
|
|
{
|
|
|
|
/* Prepare to probe parameters */
|
|
|
|
_SEH2_TRY
|
|
|
|
{
|
|
|
|
/* Probe target key */
|
|
|
|
ProbeForRead(TargetKey,
|
|
|
|
sizeof(OBJECT_ATTRIBUTES),
|
|
|
|
sizeof(ULONG));
|
|
|
|
|
|
|
|
/* Probe handle count */
|
|
|
|
ProbeForWriteUlong(HandleCount);
|
|
|
|
}
|
|
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
|
|
{
|
|
|
|
/* Return the exception code */
|
|
|
|
_SEH2_YIELD(return _SEH2_GetExceptionCode());
|
|
|
|
}
|
|
|
|
_SEH2_END;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Open a handle to the key */
|
|
|
|
Status = ObOpenObjectByName(TargetKey,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
PreviousMode,
|
|
|
|
NULL,
|
|
|
|
KEY_READ,
|
|
|
|
NULL,
|
|
|
|
&KeyHandle);
|
|
|
|
if (NT_SUCCESS(Status))
|
|
|
|
{
|
|
|
|
/* Reference the key object */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
KEY_READ,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
PreviousMode,
|
|
|
|
(PVOID *)&KeyBody,
|
|
|
|
NULL);
|
|
|
|
|
|
|
|
/* Close the handle */
|
|
|
|
NtClose(KeyHandle);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Fail, if the key object could not be referenced */
|
|
|
|
if (!NT_SUCCESS(Status))
|
|
|
|
return Status;
|
|
|
|
|
|
|
|
/* Lock the registry exclusively */
|
|
|
|
CmpLockRegistryExclusive();
|
|
|
|
|
|
|
|
/* Fail, if we did not open a hive root key */
|
|
|
|
if (KeyBody->KeyControlBlock->KeyCell !=
|
|
|
|
KeyBody->KeyControlBlock->KeyHive->BaseBlock->RootCell)
|
|
|
|
{
|
|
|
|
DPRINT("Error: Key is not a hive root key!\n");
|
|
|
|
CmpUnlockRegistry();
|
|
|
|
ObDereferenceObject(KeyBody);
|
|
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Call the internal API */
|
|
|
|
*HandleCount = CmCountOpenSubKeys(KeyBody->KeyControlBlock,
|
|
|
|
FALSE);
|
|
|
|
|
|
|
|
/* Unlock the registry */
|
|
|
|
CmpUnlockRegistry();
|
|
|
|
|
|
|
|
/* Dereference the key object */
|
|
|
|
ObDereferenceObject(KeyBody);
|
|
|
|
|
|
|
|
DPRINT("Done.\n");
|
|
|
|
|
|
|
|
return Status;
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtQueryOpenSubKeysEx(IN POBJECT_ATTRIBUTES TargetKey,
|
|
|
|
IN ULONG BufferLength,
|
|
|
|
IN PVOID Buffer,
|
|
|
|
IN PULONG RequiredSize)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
2008-01-05 17:29:44 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtRenameKey(IN HANDLE KeyHandle,
|
|
|
|
IN PUNICODE_STRING ReplacementName)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
2007-11-02 23:12:22 +00:00
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtReplaceKey(IN POBJECT_ATTRIBUTES ObjectAttributes,
|
|
|
|
IN HANDLE Key,
|
|
|
|
IN POBJECT_ATTRIBUTES ReplacedObjectAttributes)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtRestoreKey(IN HANDLE KeyHandle,
|
|
|
|
IN HANDLE FileHandle,
|
|
|
|
IN ULONG RestoreFlags)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtSaveKey(IN HANDLE KeyHandle,
|
|
|
|
IN HANDLE FileHandle)
|
|
|
|
{
|
2014-05-29 19:44:36 +00:00
|
|
|
/* Call the extended API */
|
|
|
|
return NtSaveKeyEx(KeyHandle, FileHandle, REG_STANDARD_FORMAT);
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtSaveKeyEx(IN HANDLE KeyHandle,
|
|
|
|
IN HANDLE FileHandle,
|
|
|
|
IN ULONG Flags)
|
|
|
|
{
|
2014-05-29 19:44:36 +00:00
|
|
|
NTSTATUS Status;
|
|
|
|
PCM_KEY_BODY KeyObject;
|
|
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
|
|
|
|
|
|
|
PAGED_CODE();
|
|
|
|
|
|
|
|
DPRINT("NtSaveKeyEx(0x%08X, 0x%08X, %lu)\n", KeyHandle, FileHandle, Flags);
|
|
|
|
|
|
|
|
/* Verify the flags */
|
|
|
|
if ((Flags != REG_STANDARD_FORMAT)
|
|
|
|
&& (Flags != REG_LATEST_FORMAT)
|
|
|
|
&& (Flags != REG_NO_COMPRESSION))
|
|
|
|
{
|
|
|
|
/* Only one of these values can be specified */
|
|
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Check for the SeBackupPrivilege */
|
|
|
|
if (!SeSinglePrivilegeCheck(SeBackupPrivilege, PreviousMode))
|
|
|
|
{
|
|
|
|
return STATUS_PRIVILEGE_NOT_HELD;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Verify that the handle is valid and is a registry key */
|
|
|
|
Status = ObReferenceObjectByHandle(KeyHandle,
|
|
|
|
KEY_READ,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
PreviousMode,
|
|
|
|
(PVOID*)&KeyObject,
|
|
|
|
NULL);
|
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
|
|
|
|
|
|
/* Call the internal API */
|
|
|
|
Status = CmSaveKey(KeyObject->KeyControlBlock, FileHandle, Flags);
|
|
|
|
|
|
|
|
ObDereferenceObject(KeyObject);
|
|
|
|
return Status;
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtSaveMergedKeys(IN HANDLE HighPrecedenceKeyHandle,
|
|
|
|
IN HANDLE LowPrecedenceKeyHandle,
|
|
|
|
IN HANDLE FileHandle)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtSetInformationKey(IN HANDLE KeyHandle,
|
|
|
|
IN KEY_SET_INFORMATION_CLASS KeyInformationClass,
|
|
|
|
IN PVOID KeyInformation,
|
|
|
|
IN ULONG KeyInformationLength)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtUnloadKey(IN POBJECT_ATTRIBUTES KeyObjectAttributes)
|
|
|
|
{
|
2009-08-10 13:44:54 +00:00
|
|
|
return NtUnloadKey2(KeyObjectAttributes, 0);
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtUnloadKey2(IN POBJECT_ATTRIBUTES TargetKey,
|
|
|
|
IN ULONG Flags)
|
|
|
|
{
|
2009-08-11 13:01:42 +00:00
|
|
|
#if 0
|
2009-08-24 19:58:15 +00:00
|
|
|
NTSTATUS Status;
|
2009-08-10 13:44:54 +00:00
|
|
|
OBJECT_ATTRIBUTES ObjectAttributes;
|
|
|
|
UNICODE_STRING ObjectName;
|
|
|
|
CM_PARSE_CONTEXT ParseContext = {0};
|
|
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
|
|
|
PCM_KEY_BODY KeyBody = NULL;
|
|
|
|
ULONG ParentConv = 0, ChildConv = 0;
|
|
|
|
HANDLE Handle;
|
|
|
|
PAGED_CODE();
|
|
|
|
|
|
|
|
/* Validate privilege */
|
|
|
|
if (!SeSinglePrivilegeCheck(SeRestorePrivilege, PreviousMode))
|
|
|
|
{
|
|
|
|
/* Fail */
|
|
|
|
DPRINT1("Restore Privilege missing!\n");
|
|
|
|
return STATUS_PRIVILEGE_NOT_HELD;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Check for user-mode caller */
|
|
|
|
if (PreviousMode != KernelMode)
|
|
|
|
{
|
|
|
|
/* Prepare to probe parameters */
|
|
|
|
_SEH2_TRY
|
|
|
|
{
|
|
|
|
/* Probe object attributes */
|
|
|
|
ProbeForRead(TargetKey,
|
|
|
|
sizeof(OBJECT_ATTRIBUTES),
|
|
|
|
sizeof(ULONG));
|
|
|
|
|
|
|
|
ObjectAttributes = *TargetKey;
|
|
|
|
|
|
|
|
/* Probe the string */
|
|
|
|
ProbeForReadUnicodeString(&TargetKey->ObjectName);
|
|
|
|
|
|
|
|
ObjectName = *TargetKey->ObjectName;
|
|
|
|
|
|
|
|
ProbeForRead(ObjectName.Buffer,
|
|
|
|
ObjectName.Length,
|
|
|
|
sizeof(WCHAR));
|
|
|
|
|
|
|
|
ObjectAttributes.ObjectName = &ObjectName;
|
|
|
|
}
|
|
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
|
|
{
|
2009-08-24 19:58:15 +00:00
|
|
|
/* Return the exception code */
|
|
|
|
_SEH2_YIELD(return _SEH2_GetExceptionCode());
|
2009-08-10 13:44:54 +00:00
|
|
|
}
|
|
|
|
_SEH2_END;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
/* Save the target attributes directly */
|
|
|
|
ObjectAttributes = *TargetKey;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Setup the parse context */
|
|
|
|
ParseContext.CreateOperation = TRUE;
|
|
|
|
ParseContext.CreateOptions = REG_OPTION_BACKUP_RESTORE;
|
|
|
|
|
|
|
|
/* Do the create */
|
|
|
|
Status = ObOpenObjectByName(&ObjectAttributes,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
KernelMode,
|
|
|
|
NULL,
|
|
|
|
KEY_WRITE,
|
|
|
|
&ParseContext,
|
|
|
|
&Handle);
|
|
|
|
|
|
|
|
/* Return if failure encountered */
|
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
|
|
|
|
|
|
/* Reference it */
|
|
|
|
Status = ObReferenceObjectByHandle(Handle,
|
|
|
|
KEY_WRITE,
|
|
|
|
CmpKeyObjectType,
|
|
|
|
KernelMode,
|
|
|
|
(PVOID *)&KeyBody,
|
|
|
|
NULL);
|
|
|
|
|
|
|
|
/* Close the handle */
|
|
|
|
ZwClose(Handle);
|
|
|
|
|
|
|
|
/* Return if failure encountered */
|
|
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
|
|
|
|
|
|
/* Acquire the lock depending on flags */
|
|
|
|
if (Flags == REG_FORCE_UNLOAD)
|
|
|
|
{
|
|
|
|
/* Lock registry exclusively */
|
|
|
|
CmpLockRegistryExclusive();
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
/* Lock registry */
|
|
|
|
CmpLockRegistry();
|
|
|
|
|
|
|
|
/* Acquire the hive loading lock */
|
|
|
|
ExAcquirePushLockExclusive(&CmpLoadHiveLock);
|
|
|
|
|
|
|
|
/* Lock parent and child */
|
|
|
|
if (KeyBody->KeyControlBlock->ParentKcb)
|
|
|
|
ParentConv = KeyBody->KeyControlBlock->ParentKcb->ConvKey;
|
|
|
|
else
|
|
|
|
ParentConv = KeyBody->KeyControlBlock->ConvKey;
|
|
|
|
|
|
|
|
ChildConv = KeyBody->KeyControlBlock->ConvKey;
|
|
|
|
|
|
|
|
CmpAcquireTwoKcbLocksExclusiveByKey(ChildConv, ParentConv);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Check if it's being deleted already */
|
|
|
|
if (KeyBody->KeyControlBlock->Delete)
|
|
|
|
{
|
|
|
|
/* Return appropriate status */
|
|
|
|
Status = STATUS_KEY_DELETED;
|
|
|
|
goto Quickie;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Check if it's a readonly key */
|
|
|
|
if (KeyBody->KeyControlBlock->ExtFlags & CM_KCB_READ_ONLY_KEY)
|
|
|
|
{
|
|
|
|
/* Return appropriate status */
|
|
|
|
Status = STATUS_ACCESS_DENIED;
|
|
|
|
goto Quickie;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Call the internal API */
|
|
|
|
Status = CmUnloadKey(KeyBody->KeyControlBlock,
|
|
|
|
Flags);
|
|
|
|
|
|
|
|
/* Check if we failed, but really need to succeed */
|
|
|
|
if ((Status == STATUS_CANNOT_DELETE) && (Flags == REG_FORCE_UNLOAD))
|
|
|
|
{
|
|
|
|
/* TODO: We should perform another attempt here */
|
|
|
|
ASSERT(FALSE);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* If CmUnloadKey failed we need to unlock registry ourselves */
|
|
|
|
if (!NT_SUCCESS(Status))
|
|
|
|
{
|
|
|
|
if (Flags != REG_FORCE_UNLOAD)
|
|
|
|
{
|
|
|
|
/* Release the hive loading lock */
|
|
|
|
ExReleasePushLockExclusive(&CmpLoadHiveLock);
|
|
|
|
|
|
|
|
/* Release two KCBs lock */
|
|
|
|
CmpReleaseTwoKcbLockByKey(ChildConv, ParentConv);
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Unlock the registry */
|
|
|
|
CmpUnlockRegistry();
|
|
|
|
}
|
|
|
|
|
|
|
|
Quickie:
|
|
|
|
/* Dereference the key */
|
|
|
|
ObDereferenceObject(KeyBody);
|
|
|
|
|
|
|
|
/* Return status */
|
|
|
|
return Status;
|
2009-08-11 13:01:42 +00:00
|
|
|
#else
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
#endif
|
2007-11-02 23:12:22 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
NTSTATUS
|
|
|
|
NTAPI
|
|
|
|
NtUnloadKeyEx(IN POBJECT_ATTRIBUTES TargetKey,
|
|
|
|
IN HANDLE Event)
|
|
|
|
{
|
|
|
|
UNIMPLEMENTED;
|
|
|
|
return STATUS_NOT_IMPLEMENTED;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* EOF */
|