Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2025-06-02 07:56:16 +00:00
Code Issues Projects Releases Packages Wiki Activity

[WINLOGON] Add hidden logon/logoff SFC notification

Browse source
This commit is contained in:
Eric Kohl 2020-12-21 20:42:40 +01:00
parent 9de8787187
commit 94f01f5b64
1 changed files with 93 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

110
base/system/winlogon/notify.c
View file

@ -43,6 +43,7 @@ typedef struct _NOTIFICATION_ITEM
BOOL bImpersonate; BOOL bImpersonate;
BOOL bSmartCardLogon; BOOL bSmartCardLogon;
DWORD dwMaxWait; DWORD dwMaxWait;
BOOL bSfcNotification;
} NOTIFICATION_ITEM, *PNOTIFICATION_ITEM; } NOTIFICATION_ITEM, *PNOTIFICATION_ITEM;
@ -51,6 +52,58 @@ static LIST_ENTRY NotificationDllListHead;
/* FUNCTIONS *****************************************************************/ /* FUNCTIONS *****************************************************************/
static
VOID
AddSfcNotification(VOID)
{
WCHAR szSfcFileName[MAX_PATH];
PNOTIFICATION_ITEM NotificationDll;
DWORD dwError = ERROR_SUCCESS;
ExpandEnvironmentStringsW(L"%windir%\\system32\\sfc.dll",
szSfcFileName,
ARRAYSIZE(szSfcFileName));
NotificationDll = RtlAllocateHeap(RtlGetProcessHeap(),
HEAP_ZERO_MEMORY,
sizeof(NOTIFICATION_ITEM));
if (NotificationDll == NULL)
{
dwError = ERROR_OUTOFMEMORY;
goto done;
}
NotificationDll->pszDllName = RtlAllocateHeap(RtlGetProcessHeap(),
HEAP_ZERO_MEMORY,
(wcslen(szSfcFileName) + 1) * sizeof(WCHAR));
if (NotificationDll->pszDllName == NULL)
{
dwError = ERROR_OUTOFMEMORY;
goto done;
}
wcscpy(NotificationDll->pszDllName, szSfcFileName);
NotificationDll->bEnabled = TRUE;
NotificationDll->dwMaxWait = 30; /* FIXME: ??? */
NotificationDll->bSfcNotification = TRUE;
InsertHeadList(&NotificationDllListHead,
&NotificationDll->ListEntry);
done:
if (dwError != ERROR_SUCCESS)
{
if (NotificationDll != NULL)
{
if (NotificationDll->pszDllName != NULL)
RtlFreeHeap(RtlGetProcessHeap(), 0, NotificationDll->pszDllName);
RtlFreeHeap(RtlGetProcessHeap(), 0, NotificationDll);
}
}
}
static static
VOID VOID
AddNotificationDll( AddNotificationDll(
@ -209,6 +262,8 @@ InitNotifications(VOID)
InitializeListHead(&NotificationDllListHead); InitializeListHead(&NotificationDllListHead);
AddSfcNotification();
lError = RegOpenKeyExW(HKEY_LOCAL_MACHINE, lError = RegOpenKeyExW(HKEY_LOCAL_MACHINE,
L"Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify", L"Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify",
0, 0,
@ -262,27 +317,47 @@ CallNotificationDll(
CHAR szFuncBuffer[128]; CHAR szFuncBuffer[128];
DWORD dwSize; DWORD dwSize;
DWORD dwType; DWORD dwType;
DWORD dwError; DWORD dwError = ERROR_SUCCESS;
PWLX_NOTIFY_HANDLER pNotifyHandler; PWLX_NOTIFY_HANDLER pNotifyHandler;
dwError = RegOpenKeyExW(hNotifyKey, if (NotificationDll->bSfcNotification)
NotificationDll->pszKeyName,
0,
KEY_READ,
&hDllKey);
if (dwError != ERROR_SUCCESS)
{ {
TRACE("RegOpenKeyExW()\n"); switch (Type)
return; {
case LogonHandler:
strcpy(szFuncBuffer, "SfcWLEventLogon");
break;
case LogoffHandler:
strcpy(szFuncBuffer, "SfcWLEventLogoff");
break;
default:
return;
}
}
else
{
dwError = RegOpenKeyExW(hNotifyKey,
NotificationDll->pszKeyName,
0,
KEY_READ,
&hDllKey);
if (dwError != ERROR_SUCCESS)
{
TRACE("RegOpenKeyExW()\n");
return;
}
dwSize = sizeof(szFuncBuffer);
dwError = RegQueryValueExA(hDllKey,
FuncNames[Type],
NULL,
&dwType,
(PBYTE)szFuncBuffer,
&dwSize);
} }
dwSize = sizeof(szFuncBuffer);
dwError = RegQueryValueExA(hDllKey,
FuncNames[Type],
NULL,
&dwType,
(PBYTE)szFuncBuffer,
&dwSize);
if (dwError == ERROR_SUCCESS) if (dwError == ERROR_SUCCESS)
{ {
hModule = LoadLibraryW(NotificationDll->pszDllName); hModule = LoadLibraryW(NotificationDll->pszDllName);
@ -296,7 +371,8 @@ CallNotificationDll(
} }
} }
RegCloseKey(hDllKey); if (hDllKey != NULL)
RegCloseKey(hDllKey);
} }