mirror of
https://github.com/reactos/reactos.git
synced 2024-12-27 01:24:38 +00:00
preliminary spawn code (untested yet)
svn path=/trunk/; revision=2678
This commit is contained in:
KJK::Hyperion
parent
57c6671059
commit
b9dbbc8eb8
1 changed files with 715 additions and 0 deletions
715
posix/lib/psxdll/misc/spawn.c
Normal file
715
posix/lib/psxdll/misc/spawn.c
Normal file
|
|
@ -0,0 +1,715 @@
|
|||
/* $Id: spawn.c,v 1.1 2002/03/07 05:46:03 hyperion Exp $
|
||||
*/
|
||||
/*
|
||||
* COPYRIGHT: See COPYING in the top level directory
|
||||
* PROJECT: ReactOS POSIX+ Subsystem
|
||||
* FILE: subsys/psx/lib/psxdll/misc/spawn.c
|
||||
* PURPOSE: Create the first POSIX+ process
|
||||
* PROGRAMMER: KJK::Hyperion <noog@libero.it>
|
||||
* UPDATE HISTORY:
|
||||
* 25/02/2002: Created
|
||||
*/
|
||||
|
||||
/*
|
||||
* NOTE by KJK::Hyperion:
|
||||
* The __PdxSpawnPosixProcess() call solves the chicken-egg dilemma of
|
||||
* creating the first POSIX+ process in a group without the ability to
|
||||
* fork+exec (for example from inside a Win32 process). Processes created by
|
||||
* __PdxSpawnPosixProcess() will *not* inherit anything from the parent, not
|
||||
* even handles: all creation parameters have to be specified explicitely
|
||||
*/
|
||||
|
||||
#include <ddk/ntddk.h>
|
||||
#include <ntdll/base.h>
|
||||
#include <napi/i386/segment.h>
|
||||
#include <stddef.h>
|
||||
#include <string.h>
|
||||
#include <inttypes.h>
|
||||
#include <pthread.h>
|
||||
#include <psx/debug.h>
|
||||
#include <psx/pdata.h>
|
||||
#include <psx/stdlib.h>
|
||||
|
||||
VOID
|
||||
__PdxSerializeProcessData
|
||||
(
|
||||
IN __PPDX_PDATA ProcessData,
|
||||
OUT __PPDX_SERIALIZED_PDATA *SerializedProcessData
|
||||
)
|
||||
{
|
||||
__PPDX_SERIALIZED_PDATA pspdProcessData = 0;
|
||||
NTSTATUS nErrCode;
|
||||
PBYTE pBufferTail;
|
||||
ULONG ulAllocSize = sizeof(__PDX_SERIALIZED_PDATA) - 1;
|
||||
size_t *pnArgLengths;
|
||||
size_t *pnEnvVarsLengths;
|
||||
int nEnvVarsCount;
|
||||
int i;
|
||||
|
||||
/* calculate buffer length */
|
||||
/* FIXME please! this is the most inefficient way to do it */
|
||||
|
||||
/* argv */
|
||||
pnArgLengths = __malloc(ProcessData->ArgCount * sizeof(size_t));
|
||||
|
||||
for(i = 0; i < ProcessData->ArgCount; i ++)
|
||||
{
|
||||
int nStrLen = strlen(ProcessData->ArgVect[i]) + 1;
|
||||
ulAllocSize += nStrLen;
|
||||
pnArgLengths[i] = nStrLen;
|
||||
|
||||
INFO
|
||||
(
|
||||
"argument %d: \"%s\", length %d\n",
|
||||
i,
|
||||
ProcessData->ArgVect[i],
|
||||
nStrLen
|
||||
);
|
||||
}
|
||||
|
||||
/* environ */
|
||||
pnEnvVarsLengths = 0;
|
||||
nEnvVarsCount = 0;
|
||||
|
||||
for(i = 0; *(ProcessData->Environment)[i] != 0; i++)
|
||||
{
|
||||
int nStrLen = strlen(*(ProcessData->Environment)[i]) + 1;
|
||||
ulAllocSize += nStrLen;
|
||||
|
||||
nEnvVarsCount ++;
|
||||
__realloc(pnEnvVarsLengths, nEnvVarsCount * sizeof(size_t));
|
||||
pnEnvVarsLengths[i] = nStrLen;
|
||||
|
||||
INFO
|
||||
(
|
||||
"environment variable %d: \"%s\", length %d\n",
|
||||
i,
|
||||
*(ProcessData->Environment)[i],
|
||||
nStrLen
|
||||
);
|
||||
}
|
||||
|
||||
INFO("(%d environment variables were found)\n", nEnvVarsCount);
|
||||
|
||||
/* current directory */
|
||||
ulAllocSize += ProcessData->CurDir.Length;
|
||||
INFO
|
||||
(
|
||||
"current directory: \"%Z\", length %d\n",
|
||||
&ProcessData->CurDir,
|
||||
ProcessData->CurDir.Length
|
||||
);
|
||||
|
||||
/* root directory */
|
||||
ulAllocSize += ProcessData->RootPath.Length;
|
||||
INFO
|
||||
(
|
||||
"root directory: \"%Z\", length %d\n",
|
||||
&ProcessData->RootPath,
|
||||
ProcessData->RootPath.Length
|
||||
);
|
||||
|
||||
/* file descriptors table */
|
||||
ulAllocSize += sizeof(__fildes_t) * ProcessData->FdTable.AllocatedDescriptors;
|
||||
INFO
|
||||
(
|
||||
"descriptors table contains %d allocated descriptors, combined length %d\n",
|
||||
ProcessData->FdTable.AllocatedDescriptors,
|
||||
sizeof(__fildes_t) * ProcessData->FdTable.AllocatedDescriptors
|
||||
);
|
||||
|
||||
/* extra descriptors data */
|
||||
for(i = 0; ProcessData->FdTable.AllocatedDescriptors; i ++)
|
||||
if(ProcessData->FdTable.Descriptors[i].ExtraData != NULL)
|
||||
{
|
||||
ulAllocSize += ProcessData->FdTable.Descriptors[i].ExtraDataSize;
|
||||
|
||||
INFO
|
||||
(
|
||||
"descriptor %d has %d bytes of associated data\n",
|
||||
i,
|
||||
ProcessData->FdTable.Descriptors[i].ExtraDataSize
|
||||
);
|
||||
|
||||
}
|
||||
|
||||
/* allocate return block */
|
||||
INFO("about to allocate %d bytes\n", ulAllocSize);
|
||||
|
||||
nErrCode = NtAllocateVirtualMemory
|
||||
(
|
||||
NtCurrentProcess(),
|
||||
(PVOID *)&pspdProcessData,
|
||||
0,
|
||||
&ulAllocSize,
|
||||
MEM_COMMIT,
|
||||
PAGE_READWRITE
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtAllocateVirtualMemory() failed with status 0x%08X\n", nErrCode);
|
||||
__free(pnArgLengths);
|
||||
__free(pnEnvVarsLengths);
|
||||
*SerializedProcessData = 0;
|
||||
return;
|
||||
}
|
||||
|
||||
INFO("%d bytes actually allocated\n", ulAllocSize);
|
||||
pspdProcessData->AllocSize = ulAllocSize;
|
||||
|
||||
/* copy data */
|
||||
/* static data */
|
||||
memcpy(&pspdProcessData->ProcessData, ProcessData, sizeof(__PDX_PDATA));
|
||||
|
||||
/* buffers */
|
||||
pBufferTail = &pspdProcessData->Buffer[0];
|
||||
INFO("buffer tail begins at 0x%08X\n", pBufferTail);
|
||||
|
||||
/* argv */
|
||||
pspdProcessData->ProcessData.ArgVect = 0;
|
||||
|
||||
for(i = 0; i < ProcessData->ArgCount; i ++)
|
||||
{
|
||||
INFO
|
||||
(
|
||||
"copying %d bytes of argument %d (\"%s\") to 0x%08X\n",
|
||||
pnArgLengths[i],
|
||||
i,
|
||||
ProcessData->ArgVect[i],
|
||||
pBufferTail
|
||||
);
|
||||
|
||||
strncpy(pBufferTail, ProcessData->ArgVect[i], pnArgLengths[i]);
|
||||
pBufferTail += pnArgLengths[i];
|
||||
|
||||
INFO
|
||||
(
|
||||
"buffer tail increased by %d bytes, new tail at 0x%08X\n",
|
||||
pnArgLengths[i],
|
||||
pBufferTail
|
||||
);
|
||||
|
||||
}
|
||||
|
||||
__free(pnArgLengths);
|
||||
|
||||
/* environ */
|
||||
pspdProcessData->ProcessData.Environment = (char ***)nEnvVarsCount;
|
||||
|
||||
for(i = 0; i < nEnvVarsCount; i ++)
|
||||
{
|
||||
INFO
|
||||
(
|
||||
"copying %d bytes of environment variable %d (\"%s\") to 0x%08X\n",
|
||||
pnEnvVarsLengths[i],
|
||||
i,
|
||||
ProcessData->Environment[i],
|
||||
pBufferTail
|
||||
);
|
||||
|
||||
strncpy(pBufferTail, *ProcessData->Environment[i], pnEnvVarsLengths[i]);
|
||||
pBufferTail += pnEnvVarsLengths[i];
|
||||
|
||||
INFO
|
||||
(
|
||||
"buffer tail increased by %d bytes, new tail at 0x%08X\n",
|
||||
pnEnvVarsLengths[i],
|
||||
pBufferTail
|
||||
);
|
||||
}
|
||||
|
||||
__free(pnEnvVarsLengths);
|
||||
|
||||
/* current directory */
|
||||
INFO
|
||||
(
|
||||
"copying %d bytes of current directory (\"%Z\") to 0x%08X\n",
|
||||
ProcessData->CurDir.Length,
|
||||
&ProcessData->CurDir,
|
||||
pBufferTail
|
||||
);
|
||||
|
||||
memcpy(pBufferTail, ProcessData->CurDir.Buffer, ProcessData->CurDir.Length);
|
||||
pBufferTail += ProcessData->CurDir.Length;
|
||||
|
||||
INFO
|
||||
(
|
||||
"buffer tail increased by %d bytes, new tail at 0x%08X\n",
|
||||
ProcessData->CurDir.Length,
|
||||
pBufferTail
|
||||
);
|
||||
|
||||
/* root directory */
|
||||
INFO
|
||||
(
|
||||
"copying %d bytes of root directory (\"%Z\") to 0x%08X\n",
|
||||
ProcessData->RootPath.Length,
|
||||
&ProcessData->RootPath,
|
||||
pBufferTail
|
||||
);
|
||||
|
||||
memcpy
|
||||
(
|
||||
pBufferTail,
|
||||
ProcessData->RootPath.Buffer,
|
||||
ProcessData->RootPath.Length
|
||||
);
|
||||
|
||||
pBufferTail += ProcessData->RootPath.Length;
|
||||
|
||||
INFO
|
||||
(
|
||||
"buffer tail increased by %d bytes, new tail at 0x%08X\n",
|
||||
ProcessData->RootPath.Length,
|
||||
pBufferTail
|
||||
);
|
||||
|
||||
/* file descriptors table */
|
||||
/* save the offset to the descriptors array */
|
||||
pspdProcessData->ProcessData.FdTable.Descriptors =
|
||||
(PVOID)((ULONG)pBufferTail - (ULONG)pspdProcessData);
|
||||
|
||||
INFO
|
||||
(
|
||||
"descriptors table contains %d allocated descriptors, combined length %d\n",
|
||||
ProcessData->FdTable.AllocatedDescriptors,
|
||||
sizeof(__fildes_t) * ProcessData->FdTable.AllocatedDescriptors
|
||||
);
|
||||
|
||||
memcpy
|
||||
(
|
||||
pBufferTail,
|
||||
ProcessData->FdTable.Descriptors,
|
||||
sizeof(__fildes_t) * ProcessData->FdTable.AllocatedDescriptors
|
||||
);
|
||||
|
||||
pBufferTail +=
|
||||
sizeof(__fildes_t) * ProcessData->FdTable.AllocatedDescriptors;
|
||||
|
||||
INFO
|
||||
(
|
||||
"buffer tail increased by %d bytes, new tail at 0x%08X\n",
|
||||
sizeof(__fildes_t) * ProcessData->FdTable.AllocatedDescriptors,
|
||||
pBufferTail
|
||||
);
|
||||
|
||||
/* extra descriptors data */
|
||||
for(i = 0; ProcessData->FdTable.AllocatedDescriptors; i ++)
|
||||
if(ProcessData->FdTable.Descriptors[i].ExtraData != 0)
|
||||
{
|
||||
INFO
|
||||
(
|
||||
"descriptor %d has %d bytes of associated data\n",
|
||||
i,
|
||||
ProcessData->FdTable.Descriptors[i].ExtraDataSize
|
||||
);
|
||||
|
||||
memcpy
|
||||
(
|
||||
pBufferTail,
|
||||
ProcessData->FdTable.Descriptors[i].ExtraData,
|
||||
ProcessData->FdTable.Descriptors[i].ExtraDataSize
|
||||
);
|
||||
|
||||
pBufferTail += ProcessData->FdTable.Descriptors[i].ExtraDataSize;
|
||||
|
||||
INFO
|
||||
(
|
||||
"buffer tail increased by %d bytes, new tail at 0x%08X\n",
|
||||
ProcessData->FdTable.Descriptors[i].ExtraDataSize,
|
||||
pBufferTail
|
||||
);
|
||||
}
|
||||
|
||||
/* success */
|
||||
*SerializedProcessData = pspdProcessData;
|
||||
}
|
||||
|
||||
NTSYSAPI
|
||||
NTSTATUS
|
||||
NTAPI
|
||||
__PdxSpawnPosixProcess
|
||||
(
|
||||
OUT PHANDLE ProcessHandle,
|
||||
OUT PHANDLE ThreadHandle,
|
||||
IN POBJECT_ATTRIBUTES FileObjectAttributes,
|
||||
IN POBJECT_ATTRIBUTES ProcessObjectAttributes,
|
||||
IN HANDLE InheritFromProcessHandle,
|
||||
IN __PPDX_PDATA ProcessData
|
||||
)
|
||||
{
|
||||
__PPDX_SERIALIZED_PDATA pspdProcessData;
|
||||
IO_STATUS_BLOCK isbStatus;
|
||||
PROCESS_BASIC_INFORMATION pbiProcessInfo;
|
||||
ANSI_STRING strStartEntry;
|
||||
PVOID pStartAddress;
|
||||
INITIAL_TEB itInitialTeb;
|
||||
CONTEXT ctxThreadContext;
|
||||
CLIENT_ID ciClientId;
|
||||
NTSTATUS nErrCode;
|
||||
HANDLE hExeFile;
|
||||
HANDLE hExeImage;
|
||||
HANDLE hProcess;
|
||||
HANDLE hThread;
|
||||
PVOID pDestBuffer;
|
||||
ULONG nDestBufferSize;
|
||||
ULONG nCurFilDesOffset;
|
||||
int i;
|
||||
|
||||
/* STEP 1: map executable image in memory */
|
||||
/* 1.1: open the file for execution */
|
||||
nErrCode = NtOpenFile
|
||||
(
|
||||
&hExeFile,
|
||||
SYNCHRONIZE | FILE_EXECUTE,
|
||||
FileObjectAttributes,
|
||||
&isbStatus,
|
||||
FILE_SHARE_READ | FILE_SHARE_DELETE,
|
||||
FILE_SYNCHRONOUS_IO_NONALERT | FILE_NON_DIRECTORY_FILE
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtOpenFile() failed with status 0x%08X\n", nErrCode);
|
||||
return (nErrCode);
|
||||
}
|
||||
|
||||
/* 1.2: create a memory section for the file */
|
||||
nErrCode = NtCreateSection
|
||||
(
|
||||
&hExeImage,
|
||||
SECTION_ALL_ACCESS,
|
||||
NULL,
|
||||
0,
|
||||
PAGE_EXECUTE,
|
||||
SEC_IMAGE,
|
||||
hExeFile
|
||||
);
|
||||
|
||||
/* close file handle (not needed anymore) */
|
||||
NtClose(hExeFile);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtCreateSection() failed with status 0x%08X\n", nErrCode);
|
||||
return (nErrCode);
|
||||
}
|
||||
|
||||
/* STEP 2: create process */
|
||||
nErrCode = NtCreateProcess
|
||||
(
|
||||
&hProcess,
|
||||
PROCESS_ALL_ACCESS,
|
||||
ProcessObjectAttributes,
|
||||
InheritFromProcessHandle,
|
||||
FALSE,
|
||||
hExeImage,
|
||||
NULL,
|
||||
NULL
|
||||
);
|
||||
|
||||
/* close image handle (not needed anymore) */
|
||||
NtClose(hExeImage);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtCreateProcess() failed with status 0x%08X\n", nErrCode);
|
||||
return (nErrCode);
|
||||
}
|
||||
|
||||
/* STEP 3: write process environment */
|
||||
/* 3.1: serialize the process data for transfer */
|
||||
/* FIXME: the serialized data can be allocated and written directly in the
|
||||
destination process */
|
||||
__PdxSerializeProcessData(ProcessData, &pspdProcessData);
|
||||
|
||||
/* 3.1.1: adjust some fields */
|
||||
pspdProcessData->ProcessData.Spawned = TRUE;
|
||||
|
||||
/* 3.2: allocate memory in the destination process */
|
||||
nDestBufferSize = pspdProcessData->AllocSize;
|
||||
|
||||
nErrCode = NtAllocateVirtualMemory
|
||||
(
|
||||
hProcess,
|
||||
&pDestBuffer,
|
||||
0,
|
||||
&nDestBufferSize,
|
||||
MEM_COMMIT,
|
||||
PAGE_READWRITE
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtAllocateVirtualMemory() failed with status 0x%08X\n", nErrCode);
|
||||
goto undoPData;
|
||||
}
|
||||
|
||||
/* 3.3: get pointer to the PEB */
|
||||
nErrCode = NtQueryInformationProcess
|
||||
(
|
||||
hProcess,
|
||||
ProcessBasicInformation,
|
||||
&pbiProcessInfo,
|
||||
sizeof(pbiProcessInfo),
|
||||
NULL
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtQueryInformationProcess() failed with status 0x%08X\n", nErrCode);
|
||||
goto undoPData;
|
||||
}
|
||||
|
||||
/* 3.4: write pointer to process data in the SubSystemData field of the PEB */
|
||||
nErrCode = NtWriteVirtualMemory
|
||||
(
|
||||
hProcess,
|
||||
(PVOID)((ULONG)pbiProcessInfo.PebBaseAddress + offsetof(PEB, SubSystemData)),
|
||||
&pDestBuffer,
|
||||
sizeof(PVOID),
|
||||
NULL
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtWriteVirtualMemory() failed with status 0x%08X\n", nErrCode);
|
||||
goto undoPData;
|
||||
}
|
||||
|
||||
/* 3.5: write the process data */
|
||||
nErrCode = NtWriteVirtualMemory
|
||||
(
|
||||
hProcess,
|
||||
pDestBuffer,
|
||||
pspdProcessData,
|
||||
pspdProcessData->AllocSize,
|
||||
NULL
|
||||
);
|
||||
|
||||
undoPData:
|
||||
/* deallocate the temporary data block in the current process */
|
||||
NtFreeVirtualMemory
|
||||
(
|
||||
NtCurrentProcess(),
|
||||
(PVOID *)&pspdProcessData,
|
||||
0,
|
||||
MEM_RELEASE
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
return (nErrCode);
|
||||
|
||||
/* STEP 4: duplicate handles */
|
||||
/* 4.1: handles in the structure itself */
|
||||
/* 4.1.1: root directory */
|
||||
nErrCode = NtDuplicateObject
|
||||
(
|
||||
NtCurrentProcess(),
|
||||
ProcessData->RootHandle,
|
||||
hProcess,
|
||||
(PHANDLE)((ULONG)pDestBuffer + offsetof(__PDX_PDATA, RootHandle)),
|
||||
0,
|
||||
0,
|
||||
DUPLICATE_SAME_ACCESS | 4 /* | DUPLICATE_SAME_ATTRIBUTES */ /* FIXME */
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtDuplicateObject() failed with status 0x%08X\n", nErrCode);
|
||||
goto failProcess;
|
||||
}
|
||||
|
||||
/* 4.2: file descriptors table */
|
||||
for
|
||||
(
|
||||
/* pspdProcessData->ProcessData.FdTable.Descriptors contains the offset to
|
||||
the descriptors array inside pspdProcessData->Buffer[], that is to the
|
||||
first element of the array */
|
||||
i = 0,
|
||||
nCurFilDesOffset = (ULONG)pspdProcessData->ProcessData.FdTable.Descriptors;
|
||||
/* iterate through all allocated descriptors */
|
||||
i < ProcessData->FdTable.AllocatedDescriptors;
|
||||
/* at every step, go on to next input descriptor, and increase the offset to
|
||||
the next output descriptor */
|
||||
i ++, nCurFilDesOffset += sizeof(__fildes_t)
|
||||
)
|
||||
/* FIXME? check the table's bitmap instead? */
|
||||
if(ProcessData->FdTable.Descriptors[i].FileHandle != NULL)
|
||||
{
|
||||
/* duplicate the source handle, ProcessData->FdTable.Descriptors[i], from
|
||||
the current process into the process identified by hProcess, at an
|
||||
address calculated by adding to the serialized data block base address:
|
||||
- the offset to the current descriptor
|
||||
- the offset to the handle field of the descriptor */
|
||||
nErrCode = NtDuplicateObject
|
||||
(
|
||||
NtCurrentProcess(),
|
||||
ProcessData->FdTable.Descriptors[i].FileHandle,
|
||||
hProcess,
|
||||
(PHANDLE)(
|
||||
(ULONG)pDestBuffer + nCurFilDesOffset + offsetof(__fildes_t, FileHandle)
|
||||
),
|
||||
0,
|
||||
0,
|
||||
DUPLICATE_SAME_ACCESS | 4 /* | DUPLICATE_SAME_ATTRIBUTES */ /* FIXME */
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtDuplicateObject() failed with status 0x%08X\n", nErrCode);
|
||||
goto failProcess;
|
||||
}
|
||||
}
|
||||
|
||||
/* STEP 5: create first thread */
|
||||
/* 5.1: get thunk routine's address */
|
||||
RtlInitializeAnsiString(&strStartEntry, "LdrInitializeThunk");
|
||||
|
||||
nErrCode = LdrGetProcedureAddress
|
||||
(
|
||||
(PVOID)NTDLL_BASE,
|
||||
&strStartEntry,
|
||||
0,
|
||||
&pStartAddress
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("LdrGetProcedureAddress() failed with status 0x%08X\n", nErrCode);
|
||||
goto failProcess;
|
||||
}
|
||||
|
||||
/* 5.2: set up the initial TEB */
|
||||
itInitialTeb.StackAllocate = NULL;
|
||||
|
||||
/* FIXME: allow the caller to specify these values */
|
||||
itInitialTeb.StackReserve = 0x100000;
|
||||
itInitialTeb.StackCommit = itInitialTeb.StackReserve - PAGESIZE;
|
||||
|
||||
/* guard page */
|
||||
itInitialTeb.StackCommit += PAGESIZE;
|
||||
|
||||
/* 5.2.1: set up the stack */
|
||||
/* 5.2.1.1: reserve the stack */
|
||||
nErrCode = NtAllocateVirtualMemory
|
||||
(
|
||||
hProcess,
|
||||
&itInitialTeb.StackAllocate,
|
||||
0,
|
||||
&itInitialTeb.StackReserve,
|
||||
MEM_RESERVE,
|
||||
PAGE_READWRITE
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtAllocateVirtualMemory() failed with status 0x%08X\n", nErrCode);
|
||||
goto failProcess;
|
||||
}
|
||||
|
||||
itInitialTeb.StackBase =
|
||||
(PVOID)((ULONG)itInitialTeb.StackAllocate + itInitialTeb.StackReserve);
|
||||
|
||||
itInitialTeb.StackLimit =
|
||||
(PVOID)((ULONG)itInitialTeb.StackBase - itInitialTeb.StackCommit);
|
||||
|
||||
/* 5.2.1.2: commit the stack */
|
||||
nErrCode = NtAllocateVirtualMemory
|
||||
(
|
||||
hProcess,
|
||||
&itInitialTeb.StackLimit,
|
||||
0,
|
||||
&itInitialTeb.StackCommit,
|
||||
MEM_COMMIT,
|
||||
PAGE_READWRITE
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtAllocateVirtualMemory() failed with status 0x%08X\n", nErrCode);
|
||||
goto failProcess;
|
||||
}
|
||||
|
||||
/* 5.2.1.3: set up the guard page */
|
||||
nErrCode = NtProtectVirtualMemory
|
||||
(
|
||||
hProcess,
|
||||
itInitialTeb.StackLimit,
|
||||
PAGESIZE,
|
||||
PAGE_GUARD | PAGE_READWRITE,
|
||||
NULL
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtProtectVirtualMemory() failed with status 0x%08X\n", nErrCode);
|
||||
goto failProcess;
|
||||
}
|
||||
|
||||
/* 5.2.1.4: initialize the thread context */
|
||||
memset(&ctxThreadContext, 0, sizeof(ctxThreadContext));
|
||||
|
||||
ctxThreadContext.Eip = (ULONG)pStartAddress;
|
||||
ctxThreadContext.SegGs = USER_DS;
|
||||
ctxThreadContext.SegFs = USER_DS;
|
||||
ctxThreadContext.SegEs = USER_DS;
|
||||
ctxThreadContext.SegDs = USER_DS;
|
||||
ctxThreadContext.SegCs = USER_CS;
|
||||
ctxThreadContext.SegSs = USER_DS;
|
||||
/* skip five doublewords (four - unknown - parameters for LdrInitializeThunk,
|
||||
and the return address) */
|
||||
ctxThreadContext.Esp = (ULONG)itInitialTeb.StackBase - 5 * 4;
|
||||
ctxThreadContext.EFlags = (1 << 1) + (1 << 9);
|
||||
|
||||
/* 5.3: create the thread object */
|
||||
nErrCode = NtCreateThread
|
||||
(
|
||||
NULL,
|
||||
THREAD_ALL_ACCESS,
|
||||
NULL,
|
||||
hProcess,
|
||||
&ciClientId,
|
||||
&ctxThreadContext,
|
||||
&itInitialTeb,
|
||||
FALSE
|
||||
);
|
||||
|
||||
/* failure */
|
||||
if(!NT_SUCCESS(nErrCode))
|
||||
{
|
||||
ERR("NtCreateThread() failed with status 0x%08X\n", nErrCode);
|
||||
goto failProcess;
|
||||
}
|
||||
|
||||
/* success */
|
||||
return (STATUS_SUCCESS);
|
||||
|
||||
/* failure */
|
||||
failProcess:
|
||||
NtTerminateProcess
|
||||
(
|
||||
hProcess,
|
||||
nErrCode
|
||||
);
|
||||
|
||||
return (nErrCode);
|
||||
}
|
||||
|
||||
/* EOF */
|
||||
|
||||
Loading…
Reference in a new issue