mirror of
https://github.com/reactos/reactos.git
synced 2024-08-20 02:13:29 +00:00
1992 lines
65 KiB
C
1992 lines
65 KiB
C
/*
|
|
* PROJECT: ReactOS Kernel
|
|
* LICENSE: GPL - See COPYING in the top level directory
|
|
* FILE: ntoskrnl/ps/query.c
|
|
* PURPOSE: Process Manager: Thread/Process Query/Set Information
|
|
* PROGRAMMERS: Alex Ionescu (alex.ionescu@reactos.org)
|
|
* Thomas Weidenmueller (w3seek@reactos.org)
|
|
* Eric Kohl
|
|
*/
|
|
|
|
/* INCLUDES ******************************************************************/
|
|
|
|
#include <ntoskrnl.h>
|
|
#define NDEBUG
|
|
#include <debug.h>
|
|
|
|
/* Include Information Class Tables */
|
|
#include "internal/ps_i.h"
|
|
|
|
/* Debugging Level */
|
|
ULONG PspTraceLevel = 0;
|
|
|
|
/* PRIVATE FUNCTIONS *********************************************************/
|
|
|
|
NTSTATUS
|
|
NTAPI
|
|
PsReferenceProcessFilePointer(IN PEPROCESS Process,
|
|
OUT PFILE_OBJECT *FileObject)
|
|
{
|
|
PSECTION Section;
|
|
PAGED_CODE();
|
|
|
|
/* Lock the process */
|
|
ExAcquireRundownProtection(&Process->RundownProtect);
|
|
|
|
/* Get the section */
|
|
Section = Process->SectionObject;
|
|
if (Section)
|
|
{
|
|
/* Get the file object and reference it */
|
|
*FileObject = MmGetFileObjectForSection((PVOID)Section);
|
|
ObReferenceObject(*FileObject);
|
|
}
|
|
|
|
/* Release the protection */
|
|
ExReleaseRundownProtection(&Process->RundownProtect);
|
|
|
|
/* Return status */
|
|
return Section ? STATUS_SUCCESS : STATUS_UNSUCCESSFUL;
|
|
}
|
|
|
|
/* PUBLIC FUNCTIONS **********************************************************/
|
|
|
|
/*
|
|
* @implemented
|
|
*/
|
|
NTSTATUS
|
|
NTAPI
|
|
NtQueryInformationProcess(IN HANDLE ProcessHandle,
|
|
IN PROCESSINFOCLASS ProcessInformationClass,
|
|
OUT PVOID ProcessInformation,
|
|
IN ULONG ProcessInformationLength,
|
|
OUT PULONG ReturnLength OPTIONAL)
|
|
{
|
|
PEPROCESS Process;
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
|
NTSTATUS Status;
|
|
ULONG Length = 0;
|
|
PPROCESS_BASIC_INFORMATION ProcessBasicInfo =
|
|
(PPROCESS_BASIC_INFORMATION)ProcessInformation;
|
|
PKERNEL_USER_TIMES ProcessTime = (PKERNEL_USER_TIMES)ProcessInformation;
|
|
PPROCESS_PRIORITY_CLASS PsPriorityClass = (PPROCESS_PRIORITY_CLASS)ProcessInformation;
|
|
ULONG HandleCount;
|
|
PPROCESS_SESSION_INFORMATION SessionInfo =
|
|
(PPROCESS_SESSION_INFORMATION)ProcessInformation;
|
|
PVM_COUNTERS VmCounters = (PVM_COUNTERS)ProcessInformation;
|
|
PIO_COUNTERS IoCounters = (PIO_COUNTERS)ProcessInformation;
|
|
PQUOTA_LIMITS QuotaLimits = (PQUOTA_LIMITS)ProcessInformation;
|
|
PROCESS_DEVICEMAP_INFORMATION DeviceMap;
|
|
PUNICODE_STRING ImageName;
|
|
ULONG Cookie;
|
|
PAGED_CODE();
|
|
|
|
/* Check for user-mode caller */
|
|
if (PreviousMode != KernelMode)
|
|
{
|
|
/* Prepare to probe parameters */
|
|
_SEH2_TRY
|
|
{
|
|
/* Probe the buffer */
|
|
ProbeForWrite(ProcessInformation,
|
|
ProcessInformationLength,
|
|
sizeof(ULONG));
|
|
|
|
/* Probe the return length if required */
|
|
if (ReturnLength) ProbeForWriteUlong(ReturnLength);
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Return the exception code */
|
|
_SEH2_YIELD(return _SEH2_GetExceptionCode());
|
|
}
|
|
_SEH2_END;
|
|
}
|
|
|
|
if((ProcessInformationClass == ProcessCookie) &&
|
|
(ProcessHandle != NtCurrentProcess()))
|
|
{
|
|
/*
|
|
* Retreiving the process cookie is only allowed for the calling process
|
|
* itself! XP only allowes NtCurrentProcess() as process handles even if
|
|
* a real handle actually represents the current process.
|
|
*/
|
|
return STATUS_INVALID_PARAMETER;
|
|
}
|
|
|
|
/* Check the information class */
|
|
switch (ProcessInformationClass)
|
|
{
|
|
/* Basic process information */
|
|
case ProcessBasicInformation:
|
|
|
|
/* Set return length */
|
|
Length = sizeof(PROCESS_BASIC_INFORMATION);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Protect writes with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Write all the information from the EPROCESS/KPROCESS */
|
|
ProcessBasicInfo->ExitStatus = Process->ExitStatus;
|
|
ProcessBasicInfo->PebBaseAddress = Process->Peb;
|
|
ProcessBasicInfo->AffinityMask = Process->Pcb.Affinity;
|
|
ProcessBasicInfo->UniqueProcessId = (ULONG_PTR)Process->
|
|
UniqueProcessId;
|
|
ProcessBasicInfo->InheritedFromUniqueProcessId =
|
|
(ULONG)Process->InheritedFromUniqueProcessId;
|
|
ProcessBasicInfo->BasePriority = Process->Pcb.BasePriority;
|
|
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* Process quota limits */
|
|
case ProcessQuotaLimits:
|
|
|
|
Length = sizeof(QUOTA_LIMITS);
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Indicate success */
|
|
Status = STATUS_SUCCESS;
|
|
|
|
_SEH2_TRY
|
|
{
|
|
/* Set max/min working set sizes */
|
|
QuotaLimits->MaximumWorkingSetSize =
|
|
Process->Vm.MaximumWorkingSetSize << PAGE_SHIFT;
|
|
QuotaLimits->MinimumWorkingSetSize =
|
|
Process->Vm.MinimumWorkingSetSize << PAGE_SHIFT;
|
|
|
|
/* Set default time limits */
|
|
QuotaLimits->TimeLimit.LowPart = MAXULONG;
|
|
QuotaLimits->TimeLimit.HighPart = MAXULONG;
|
|
|
|
/* Is quota block a default one? */
|
|
if (Process->QuotaBlock == &PspDefaultQuotaBlock)
|
|
{
|
|
/* Set default pools and pagefile limits */
|
|
QuotaLimits->PagedPoolLimit = (SIZE_T)-1;
|
|
QuotaLimits->NonPagedPoolLimit = (SIZE_T)-1;
|
|
QuotaLimits->PagefileLimit = (SIZE_T)-1;
|
|
}
|
|
else
|
|
{
|
|
/* Get limits from non-default quota block */
|
|
QuotaLimits->PagedPoolLimit =
|
|
Process->QuotaBlock->QuotaEntry[PagedPool].Limit;
|
|
QuotaLimits->NonPagedPoolLimit =
|
|
Process->QuotaBlock->QuotaEntry[NonPagedPool].Limit;
|
|
QuotaLimits->PagefileLimit =
|
|
Process->QuotaBlock->QuotaEntry[2].Limit;
|
|
}
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
case ProcessIoCounters:
|
|
|
|
Length = sizeof(IO_COUNTERS);
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
_SEH2_TRY
|
|
{
|
|
IoCounters->ReadOperationCount = Process->ReadOperationCount.QuadPart;
|
|
IoCounters->ReadTransferCount = Process->ReadTransferCount.QuadPart;
|
|
IoCounters->WriteOperationCount = Process->WriteOperationCount.QuadPart;
|
|
IoCounters->WriteTransferCount = Process->WriteTransferCount.QuadPart;
|
|
IoCounters->OtherOperationCount = Process->OtherOperationCount.QuadPart;
|
|
IoCounters->OtherTransferCount = Process->OtherTransferCount.QuadPart;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Ignore exception */
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Set status to success in any case */
|
|
Status = STATUS_SUCCESS;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* Timing */
|
|
case ProcessTimes:
|
|
|
|
/* Set the return length */
|
|
Length = sizeof(KERNEL_USER_TIMES);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Protect writes with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Copy time information from EPROCESS/KPROCESS */
|
|
ProcessTime->CreateTime = Process->CreateTime;
|
|
ProcessTime->UserTime.QuadPart = Process->Pcb.UserTime *
|
|
100000LL;
|
|
ProcessTime->KernelTime.QuadPart = Process->Pcb.KernelTime *
|
|
100000LL;
|
|
ProcessTime->ExitTime = Process->ExitTime;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* Process Debug Port */
|
|
case ProcessDebugPort:
|
|
|
|
/* Set return length */
|
|
Length = sizeof(HANDLE);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Protect write with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Return whether or not we have a debug port */
|
|
*(PHANDLE)ProcessInformation = (Process->DebugPort ?
|
|
(HANDLE)-1 : NULL);
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* LDT, WS and VDM Information: not implemented */
|
|
case ProcessLdtInformation:
|
|
case ProcessWorkingSetWatch:
|
|
case ProcessWx86Information:
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
DPRINT1("Not implemented: %lx\n", ProcessInformationClass);
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
break;
|
|
|
|
case ProcessHandleCount:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(ULONG);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Count the number of handles this process has */
|
|
HandleCount = ObGetProcessHandleCount(Process);
|
|
|
|
/* Protect write in SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Return the count of handles */
|
|
*(PULONG)ProcessInformation = HandleCount;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* Session ID for the process */
|
|
case ProcessSessionInformation:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(PROCESS_SESSION_INFORMATION);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Enter SEH for write safety */
|
|
_SEH2_TRY
|
|
{
|
|
/* Write back the Session ID */
|
|
SessionInfo->SessionId = Process->Session;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* WOW64: Not implemented */
|
|
case ProcessWow64Information:
|
|
|
|
/* Set the return length */
|
|
Length = sizeof(ULONG_PTR);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Protect write in SEH */
|
|
_SEH2_TRY
|
|
{
|
|
#ifdef _WIN64
|
|
DPRINT1("Not implemented: ProcessWow64Information\n");
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
#else
|
|
/* Wow64 not present */
|
|
*(PULONG_PTR)ProcessInformation = 0;
|
|
#endif
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* Virtual Memory Statistics */
|
|
case ProcessVmCounters:
|
|
|
|
/* Set the return length */
|
|
Length = sizeof(VM_COUNTERS);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Enter SEH for write safety */
|
|
_SEH2_TRY
|
|
{
|
|
/* Return data from EPROCESS */
|
|
VmCounters->PeakVirtualSize = Process->PeakVirtualSize;
|
|
VmCounters->VirtualSize = Process->VirtualSize;
|
|
VmCounters->PageFaultCount = Process->Vm.PageFaultCount;
|
|
VmCounters->PeakWorkingSetSize = Process->Vm.PeakWorkingSetSize;
|
|
VmCounters->WorkingSetSize = Process->Vm.WorkingSetSize;
|
|
VmCounters->QuotaPeakPagedPoolUsage = Process->QuotaPeak[0];
|
|
VmCounters->QuotaPagedPoolUsage = Process->QuotaUsage[0];
|
|
VmCounters->QuotaPeakNonPagedPoolUsage = Process->QuotaPeak[1];
|
|
VmCounters->QuotaNonPagedPoolUsage = Process->QuotaUsage[1];
|
|
VmCounters->PagefileUsage = Process->QuotaUsage[2];
|
|
VmCounters->PeakPagefileUsage = Process->QuotaPeak[2];
|
|
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* Hard Error Processing Mode */
|
|
case ProcessDefaultHardErrorMode:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(ULONG);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Enter SEH for writing back data */
|
|
_SEH2_TRY
|
|
{
|
|
/* Write the current processing mode */
|
|
*(PULONG)ProcessInformation = Process->
|
|
DefaultHardErrorProcessing;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* Priority Boosting status */
|
|
case ProcessPriorityBoost:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(ULONG);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Enter SEH for writing back data */
|
|
_SEH2_TRY
|
|
{
|
|
/* Return boost status */
|
|
*(PULONG)ProcessInformation = Process->Pcb.DisableBoost ?
|
|
TRUE : FALSE;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* DOS Device Map */
|
|
case ProcessDeviceMap:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(PROCESS_DEVICEMAP_INFORMATION);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Query the device map information */
|
|
ObQueryDeviceMapInformation(Process, &DeviceMap);
|
|
|
|
/* Enter SEH for writing back data */
|
|
_SEH2_TRY
|
|
{
|
|
*(PPROCESS_DEVICEMAP_INFORMATION)ProcessInformation = DeviceMap;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* Priority class */
|
|
case ProcessPriorityClass:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(PROCESS_PRIORITY_CLASS);
|
|
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Enter SEH for writing back data */
|
|
_SEH2_TRY
|
|
{
|
|
/* Return current priority class */
|
|
PsPriorityClass->PriorityClass = Process->PriorityClass;
|
|
PsPriorityClass->Foreground = FALSE;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
case ProcessImageFileName:
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Get the image path */
|
|
Status = SeLocateProcessImageName(Process, &ImageName);
|
|
if (NT_SUCCESS(Status))
|
|
{
|
|
/* Set return length */
|
|
Length = ImageName->MaximumLength +
|
|
sizeof(OBJECT_NAME_INFORMATION);
|
|
|
|
/* Make sure it's large enough */
|
|
if (Length <= ProcessInformationLength)
|
|
{
|
|
/* Enter SEH to protect write */
|
|
_SEH2_TRY
|
|
{
|
|
/* Copy it */
|
|
RtlCopyMemory(ProcessInformation,
|
|
ImageName,
|
|
Length);
|
|
|
|
/* Update pointer */
|
|
((PUNICODE_STRING)ProcessInformation)->Buffer =
|
|
(PWSTR)((PUNICODE_STRING)ProcessInformation + 1);
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
}
|
|
else
|
|
{
|
|
/* Buffer too small */
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
}
|
|
|
|
/* Free the image path */
|
|
ExFreePool(ImageName);
|
|
}
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
case ProcessBreakOnTermination:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(ULONG);
|
|
if (ProcessInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
PROCESS_QUERY_INFORMATION,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Enter SEH for writing back data */
|
|
_SEH2_TRY
|
|
{
|
|
/* Return the BreakOnTermination state */
|
|
*(PULONG)ProcessInformation = Process->BreakOnTermination;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the process */
|
|
ObDereferenceObject(Process);
|
|
break;
|
|
|
|
/* Per-process security cookie */
|
|
case ProcessCookie:
|
|
|
|
/* Get the current process and cookie */
|
|
Process = PsGetCurrentProcess();
|
|
Cookie = Process->Cookie;
|
|
if (!Cookie)
|
|
{
|
|
LARGE_INTEGER SystemTime;
|
|
ULONG NewCookie;
|
|
PKPRCB Prcb;
|
|
|
|
/* Generate a new cookie */
|
|
KeQuerySystemTime(&SystemTime);
|
|
Prcb = KeGetCurrentPrcb();
|
|
NewCookie = Prcb->KeSystemCalls ^ Prcb->InterruptTime ^
|
|
SystemTime.u.LowPart ^ SystemTime.u.HighPart;
|
|
|
|
/* Set the new cookie or return the current one */
|
|
Cookie = InterlockedCompareExchange((LONG*)&Process->Cookie,
|
|
NewCookie,
|
|
Cookie);
|
|
if (!Cookie) Cookie = NewCookie;
|
|
|
|
/* Set return length */
|
|
Length = sizeof(ULONG);
|
|
}
|
|
|
|
/* Indicate success */
|
|
Status = STATUS_SUCCESS;
|
|
|
|
/* Enter SEH to protect write */
|
|
_SEH2_TRY
|
|
{
|
|
/* Write back the cookie */
|
|
*(PULONG)ProcessInformation = Cookie;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
break;
|
|
|
|
/* Not yet implemented, or unknown */
|
|
case ProcessBasePriority:
|
|
case ProcessRaisePriority:
|
|
case ProcessExceptionPort:
|
|
case ProcessAccessToken:
|
|
case ProcessLdtSize:
|
|
case ProcessIoPortHandlers:
|
|
case ProcessUserModeIOPL:
|
|
case ProcessEnableAlignmentFaultFixup:
|
|
case ProcessAffinityMask:
|
|
case ProcessForegroundInformation:
|
|
default:
|
|
DPRINT1("Unsupported or unimplemented: %lx\n", ProcessInformationClass);
|
|
Status = STATUS_INVALID_INFO_CLASS;
|
|
}
|
|
|
|
/* Protect write with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Check if caller wanted return length */
|
|
if (ReturnLength) *ReturnLength = Length;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
return Status;
|
|
}
|
|
|
|
/*
|
|
* @implemented
|
|
*/
|
|
NTSTATUS
|
|
NTAPI
|
|
NtSetInformationProcess(IN HANDLE ProcessHandle,
|
|
IN PROCESSINFOCLASS ProcessInformationClass,
|
|
IN PVOID ProcessInformation,
|
|
IN ULONG ProcessInformationLength)
|
|
{
|
|
PEPROCESS Process;
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
|
ACCESS_MASK Access;
|
|
NTSTATUS Status;
|
|
HANDLE PortHandle = NULL;
|
|
HANDLE TokenHandle = NULL;
|
|
PROCESS_SESSION_INFORMATION SessionInfo = {0};
|
|
PROCESS_PRIORITY_CLASS PriorityClass = {0};
|
|
PVOID ExceptionPort;
|
|
ULONG Break;
|
|
PAGED_CODE();
|
|
|
|
/* Verify Information Class validity */
|
|
#if 0
|
|
Status = DefaultSetInfoBufferCheck(ProcessInformationClass,
|
|
PsProcessInfoClass,
|
|
RTL_NUMBER_OF(PsProcessInfoClass),
|
|
ProcessInformation,
|
|
ProcessInformationLength,
|
|
PreviousMode);
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
#endif
|
|
|
|
/* Check what class this is */
|
|
Access = PROCESS_SET_INFORMATION;
|
|
if (ProcessInformationClass == ProcessSessionInformation)
|
|
{
|
|
/* Setting the Session ID needs a special mask */
|
|
Access |= PROCESS_SET_SESSIONID;
|
|
}
|
|
else if (ProcessInformationClass == ProcessExceptionPort)
|
|
{
|
|
/* Setting the exception port needs a special mask */
|
|
Access |= PROCESS_SUSPEND_RESUME;
|
|
}
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ProcessHandle,
|
|
Access,
|
|
PsProcessType,
|
|
PreviousMode,
|
|
(PVOID*)&Process,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
|
|
/* Check what kind of information class this is */
|
|
switch (ProcessInformationClass)
|
|
{
|
|
/* Error/Exception Port */
|
|
case ProcessExceptionPort:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(HANDLE))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Use SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Capture the handle */
|
|
PortHandle = *(PHANDLE)ProcessInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Get the LPC Port */
|
|
Status = ObReferenceObjectByHandle(PortHandle,
|
|
0,
|
|
LpcPortObjectType,
|
|
PreviousMode,
|
|
(PVOID)&ExceptionPort,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Change the pointer */
|
|
if (InterlockedCompareExchangePointer(&Process->ExceptionPort,
|
|
ExceptionPort,
|
|
NULL))
|
|
{
|
|
/* We already had one, fail */
|
|
ObDereferenceObject(ExceptionPort);
|
|
Status = STATUS_PORT_ALREADY_SET;
|
|
}
|
|
break;
|
|
|
|
/* Security Token */
|
|
case ProcessAccessToken:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(PROCESS_ACCESS_TOKEN))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Use SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Save the token handle */
|
|
TokenHandle = ((PPROCESS_ACCESS_TOKEN)ProcessInformation)->
|
|
Token;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Assign the actual token */
|
|
Status = PspSetPrimaryToken(Process, TokenHandle, NULL);
|
|
break;
|
|
|
|
/* Hard error processing */
|
|
case ProcessDefaultHardErrorMode:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(ULONG))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Enter SEH for direct buffer read */
|
|
_SEH2_TRY
|
|
{
|
|
/* Update the current mode abd return the previous one */
|
|
InterlockedExchange((LONG*)&Process->DefaultHardErrorProcessing,
|
|
*(PLONG)ProcessInformation);
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
break;
|
|
|
|
/* Session ID */
|
|
case ProcessSessionInformation:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(PROCESS_SESSION_INFORMATION))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Enter SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Capture the caller's buffer */
|
|
SessionInfo = *(PPROCESS_SESSION_INFORMATION)ProcessInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Setting the session id requires the SeTcbPrivilege */
|
|
if (!SeSinglePrivilegeCheck(SeTcbPrivilege, PreviousMode))
|
|
{
|
|
/* Can't set the session ID, bail out. */
|
|
Status = STATUS_PRIVILEGE_NOT_HELD;
|
|
break;
|
|
}
|
|
|
|
/* FIXME - update the session id for the process token */
|
|
//Status = PsLockProcess(Process, FALSE);
|
|
if (!NT_SUCCESS(Status)) break;
|
|
|
|
/* Write the session ID in the EPROCESS */
|
|
Process->Session = SessionInfo.SessionId;
|
|
|
|
/* Check if the process also has a PEB */
|
|
if (Process->Peb)
|
|
{
|
|
/*
|
|
* Attach to the process to make sure we're in the right
|
|
* context to access the PEB structure
|
|
*/
|
|
KeAttachProcess(&Process->Pcb);
|
|
|
|
/* Enter SEH for write to user-mode PEB */
|
|
_SEH2_TRY
|
|
{
|
|
/* Write the session ID */
|
|
Process->Peb->SessionId = SessionInfo.SessionId;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Detach from the process */
|
|
KeDetachProcess();
|
|
}
|
|
|
|
/* Unlock the process */
|
|
//PsUnlockProcess(Process);
|
|
break;
|
|
|
|
case ProcessPriorityClass:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(PROCESS_PRIORITY_CLASS))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Enter SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Capture the caller's buffer */
|
|
PriorityClass = *(PPROCESS_PRIORITY_CLASS)ProcessInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Return the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Check for invalid PriorityClass value */
|
|
if (PriorityClass.PriorityClass > PROCESS_PRIORITY_CLASS_ABOVE_NORMAL)
|
|
{
|
|
Status = STATUS_INVALID_PARAMETER;
|
|
break;
|
|
}
|
|
|
|
/* TODO: Check privileges */
|
|
|
|
/* Check if we have a job */
|
|
if (Process->Job)
|
|
{
|
|
DPRINT1("Jobs not yet supported\n");
|
|
}
|
|
|
|
/* Set process priority class */
|
|
Process->PriorityClass = PriorityClass.PriorityClass;
|
|
|
|
/* Set process priority mode (foreground or background) */
|
|
PsSetProcessPriorityByClass(Process,
|
|
!PriorityClass.Foreground ? PsProcessPriorityBackground :
|
|
PsProcessPriorityForeground);
|
|
|
|
Status = STATUS_SUCCESS;
|
|
break;
|
|
|
|
case ProcessQuotaLimits:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(QUOTA_LIMITS))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
DPRINT1("Not implemented: ProcessQuotaLimits\n");
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
break;
|
|
|
|
case ProcessBasePriority:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(KPRIORITY))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
DPRINT1("Not implemented: ProcessBasePriority\n");
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
break;
|
|
|
|
case ProcessRaisePriority:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(ULONG))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
DPRINT1("Not implemented: ProcessRaisePriority\n");
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
break;
|
|
|
|
case ProcessWx86Information:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(HANDLE))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
DPRINT1("Not implemented: ProcessWx86Information\n");
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
break;
|
|
|
|
case ProcessDebugPort:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(HANDLE))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
DPRINT1("Not implemented: ProcessDebugPort\n");
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
break;
|
|
|
|
case ProcessBreakOnTermination:
|
|
|
|
/* Check buffer length */
|
|
if (ProcessInformationLength != sizeof(ULONG))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Enter SEH for direct buffer read */
|
|
_SEH2_TRY
|
|
{
|
|
Break = *(PULONG)ProcessInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Break = 0;
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Setting 'break on termination' requires the SeDebugPrivilege */
|
|
if (!SeSinglePrivilegeCheck(SeDebugPrivilege, PreviousMode))
|
|
{
|
|
Status = STATUS_PRIVILEGE_NOT_HELD;
|
|
break;
|
|
}
|
|
|
|
/* Set or clear the flag */
|
|
if (Break)
|
|
{
|
|
PspSetProcessFlag(Process, PSF_BREAK_ON_TERMINATION_BIT);
|
|
}
|
|
else
|
|
{
|
|
PspClearProcessFlag(Process, PSF_BREAK_ON_TERMINATION_BIT);
|
|
}
|
|
|
|
break;
|
|
|
|
/* We currently don't implement any of these */
|
|
case ProcessLdtInformation:
|
|
case ProcessLdtSize:
|
|
case ProcessIoPortHandlers:
|
|
case ProcessWorkingSetWatch:
|
|
case ProcessUserModeIOPL:
|
|
case ProcessEnableAlignmentFaultFixup:
|
|
case ProcessAffinityMask:
|
|
DPRINT1("Not implemented: %lx\n", ProcessInformationClass);
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
break;
|
|
|
|
/* Supposedly these are invalid...!? verify! */
|
|
case ProcessBasicInformation:
|
|
case ProcessIoCounters:
|
|
case ProcessTimes:
|
|
case ProcessPooledUsageAndLimits:
|
|
case ProcessHandleCount:
|
|
case ProcessWow64Information:
|
|
default:
|
|
DPRINT1("Unsupported or unimplemented: %lx\n", ProcessInformationClass);
|
|
Status = STATUS_INVALID_INFO_CLASS;
|
|
}
|
|
|
|
/* Dereference and return status */
|
|
ObDereferenceObject(Process);
|
|
return Status;
|
|
}
|
|
|
|
/*
|
|
* @implemented
|
|
*/
|
|
NTSTATUS
|
|
NTAPI
|
|
NtSetInformationThread(IN HANDLE ThreadHandle,
|
|
IN THREADINFOCLASS ThreadInformationClass,
|
|
IN PVOID ThreadInformation,
|
|
IN ULONG ThreadInformationLength)
|
|
{
|
|
PETHREAD Thread;
|
|
ULONG Access;
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
|
NTSTATUS Status;
|
|
HANDLE TokenHandle = NULL;
|
|
KPRIORITY Priority = 0;
|
|
KAFFINITY Affinity = 0, CombinedAffinity;
|
|
PVOID Address = NULL;
|
|
PEPROCESS Process;
|
|
ULONG DisableBoost = 0;
|
|
ULONG IdealProcessor = 0;
|
|
PTEB Teb;
|
|
ULONG TlsIndex = 0;
|
|
PVOID *ExpansionSlots;
|
|
PETHREAD ProcThread;
|
|
PAGED_CODE();
|
|
|
|
/* Verify Information Class validity */
|
|
#if 0
|
|
Status = DefaultSetInfoBufferCheck(ThreadInformationClass,
|
|
PsThreadInfoClass,
|
|
RTL_NUMBER_OF(PsThreadInfoClass),
|
|
ThreadInformation,
|
|
ThreadInformationLength,
|
|
PreviousMode);
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
#endif
|
|
|
|
/* Check what class this is */
|
|
Access = THREAD_SET_INFORMATION;
|
|
if (ThreadInformationClass == ThreadImpersonationToken)
|
|
{
|
|
/* Setting the impersonation token needs a special mask */
|
|
Access = THREAD_SET_THREAD_TOKEN;
|
|
}
|
|
|
|
/* Reference the thread */
|
|
Status = ObReferenceObjectByHandle(ThreadHandle,
|
|
Access,
|
|
PsThreadType,
|
|
PreviousMode,
|
|
(PVOID*)&Thread,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
|
|
/* Check what kind of information class this is */
|
|
switch (ThreadInformationClass)
|
|
{
|
|
/* Thread priority */
|
|
case ThreadPriority:
|
|
|
|
/* Check buffer length */
|
|
if (ThreadInformationLength != sizeof(KPRIORITY))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Use SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Get the priority */
|
|
Priority = *(PLONG)ThreadInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Validate it */
|
|
if ((Priority > HIGH_PRIORITY) ||
|
|
(Priority <= LOW_PRIORITY))
|
|
{
|
|
/* Fail */
|
|
Status = STATUS_INVALID_PARAMETER;
|
|
break;
|
|
}
|
|
|
|
/* Set the priority */
|
|
KeSetPriorityThread(&Thread->Tcb, Priority);
|
|
break;
|
|
|
|
case ThreadBasePriority:
|
|
|
|
/* Check buffer length */
|
|
if (ThreadInformationLength != sizeof(LONG))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Use SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Get the priority */
|
|
Priority = *(PLONG)ThreadInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Validate it */
|
|
if ((Priority > THREAD_BASE_PRIORITY_MAX) ||
|
|
(Priority < THREAD_BASE_PRIORITY_MIN))
|
|
{
|
|
/* These ones are OK */
|
|
if ((Priority != THREAD_BASE_PRIORITY_LOWRT + 1) &&
|
|
(Priority != THREAD_BASE_PRIORITY_IDLE - 1))
|
|
{
|
|
/* Check if the process is real time */
|
|
if (PsGetCurrentProcess()->PriorityClass !=
|
|
PROCESS_PRIORITY_CLASS_REALTIME)
|
|
{
|
|
/* It isn't, fail */
|
|
Status = STATUS_INVALID_PARAMETER;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
/* Set the base priority */
|
|
KeSetBasePriorityThread(&Thread->Tcb, Priority);
|
|
break;
|
|
|
|
case ThreadAffinityMask:
|
|
|
|
/* Check buffer length */
|
|
if (ThreadInformationLength != sizeof(ULONG_PTR))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Use SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Get the priority */
|
|
Affinity = *(PULONG_PTR)ThreadInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Validate it */
|
|
if (!Affinity)
|
|
{
|
|
/* Fail */
|
|
Status = STATUS_INVALID_PARAMETER;
|
|
break;
|
|
}
|
|
|
|
/* Get the process */
|
|
Process = Thread->ThreadsProcess;
|
|
|
|
/* Try to acquire rundown */
|
|
if (ExAcquireRundownProtection(&Process->RundownProtect))
|
|
{
|
|
/* Lock it */
|
|
KeEnterCriticalRegion();
|
|
ExAcquirePushLockShared(&Process->ProcessLock);
|
|
|
|
/* Combine masks */
|
|
CombinedAffinity = Affinity & Process->Pcb.Affinity;
|
|
if (CombinedAffinity != Affinity)
|
|
{
|
|
/* Fail */
|
|
Status = STATUS_INVALID_PARAMETER;
|
|
}
|
|
else
|
|
{
|
|
/* Set the affinity */
|
|
KeSetAffinityThread(&Thread->Tcb, CombinedAffinity);
|
|
}
|
|
|
|
/* Release the lock and rundown */
|
|
ExReleasePushLockShared(&Process->ProcessLock);
|
|
KeLeaveCriticalRegion();
|
|
ExReleaseRundownProtection(&Process->RundownProtect);
|
|
}
|
|
else
|
|
{
|
|
/* Too late */
|
|
Status = STATUS_PROCESS_IS_TERMINATING;
|
|
}
|
|
|
|
/* Return status */
|
|
break;
|
|
|
|
case ThreadImpersonationToken:
|
|
|
|
/* Check buffer length */
|
|
if (ThreadInformationLength != sizeof(HANDLE))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Use SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Save the token handle */
|
|
TokenHandle = *(PHANDLE)ThreadInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Assign the actual token */
|
|
Status = PsAssignImpersonationToken(Thread, TokenHandle);
|
|
break;
|
|
|
|
case ThreadQuerySetWin32StartAddress:
|
|
|
|
/* Check buffer length */
|
|
if (ThreadInformationLength != sizeof(ULONG_PTR))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Use SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Get the priority */
|
|
Address = *(PVOID*)ThreadInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Set the address */
|
|
Thread->Win32StartAddress = Address;
|
|
break;
|
|
|
|
case ThreadIdealProcessor:
|
|
|
|
/* Check buffer length */
|
|
if (ThreadInformationLength != sizeof(ULONG_PTR))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Use SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Get the priority */
|
|
IdealProcessor = *(PULONG_PTR)ThreadInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Validate it */
|
|
if (IdealProcessor > MAXIMUM_PROCESSORS)
|
|
{
|
|
/* Fail */
|
|
Status = STATUS_INVALID_PARAMETER;
|
|
break;
|
|
}
|
|
|
|
/* Set the ideal */
|
|
Status = KeSetIdealProcessorThread(&Thread->Tcb,
|
|
(CCHAR)IdealProcessor);
|
|
|
|
/* Get the TEB and protect the thread */
|
|
Teb = Thread->Tcb.Teb;
|
|
if ((Teb) && (ExAcquireRundownProtection(&Thread->RundownProtect)))
|
|
{
|
|
/* Save the ideal processor */
|
|
Teb->IdealProcessor = Thread->Tcb.IdealProcessor;
|
|
|
|
/* Release rundown protection */
|
|
ExReleaseRundownProtection(&Thread->RundownProtect);
|
|
}
|
|
|
|
break;
|
|
|
|
case ThreadPriorityBoost:
|
|
|
|
/* Check buffer length */
|
|
if (ThreadInformationLength != sizeof(ULONG_PTR))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Use SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Get the priority */
|
|
DisableBoost = *(PULONG_PTR)ThreadInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Call the kernel */
|
|
KeSetDisableBoostThread(&Thread->Tcb, (BOOLEAN)DisableBoost);
|
|
break;
|
|
|
|
case ThreadZeroTlsCell:
|
|
|
|
/* Check buffer length */
|
|
if (ThreadInformationLength != sizeof(ULONG_PTR))
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
/* Use SEH for capture */
|
|
_SEH2_TRY
|
|
{
|
|
/* Get the priority */
|
|
TlsIndex = *(PULONG_PTR)ThreadInformation;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get the exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
_SEH2_YIELD(break);
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* This is only valid for the current thread */
|
|
if (Thread != PsGetCurrentThread())
|
|
{
|
|
/* Fail */
|
|
Status = STATUS_INVALID_PARAMETER;
|
|
break;
|
|
}
|
|
|
|
/* Get the process */
|
|
Process = Thread->ThreadsProcess;
|
|
|
|
/* Loop the threads */
|
|
ProcThread = PsGetNextProcessThread(Process, NULL);
|
|
while (ProcThread)
|
|
{
|
|
/* Acquire rundown */
|
|
if (ExAcquireRundownProtection(&ProcThread->RundownProtect))
|
|
{
|
|
/* Get the TEB */
|
|
Teb = ProcThread->Tcb.Teb;
|
|
if (Teb)
|
|
{
|
|
/* Check if we're in the expansion range */
|
|
if (TlsIndex > TLS_MINIMUM_AVAILABLE - 1)
|
|
{
|
|
if (TlsIndex < (TLS_MINIMUM_AVAILABLE +
|
|
TLS_EXPANSION_SLOTS) - 1)
|
|
{
|
|
/* Check if we have expansion slots */
|
|
ExpansionSlots = Teb->TlsExpansionSlots;
|
|
if (ExpansionSlots)
|
|
{
|
|
/* Clear the index */
|
|
ExpansionSlots[TlsIndex - TLS_MINIMUM_AVAILABLE] = 0;
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
/* Clear the index */
|
|
Teb->TlsSlots[TlsIndex] = NULL;
|
|
}
|
|
}
|
|
|
|
/* Release rundown */
|
|
ExReleaseRundownProtection(&ProcThread->RundownProtect);
|
|
}
|
|
|
|
/* Go to the next thread */
|
|
ProcThread = PsGetNextProcessThread(Process, ProcThread);
|
|
}
|
|
|
|
/* All done */
|
|
break;
|
|
|
|
default:
|
|
/* We don't implement it yet */
|
|
DPRINT1("Not implemented: %lx\n", ThreadInformationClass);
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* Dereference and return status */
|
|
ObDereferenceObject(Thread);
|
|
return Status;
|
|
}
|
|
|
|
/*
|
|
* @implemented
|
|
*/
|
|
NTSTATUS
|
|
NTAPI
|
|
NtQueryInformationThread(IN HANDLE ThreadHandle,
|
|
IN THREADINFOCLASS ThreadInformationClass,
|
|
OUT PVOID ThreadInformation,
|
|
IN ULONG ThreadInformationLength,
|
|
OUT PULONG ReturnLength OPTIONAL)
|
|
{
|
|
PETHREAD Thread;
|
|
KPROCESSOR_MODE PreviousMode = ExGetPreviousMode();
|
|
NTSTATUS Status;
|
|
ULONG Access;
|
|
ULONG Length = 0;
|
|
PTHREAD_BASIC_INFORMATION ThreadBasicInfo =
|
|
(PTHREAD_BASIC_INFORMATION)ThreadInformation;
|
|
PKERNEL_USER_TIMES ThreadTime = (PKERNEL_USER_TIMES)ThreadInformation;
|
|
KIRQL OldIrql;
|
|
PAGED_CODE();
|
|
|
|
/* Check if we were called from user mode */
|
|
if (PreviousMode != KernelMode)
|
|
{
|
|
/* Enter SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Probe the buffer */
|
|
ProbeForWrite(ThreadInformation,
|
|
ThreadInformationLength,
|
|
sizeof(ULONG));
|
|
|
|
/* Probe the return length if required */
|
|
if (ReturnLength) ProbeForWriteUlong(ReturnLength);
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Return the exception code */
|
|
_SEH2_YIELD(return _SEH2_GetExceptionCode());
|
|
}
|
|
_SEH2_END;
|
|
}
|
|
|
|
/* Check what class this is */
|
|
Access = THREAD_QUERY_INFORMATION;
|
|
|
|
/* Reference the process */
|
|
Status = ObReferenceObjectByHandle(ThreadHandle,
|
|
Access,
|
|
PsThreadType,
|
|
PreviousMode,
|
|
(PVOID*)&Thread,
|
|
NULL);
|
|
if (!NT_SUCCESS(Status)) return Status;
|
|
|
|
/* Check what kind of information class this is */
|
|
switch (ThreadInformationClass)
|
|
{
|
|
/* Basic thread information */
|
|
case ThreadBasicInformation:
|
|
|
|
/* Set return length */
|
|
Length = sizeof(THREAD_BASIC_INFORMATION);
|
|
|
|
if (ThreadInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
/* Protect writes with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Write all the information from the ETHREAD/KTHREAD */
|
|
ThreadBasicInfo->ExitStatus = Thread->ExitStatus;
|
|
ThreadBasicInfo->TebBaseAddress = (PVOID)Thread->Tcb.Teb;
|
|
ThreadBasicInfo->ClientId = Thread->Cid;
|
|
ThreadBasicInfo->AffinityMask = Thread->Tcb.Affinity;
|
|
ThreadBasicInfo->Priority = Thread->Tcb.Priority;
|
|
ThreadBasicInfo->BasePriority = KeQueryBasePriorityThread(&Thread->Tcb);
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
break;
|
|
|
|
/* Thread time information */
|
|
case ThreadTimes:
|
|
|
|
/* Set the return length */
|
|
Length = sizeof(KERNEL_USER_TIMES);
|
|
|
|
if (ThreadInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
/* Protect writes with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Copy time information from ETHREAD/KTHREAD */
|
|
ThreadTime->KernelTime.QuadPart = Thread->Tcb.KernelTime *
|
|
100000LL;
|
|
ThreadTime->UserTime.QuadPart = Thread->Tcb.UserTime *
|
|
100000LL;
|
|
ThreadTime->CreateTime = Thread->CreateTime;
|
|
ThreadTime->ExitTime = Thread->ExitTime;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
break;
|
|
|
|
case ThreadQuerySetWin32StartAddress:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(PVOID);
|
|
|
|
if (ThreadInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
/* Protect write with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Return the Win32 Start Address */
|
|
*(PVOID*)ThreadInformation = Thread->Win32StartAddress;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
break;
|
|
|
|
case ThreadPerformanceCount:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(LARGE_INTEGER);
|
|
|
|
if (ThreadInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
/* Protect write with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* FIXME */
|
|
(*(PLARGE_INTEGER)ThreadInformation).QuadPart = 0;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
break;
|
|
|
|
case ThreadAmILastThread:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(ULONG);
|
|
|
|
if (ThreadInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
/* Protect write with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Return whether or not we are the last thread */
|
|
*(PULONG)ThreadInformation = ((Thread->ThreadsProcess->
|
|
ThreadListHead.Flink->Flink ==
|
|
&Thread->ThreadsProcess->
|
|
ThreadListHead) ?
|
|
TRUE : FALSE);
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
break;
|
|
|
|
case ThreadIsIoPending:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(ULONG);
|
|
|
|
if (ThreadInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
/* Raise the IRQL to protect the IRP list */
|
|
KeRaiseIrql(APC_LEVEL, &OldIrql);
|
|
|
|
/* Protect write with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Check if the IRP list is empty or not */
|
|
*(PULONG)ThreadInformation = !IsListEmpty(&Thread->IrpList);
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Lower IRQL back */
|
|
KeLowerIrql(OldIrql);
|
|
break;
|
|
|
|
/* LDT and GDT information */
|
|
case ThreadDescriptorTableEntry:
|
|
|
|
#if defined(_X86_)
|
|
/* Call the worker routine */
|
|
Status = PspQueryDescriptorThread(Thread,
|
|
ThreadInformation,
|
|
ThreadInformationLength,
|
|
ReturnLength);
|
|
#else
|
|
/* Only implemented on x86 */
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
#endif
|
|
break;
|
|
|
|
case ThreadPriorityBoost:
|
|
|
|
/* Set the return length*/
|
|
Length = sizeof(ULONG);
|
|
|
|
if (ThreadInformationLength != Length)
|
|
{
|
|
Status = STATUS_INFO_LENGTH_MISMATCH;
|
|
break;
|
|
}
|
|
|
|
_SEH2_TRY
|
|
{
|
|
*(PULONG)ThreadInformation = Thread->Tcb.DisableBoost ? 1 : 0;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
break;
|
|
|
|
/* Anything else */
|
|
default:
|
|
|
|
/* Not yet implemented */
|
|
DPRINT1("Not implemented: %lx\n", ThreadInformationClass);
|
|
Status = STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* Protect write with SEH */
|
|
_SEH2_TRY
|
|
{
|
|
/* Check if caller wanted return length */
|
|
if (ReturnLength) *ReturnLength = Length;
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
/* Get exception code */
|
|
Status = _SEH2_GetExceptionCode();
|
|
}
|
|
_SEH2_END;
|
|
|
|
/* Dereference the thread, and return */
|
|
ObDereferenceObject(Thread);
|
|
return Status;
|
|
}
|
|
|
|
/* EOF */
|