secursup.c File Reference

#include "npfs.h"

Include dependency graph for secursup.c:

Go to the source code of this file.

Macros
#define	NPFS_BUGCHECK_FILE_ID   (NPFS_BUGCHECK_SECURSUP)

Functions
NTSTATUS NTAPI	NpImpersonateClientContext (IN PNP_CCB Ccb)
VOID NTAPI	NpFreeClientSecurityContext (IN PSECURITY_CLIENT_CONTEXT ClientContext)
VOID NTAPI	NpCopyClientContext (IN PNP_CCB Ccb, IN PNP_DATA_QUEUE_ENTRY DataQueueEntry)
VOID NTAPI	NpUninitializeSecurity (IN PNP_CCB Ccb)
NTSTATUS NTAPI	NpInitializeSecurity (IN PNP_CCB Ccb, IN PSECURITY_QUALITY_OF_SERVICE SecurityQos, IN PETHREAD Thread)
NTSTATUS NTAPI	NpGetClientSecurityContext (IN ULONG NamedPipeEnd, IN PNP_CCB Ccb, IN PETHREAD Thread, IN PSECURITY_CLIENT_CONTEXT *Context)

Macro Definition Documentation

NPFS_BUGCHECK_FILE_ID

#define NPFS_BUGCHECK_FILE_ID   (NPFS_BUGCHECK_SECURSUP)

Definition at line 14 of file secursup.c.

Function Documentation

NpCopyClientContext()

VOID NTAPI NpCopyClientContext	(	IN PNP_CCB	Ccb,
		IN PNP_DATA_QUEUE_ENTRY	DataQueueEntry
	)

Definition at line 58 of file secursup.c.

{
    PAGED_CODE();
 
    if (!DataQueueEntry->ClientSecurityContext) return;
 
    NpFreeClientSecurityContext(Ccb->ClientContext);
    Ccb->ClientContext = DataQueueEntry->ClientSecurityContext;
    DataQueueEntry->ClientSecurityContext = NULL;
}

Referenced by NpReadDataQueue().

NpFreeClientSecurityContext()

VOID NTAPI NpFreeClientSecurityContext

(

IN PSECURITY_CLIENT_CONTEXT

ClientContext

)

Definition at line 40 of file secursup.c.

{
    TOKEN_TYPE TokenType;
    PVOID ClientToken;
 
    if (!ClientContext) return;
 
    TokenType = SeTokenType(ClientContext->ClientToken);
    ClientToken = ClientContext->ClientToken;
    if ((TokenType == TokenPrimary) || (ClientToken))
    {
        ObDereferenceObject(ClientToken);
    }
    ExFreePool(ClientContext);
}

Referenced by NpAddDataQueueEntry(), NpCancelDataQueueIrp(), NpCopyClientContext(), NpRemoveDataQueueEntry(), NpUninitializeSecurity(), and NpWriteDataQueue().

NpGetClientSecurityContext()

NTSTATUS NTAPI NpGetClientSecurityContext	(	IN ULONG	NamedPipeEnd,
		IN PNP_CCB	Ccb,
		IN PETHREAD	Thread,
		IN PSECURITY_CLIENT_CONTEXT *	Context
	)

Definition at line 129 of file secursup.c.

{
    PSECURITY_CLIENT_CONTEXT NewContext;
    NTSTATUS Status;
    PAGED_CODE();
 
    if (NamedPipeEnd == FILE_PIPE_SERVER_END || Ccb->ClientQos.ContextTrackingMode != SECURITY_DYNAMIC_TRACKING)
    {
        NewContext = NULL;
        Status = STATUS_SUCCESS;
    }
    else
    {
        NewContext = ExAllocatePoolWithQuotaTag(PagedPool | POOL_QUOTA_FAIL_INSTEAD_OF_RAISE,
                                                sizeof(*NewContext),
                                                NPFS_CLIENT_SEC_CTX_TAG);
        if (!NewContext) return STATUS_INSUFFICIENT_RESOURCES;
 
        Status = SeCreateClientSecurity(Thread, &Ccb->ClientQos, 0, NewContext);
        if (!NT_SUCCESS(Status))
        {
            ExFreePool(NewContext);
            NewContext = NULL;
        }
    }
    *Context = NewContext;
    return Status;
}

Referenced by NpAddDataQueueEntry(), and NpWriteDataQueue().

NpImpersonateClientContext()

NTSTATUS NTAPI NpImpersonateClientContext

(

IN PNP_CCB

Ccb

)

Definition at line 20 of file secursup.c.

{
    NTSTATUS Status;
    PSECURITY_CLIENT_CONTEXT ClientContext;
    PAGED_CODE();
 
    ClientContext = Ccb->ClientContext;
    if (ClientContext)
    {
        Status = SeImpersonateClientEx(ClientContext, NULL);
    }
    else
    {
        Status = STATUS_CANNOT_IMPERSONATE;
    }
    return Status;
}

Referenced by NpImpersonate().

NpInitializeSecurity()

NTSTATUS NTAPI NpInitializeSecurity	(	IN PNP_CCB	Ccb,
		IN PSECURITY_QUALITY_OF_SERVICE	SecurityQos,
		IN PETHREAD	Thread
	)

Definition at line 82 of file secursup.c.

{
    PSECURITY_CLIENT_CONTEXT ClientContext;
    NTSTATUS Status;
    PAGED_CODE();
 
    if (SecurityQos)
    {
        Ccb->ClientQos = *SecurityQos;
    }
    else
    {
        Ccb->ClientQos.Length = sizeof(Ccb->ClientQos);
        Ccb->ClientQos.ImpersonationLevel = SecurityImpersonation;
        Ccb->ClientQos.ContextTrackingMode = SECURITY_DYNAMIC_TRACKING;
        Ccb->ClientQos.EffectiveOnly = TRUE;
    }
 
    NpUninitializeSecurity(Ccb);
 
    if (Ccb->ClientQos.ContextTrackingMode == SECURITY_DYNAMIC_TRACKING)
    {
        Status = STATUS_SUCCESS;
        Ccb->ClientContext = NULL;
        return Status;
    }
 
    ClientContext = ExAllocatePoolWithQuotaTag(PagedPool | POOL_QUOTA_FAIL_INSTEAD_OF_RAISE,
                                               sizeof(*ClientContext),
                                               NPFS_CLIENT_SEC_CTX_TAG);
    Ccb->ClientContext = ClientContext;
    if (!ClientContext) return STATUS_INSUFFICIENT_RESOURCES;
 
    Status = SeCreateClientSecurity(Thread, &Ccb->ClientQos, 0, ClientContext);
    if (!NT_SUCCESS(Status))
    {
        ExFreePool(Ccb->ClientContext);
        Ccb->ClientContext = NULL;
    }
 
    return Status;
}

Referenced by NpCreateClientEnd().

NpUninitializeSecurity()

VOID NTAPI NpUninitializeSecurity

(

IN PNP_CCB

Ccb

)

Definition at line 72 of file secursup.c.

{
    PAGED_CODE();
 
    NpFreeClientSecurityContext(Ccb->ClientContext);
    Ccb->ClientContext = NULL;
}

Referenced by NpCreateClientEnd(), NpDeleteCcb(), NpDisconnect(), NpInitializeSecurity(), NpListen(), NpSetClosingPipeState(), and NpSetDisconnectedPipeState().