appcache.c File Reference

#include <k32.h>
#include <debug.h>

Include dependency graph for appcache.c:

Go to the source code of this file.

Macros
#define	NDEBUG
#define	APPHELP_VALID_RESULT   0x10000
#define	APPHELP_RESULT_NOTFOUND   0x20000
#define	APPHELP_RESULT_FOUND   0x40000

Typedefs
typedef BOOL(WINAPI *	tApphelpCheckRunAppEx) (HANDLE FileHandle, PVOID Unk1, PVOID Unk2, PWCHAR ApplicationName, PVOID Environment, USHORT ExeType, PULONG Reason, PVOID *SdbQueryAppCompatData, PULONG SdbQueryAppCompatDataSize, PVOID *SxsData, PULONG SxsDataSize, PULONG FusionFlags, PULONG64 SomeFlag1, PULONG SomeFlag2)
typedef BOOL(WINAPI *	tSdbPackAppCompatData) (PVOID hsdb, PVOID pQueryResult, PVOID *ppData, DWORD *dwSize)

Functions
BOOLEAN WINAPI	IsShimInfrastructureDisabled (VOID)
BOOL WINAPI	BaseCheckAppcompatCache (IN PWCHAR ApplicationName, IN HANDLE FileHandle, IN PWCHAR Environment, OUT PULONG Reason)
static VOID	BaseInitApphelp (VOID)
BOOL WINAPI	BaseCheckRunApp (IN HANDLE FileHandle, IN PWCHAR ApplicationName, IN PWCHAR Environment, IN USHORT ExeType, IN PULONG pReason, IN PVOID *SdbQueryAppCompatData, IN PULONG SdbQueryAppCompatDataSize, IN PVOID *SxsData, IN PULONG SxsDataSize, OUT PULONG FusionFlags)
NTSTATUS WINAPI	BasepCheckBadapp (IN HANDLE FileHandle, IN PWCHAR ApplicationName, IN PWCHAR Environment, IN USHORT ExeType, IN PVOID *SdbQueryAppCompatData, IN PULONG SdbQueryAppCompatDataSize, IN PVOID *SxsData, IN PULONG SxsDataSize, OUT PULONG FusionFlags)
BOOL WINAPI	BaseDumpAppcompatCache (VOID)
BOOL WINAPI	BaseFlushAppcompatCache (VOID)
VOID WINAPI	BasepFreeAppCompatData (IN PVOID AppCompatData, IN PVOID AppCompatSxsData)
VOID WINAPI	BaseUpdateAppcompatCache (ULONG Unknown1, ULONG Unknown2, ULONG Unknown3)
NTSTATUS WINAPI	BaseCleanupAppcompatCache (VOID)
NTSTATUS WINAPI	BaseCleanupAppcompatCacheSupport (PVOID pUnknown)
BOOL WINAPI	BaseInitAppcompatCache (VOID)
BOOL WINAPI	BaseInitAppcompatCacheSupport (VOID)
PVOID WINAPI	GetComPlusPackageInstallStatus (VOID)
BOOL WINAPI	SetComPlusPackageInstallStatus (LPVOID lpInfo)
VOID WINAPI	SetTermsrvAppInstallMode (IN BOOL bInstallMode)
BOOL WINAPI	TermsrvAppInstallMode (VOID)

Variables
ULONG	g_ShimsDisabled = -1
static BOOL	g_ApphelpInitialized = FALSE
static PVOID	g_pApphelpCheckRunAppEx
static PVOID	g_pSdbPackAppCompatData

Macro Definition Documentation

APPHELP_RESULT_FOUND

#define APPHELP_RESULT_FOUND   0x40000

Definition at line 30 of file appcache.c.

APPHELP_RESULT_NOTFOUND

#define APPHELP_RESULT_NOTFOUND   0x20000

Definition at line 29 of file appcache.c.

APPHELP_VALID_RESULT

#define APPHELP_VALID_RESULT   0x10000

Definition at line 28 of file appcache.c.

NDEBUG

#define NDEBUG

Definition at line 13 of file appcache.c.

Typedef Documentation

tApphelpCheckRunAppEx

typedef BOOL(WINAPI * tApphelpCheckRunAppEx) (HANDLE FileHandle, PVOID Unk1, PVOID Unk2, PWCHAR ApplicationName, PVOID Environment, USHORT ExeType, PULONG Reason, PVOID *SdbQueryAppCompatData, PULONG SdbQueryAppCompatDataSize, PVOID *SxsData, PULONG SxsDataSize, PULONG FusionFlags, PULONG64 SomeFlag1, PULONG SomeFlag2)

Definition at line 23 of file appcache.c.

tSdbPackAppCompatData

typedef BOOL(WINAPI * tSdbPackAppCompatData) (PVOID hsdb, PVOID pQueryResult, PVOID *ppData, DWORD *dwSize)

Definition at line 26 of file appcache.c.

Function Documentation

BaseCheckAppcompatCache()

BOOL WINAPI BaseCheckAppcompatCache	(	IN PWCHAR	ApplicationName,
		IN HANDLE	FileHandle,
		IN PWCHAR	Environment,
		OUT PULONG	Reason
	)

Definition at line 143 of file appcache.c.

{
    DPRINT("BaseCheckAppcompatCache is UNIMPLEMENTED\n");
 
    if (Reason) *Reason = 0;
 
    // We don't know this app.
    return FALSE;
}

Referenced by BasepCheckBadapp().

BaseCheckRunApp()

BOOL WINAPI BaseCheckRunApp	(	IN HANDLE	FileHandle,
		IN PWCHAR	ApplicationName,
		IN PWCHAR	Environment,
		IN USHORT	ExeType,
		IN PULONG	pReason,
		IN PVOID *	SdbQueryAppCompatData,
		IN PULONG	SdbQueryAppCompatDataSize,
		IN PVOID *	SxsData,
		IN PULONG	SxsDataSize,
		OUT PULONG	FusionFlags
	)

Definition at line 193 of file appcache.c.

{
    ULONG Reason = 0;
    ULONG64 Flags1 = 0;
    ULONG Flags2 = 0;
    BOOL Continue, NeedCleanup = FALSE;
    tApphelpCheckRunAppEx pApphelpCheckRunAppEx;
    tSdbPackAppCompatData pSdbPackAppCompatData;
    PVOID QueryResult = NULL;
    ULONG QueryResultSize = 0;
 
    if (!g_ApphelpInitialized)
    {
        BaseInitApphelp();
        g_ApphelpInitialized = TRUE;
    }
 
    pApphelpCheckRunAppEx = RtlDecodeSystemPointer(g_pApphelpCheckRunAppEx);
    pSdbPackAppCompatData = RtlDecodeSystemPointer(g_pSdbPackAppCompatData);
 
    if (!pApphelpCheckRunAppEx || !pSdbPackAppCompatData)
        return TRUE;
 
    if (pReason)
        Reason = *pReason;
 
    Continue = pApphelpCheckRunAppEx(FileHandle, NULL, NULL, ApplicationName, Environment, ExeType, &Reason,
        &QueryResult, &QueryResultSize, SxsData, SxsDataSize, FusionFlags, &Flags1, &Flags2);
 
    if (pReason)
        *pReason = Reason;
 
    if (Continue)
    {
        if ((Reason & (APPHELP_VALID_RESULT|APPHELP_RESULT_FOUND)) == (APPHELP_VALID_RESULT|APPHELP_RESULT_FOUND))
        {
            if (!pSdbPackAppCompatData(NULL, QueryResult, SdbQueryAppCompatData, SdbQueryAppCompatDataSize))
            {
                DPRINT1("SdbPackAppCompatData returned a failure!\n");
                NeedCleanup = TRUE;
            }
        }
        else
        {
            NeedCleanup = TRUE;
        }
    }
 
    if (QueryResult)
        RtlFreeHeap(RtlGetProcessHeap(), 0, QueryResult);
 
    if (NeedCleanup)
    {
        BasepFreeAppCompatData(*SdbQueryAppCompatData, *SxsData);
        *SdbQueryAppCompatData = NULL;
        if (SdbQueryAppCompatDataSize)
            *SdbQueryAppCompatDataSize = 0;
        *SxsData = NULL;
        if (SxsDataSize)
            *SxsDataSize = 0;
    }
 
    return Continue;
}

Referenced by BasepCheckBadapp().

BaseCleanupAppcompatCache()

NTSTATUS WINAPI BaseCleanupAppcompatCache

(

VOID

)

Definition at line 367 of file appcache.c.

{
    STUB;
    return STATUS_NOT_IMPLEMENTED;
}

BaseCleanupAppcompatCacheSupport()

NTSTATUS WINAPI BaseCleanupAppcompatCacheSupport

(

PVOID

pUnknown

)

Definition at line 378 of file appcache.c.

{
    STUB;
    return STATUS_NOT_IMPLEMENTED;
}

BaseDumpAppcompatCache()

BOOL WINAPI BaseDumpAppcompatCache

(

VOID

)

Definition at line 316 of file appcache.c.

{
    NTSTATUS Status;
 
    Status = NtApphelpCacheControl(ApphelpCacheServiceDump, NULL);
    return NT_SUCCESS(Status);
}

Referenced by ShimDumpCache().

BaseFlushAppcompatCache()

BOOL WINAPI BaseFlushAppcompatCache

(

VOID

)

Definition at line 329 of file appcache.c.

{
    NTSTATUS Status;
 
    Status = NtApphelpCacheControl(ApphelpCacheServiceFlush, NULL);
    return NT_SUCCESS(Status);
}

Referenced by ShimFlushCache().

BaseInitAppcompatCache()

BOOL WINAPI BaseInitAppcompatCache

(

VOID

)

Definition at line 389 of file appcache.c.

{
    STUB;
    return FALSE;
}

BaseInitAppcompatCacheSupport()

BOOL WINAPI BaseInitAppcompatCacheSupport

(

VOID

)

Definition at line 400 of file appcache.c.

{
    STUB;
    return FALSE;
}

BaseInitApphelp()

static VOID BaseInitApphelp ( VOID  )

static

Definition at line 158 of file appcache.c.

{
    WCHAR Buffer[MAX_PATH*2];
    UNICODE_STRING DllPath = {0};
    PVOID ApphelpAddress;
    PVOID pApphelpCheckRunAppEx = NULL, pSdbPackAppCompatData = NULL;
 
    RtlInitEmptyUnicodeString(&DllPath, Buffer, sizeof(Buffer));
    RtlCopyUnicodeString(&DllPath, &BaseWindowsDirectory);
    RtlAppendUnicodeToString(&DllPath, L"\\system32\\apphelp.dll");
 
    if (NT_SUCCESS(LdrLoadDll(NULL, NULL, &DllPath, &ApphelpAddress)))
    {
        ANSI_STRING ProcName;
 
        RtlInitAnsiString(&ProcName, "ApphelpCheckRunAppEx");
        if (!NT_SUCCESS(LdrGetProcedureAddress(ApphelpAddress, &ProcName, 0, &pApphelpCheckRunAppEx)))
            pApphelpCheckRunAppEx = NULL;
 
        RtlInitAnsiString(&ProcName, "SdbPackAppCompatData");
        if (!NT_SUCCESS(LdrGetProcedureAddress(ApphelpAddress, &ProcName, 0, &pSdbPackAppCompatData)))
            pSdbPackAppCompatData = NULL;
    }
 
    if (InterlockedCompareExchangePointer(&g_pApphelpCheckRunAppEx, RtlEncodeSystemPointer(pApphelpCheckRunAppEx), NULL) == NULL)
    {
        g_pSdbPackAppCompatData = RtlEncodeSystemPointer(pSdbPackAppCompatData);
    }
}

Referenced by BaseCheckRunApp().

BasepCheckBadapp()

NTSTATUS WINAPI BasepCheckBadapp	(	IN HANDLE	FileHandle,
		IN PWCHAR	ApplicationName,
		IN PWCHAR	Environment,
		IN USHORT	ExeType,
		IN PVOID *	SdbQueryAppCompatData,
		IN PULONG	SdbQueryAppCompatDataSize,
		IN PVOID *	SxsData,
		IN PULONG	SxsDataSize,
		OUT PULONG	FusionFlags
	)

Definition at line 272 of file appcache.c.

{
    NTSTATUS Status = STATUS_SUCCESS;
    ULONG Reason = 0;
 
    /* Is shimming enabled by group policy? */
    if (IsShimInfrastructureDisabled())
    {
        /* Nothing to worry about */
        Status = STATUS_SUCCESS;
    }
    else
    {
        /* It is, check if we know about this app */
        if (!BaseCheckAppcompatCache(ApplicationName,
                                     FileHandle,
                                     Environment,
                                     &Reason))
        {
            if (!BaseCheckRunApp(FileHandle, ApplicationName, Environment, ExeType, &Reason,
                                SdbQueryAppCompatData, SdbQueryAppCompatDataSize, SxsData, SxsDataSize, FusionFlags))
            {
                Status = STATUS_ACCESS_DENIED;
            }
        }
    }
 
    /* Return caller the status */
    return Status;
}

Referenced by CreateProcessInternalW().

BasepFreeAppCompatData()

VOID WINAPI BasepFreeAppCompatData	(	IN PVOID	AppCompatData,
		IN PVOID	AppCompatSxsData
	)

Definition at line 342 of file appcache.c.

{
    /* Free the input pointers if present */
    if (AppCompatData) RtlFreeHeap(RtlGetProcessHeap(), 0, AppCompatData);
    if (AppCompatSxsData) RtlFreeHeap(RtlGetProcessHeap(), 0, AppCompatSxsData);
}

Referenced by BaseCheckRunApp(), and CreateProcessInternalW().

BaseUpdateAppcompatCache()

VOID WINAPI BaseUpdateAppcompatCache	(	ULONG	Unknown1,
		ULONG	Unknown2,
		ULONG	Unknown3
	)

Definition at line 355 of file appcache.c.

{
    STUB;
}

GetComPlusPackageInstallStatus()

PVOID WINAPI GetComPlusPackageInstallStatus

(

VOID

)

Definition at line 411 of file appcache.c.

{
    STUB;
    return NULL;
}

IsShimInfrastructureDisabled()

BOOLEAN WINAPI IsShimInfrastructureDisabled

(

VOID

)

Definition at line 37 of file appcache.c.

{
    HANDLE KeyHandle;
    NTSTATUS Status;
    KEY_VALUE_PARTIAL_INFORMATION KeyInfo;
    ULONG ResultLength;
    UNICODE_STRING OptionKey = RTL_CONSTANT_STRING(L"\\Registry\\MACHINE\\System\\CurrentControlSet\\Control\\SafeBoot\\Option");
    UNICODE_STRING AppCompatKey = RTL_CONSTANT_STRING(L"\\Registry\\MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\AppCompatibility");
    UNICODE_STRING PolicyKey = RTL_CONSTANT_STRING(L"\\Registry\\MACHINE\\Software\\Policies\\Microsoft\\Windows\\AppCompat");
    UNICODE_STRING OptionValue = RTL_CONSTANT_STRING(L"OptionValue");
    UNICODE_STRING DisableAppCompat = RTL_CONSTANT_STRING(L"DisableAppCompat");
    UNICODE_STRING DisableEngine = RTL_CONSTANT_STRING(L"DisableEngine");
    OBJECT_ATTRIBUTES OptionKeyAttributes = RTL_CONSTANT_OBJECT_ATTRIBUTES(&OptionKey, OBJ_CASE_INSENSITIVE);
    OBJECT_ATTRIBUTES AppCompatKeyAttributes = RTL_CONSTANT_OBJECT_ATTRIBUTES(&AppCompatKey, OBJ_CASE_INSENSITIVE);
    OBJECT_ATTRIBUTES PolicyKeyAttributes = RTL_CONSTANT_OBJECT_ATTRIBUTES(&PolicyKey, OBJ_CASE_INSENSITIVE);
 
    /*
     * This is a TROOLEAN, -1 means we haven't yet figured it out.
     * 0 means shims are enabled, and 1 means shims are disabled!
     */
    if (g_ShimsDisabled == -1)
    {
        ULONG DisableShims = FALSE;
 
        /* Open the safe mode key */
        Status = NtOpenKey(&KeyHandle, KEY_QUERY_VALUE, &OptionKeyAttributes);
        if (NT_SUCCESS(Status))
        {
            /* Check if this is safemode */
            Status = NtQueryValueKey(KeyHandle,
                                     &OptionValue,
                                     KeyValuePartialInformation,
                                     &KeyInfo,
                                     sizeof(KeyInfo),
                                     &ResultLength);
            NtClose(KeyHandle);
            if ((NT_SUCCESS(Status)) &&
                 (KeyInfo.Type == REG_DWORD) &&
                 (KeyInfo.DataLength == sizeof(ULONG)) &&
                 (KeyInfo.Data[0] != FALSE))
            {
                /* It is, so disable shims! */
                DisableShims = TRUE;
            }
        }
 
        if (!DisableShims)
        {
            /* Open the app compatibility engine settings key */
            Status = NtOpenKey(&KeyHandle, KEY_QUERY_VALUE, &AppCompatKeyAttributes);
            if (NT_SUCCESS(Status))
            {
                /* Check if the app compat engine is turned off */
                Status = NtQueryValueKey(KeyHandle,
                                         &DisableAppCompat,
                                         KeyValuePartialInformation,
                                         &KeyInfo,
                                         sizeof(KeyInfo),
                                         &ResultLength);
                NtClose(KeyHandle);
                if ((NT_SUCCESS(Status)) &&
                    (KeyInfo.Type == REG_DWORD) &&
                    (KeyInfo.DataLength == sizeof(ULONG)) &&
                    (KeyInfo.Data[0] == TRUE))
                {
                    /* It is, so disable shims! */
                    DisableShims = TRUE;
                }
            }
        }
        if (!DisableShims)
        {
            /* Finally, open the app compatibility policy key */
            Status = NtOpenKey(&KeyHandle, KEY_QUERY_VALUE, &PolicyKeyAttributes);
            if (NT_SUCCESS(Status))
            {
                /* Check if the system policy disables app compat */
                Status = NtQueryValueKey(KeyHandle,
                                         &DisableEngine,
                                         KeyValuePartialInformation,
                                         &KeyInfo,
                                         sizeof(KeyInfo),
                                         &ResultLength);
                NtClose(KeyHandle);
                if ((NT_SUCCESS(Status)) &&
                    (KeyInfo.Type == REG_DWORD) &&
                    (KeyInfo.DataLength == sizeof(ULONG)) &&
                    (KeyInfo.Data[0] == TRUE))
                {
                    /* It does, so disable shims! */
                    DisableShims = TRUE;
                }
            }
        }
        g_ShimsDisabled = DisableShims;
    }
 
    /* Return if shims are disabled or not ("Enabled == 1" means disabled!) */
    return g_ShimsDisabled ? TRUE : FALSE;
}

Referenced by BasepCheckBadapp().

SetComPlusPackageInstallStatus()

BOOL WINAPI SetComPlusPackageInstallStatus

(

LPVOID

lpInfo

)

Definition at line 422 of file appcache.c.

{
   STUB;
   return FALSE;
}

SetTermsrvAppInstallMode()

VOID WINAPI SetTermsrvAppInstallMode

(

IN BOOL

bInstallMode

)

Definition at line 433 of file appcache.c.

{
    STUB;
}

TermsrvAppInstallMode()

BOOL WINAPI TermsrvAppInstallMode

(

VOID

)

Definition at line 443 of file appcache.c.

{
    STUB;
    return FALSE;
}

Variable Documentation

g_ApphelpInitialized

BOOL g_ApphelpInitialized = FALSE

static

Definition at line 19 of file appcache.c.

Referenced by BaseCheckRunApp().

g_pApphelpCheckRunAppEx

PVOID g_pApphelpCheckRunAppEx

static

Definition at line 20 of file appcache.c.

Referenced by BaseCheckRunApp(), and BaseInitApphelp().

g_pSdbPackAppCompatData

PVOID g_pSdbPackAppCompatData

static

Definition at line 21 of file appcache.c.

Referenced by BaseCheckRunApp(), and BaseInitApphelp().

g_ShimsDisabled

ULONG g_ShimsDisabled = -1

Definition at line 18 of file appcache.c.

Referenced by IsShimInfrastructureDisabled().