#include "ex.h"

Include dependency graph for ob_x.h:

This graph shows which files directly or indirectly include this file:

Macros
#define	OBP_LOCK_STATE_PRE_ACQUISITION_EXCLUSIVE 0xAAAA1234

#define	OBP_LOCK_STATE_PRE_ACQUISITION_SHARED 0xBBBB1234

#define	OBP_LOCK_STATE_POST_ACQUISITION_EXCLUSIVE 0xCCCC1234

#define	OBP_LOCK_STATE_POST_ACQUISITION_SHARED 0xDDDD1234

#define	OBP_LOCK_STATE_RELEASED 0xEEEE1234

#define	OBP_LOCK_STATE_INITIALIZED 0xFFFF1234

#define	OBP_NAME_LOOKASIDE_MAX_SIZE 248

Functions
FORCEINLINE ULONG	ObpValidateAttributes (IN ULONG Attributes, IN KPROCESSOR_MODE PreviousMode)

FORCEINLINE ULONG	ObpSelectObjectLockSlot (IN POBJECT_HEADER ObjectHeader)

FORCEINLINE VOID	ObpAcquireObjectLock (IN POBJECT_HEADER ObjectHeader)

FORCEINLINE VOID	ObpAcquireObjectLockShared (IN POBJECT_HEADER ObjectHeader)

FORCEINLINE VOID	ObpReleaseObjectLock (IN POBJECT_HEADER ObjectHeader)

FORCEINLINE POBJECT_HEADER_NAME_INFO	ObpReferenceNameInfo (IN POBJECT_HEADER ObjectHeader)

FORCEINLINE VOID	ObpDereferenceNameInfo (IN POBJECT_HEADER_NAME_INFO HeaderNameInfo)

FORCEINLINE VOID	ObpAcquireDirectoryLockShared (IN POBJECT_DIRECTORY Directory, IN POBP_LOOKUP_CONTEXT Context)
	Locks a directory for shared access. Used for reading members of the directory object.

FORCEINLINE VOID	ObpAcquireDirectoryLockExclusive (IN POBJECT_DIRECTORY Directory, IN POBP_LOOKUP_CONTEXT Context)
	Locks a directory for exclusive access. Used for writing/reading members of the directory object.

FORCEINLINE VOID	ObpReleaseDirectoryLock (IN POBJECT_DIRECTORY Directory, IN POBP_LOOKUP_CONTEXT Context)
	Unlocks a previously shared or exclusively locked directory.

FORCEINLINE VOID	ObpInitializeLookupContext (IN POBP_LOOKUP_CONTEXT Context)
	Initializes a new object directory lookup context. Used for lookup operations (insertions/deletions) in a directory. Employed in conjunction with the directory locking functions.

FORCEINLINE VOID	ObpAcquireLookupContextLock (IN POBP_LOOKUP_CONTEXT Context, IN POBJECT_DIRECTORY Directory)
	Locks an object directory lookup context for performing lookup operations (insertions/deletions) in a directory. The directory is locked for exclusive access.

FORCEINLINE VOID	ObpReleaseLookupContextObject (IN POBP_LOOKUP_CONTEXT Context)

FORCEINLINE VOID	ObpReleaseLookupContext (IN POBP_LOOKUP_CONTEXT Context)
	Releases an initialized object directory lookup context. Unlocks it if necessary, and dereferences the underlying object.

FORCEINLINE VOID	ObpEnterObjectTypeMutex (IN POBJECT_TYPE ObjectType)

FORCEINLINE VOID	ObpLeaveObjectTypeMutex (IN POBJECT_TYPE ObjectType)

FORCEINLINE VOID	ObpReleaseObjectCreateInformation (IN POBJECT_CREATE_INFORMATION ObjectCreateInfo)

FORCEINLINE PVOID	ObpAllocateObjectCreateInfoBuffer (IN PP_NPAGED_LOOKASIDE_NUMBER Type)

FORCEINLINE VOID	ObpFreeCapturedAttributes (IN PVOID Buffer, IN PP_NPAGED_LOOKASIDE_NUMBER Type)

FORCEINLINE VOID	ObpFreeObjectCreateInformation (IN POBJECT_CREATE_INFORMATION ObjectCreateInfo)

FORCEINLINE VOID	ObpCalloutStart (IN PKIRQL CalloutIrql)

FORCEINLINE VOID	ObpCalloutEnd (IN KIRQL CalloutIrql, IN PCHAR Procedure, IN POBJECT_TYPE ObjectType, IN PVOID Object)

Macro Definition Documentation

◆ OBP_LOCK_STATE_INITIALIZED

#define OBP_LOCK_STATE_INITIALIZED 0xFFFF1234

Definition at line 16 of file ob_x.h.

◆ OBP_LOCK_STATE_POST_ACQUISITION_EXCLUSIVE

#define OBP_LOCK_STATE_POST_ACQUISITION_EXCLUSIVE 0xCCCC1234

Definition at line 13 of file ob_x.h.

◆ OBP_LOCK_STATE_POST_ACQUISITION_SHARED

#define OBP_LOCK_STATE_POST_ACQUISITION_SHARED 0xDDDD1234

Definition at line 14 of file ob_x.h.

◆ OBP_LOCK_STATE_PRE_ACQUISITION_EXCLUSIVE

#define OBP_LOCK_STATE_PRE_ACQUISITION_EXCLUSIVE 0xAAAA1234

Definition at line 11 of file ob_x.h.

◆ OBP_LOCK_STATE_PRE_ACQUISITION_SHARED

#define OBP_LOCK_STATE_PRE_ACQUISITION_SHARED 0xBBBB1234

Definition at line 12 of file ob_x.h.

◆ OBP_LOCK_STATE_RELEASED

#define OBP_LOCK_STATE_RELEASED 0xEEEE1234

Definition at line 15 of file ob_x.h.

◆ OBP_NAME_LOOKASIDE_MAX_SIZE

#define OBP_NAME_LOOKASIDE_MAX_SIZE 248

Definition at line 18 of file ob_x.h.

Function Documentation

◆ ObpAcquireDirectoryLockExclusive()

FORCEINLINE VOID ObpAcquireDirectoryLockExclusive	(	IN POBJECT_DIRECTORY	Directory,
		IN POBP_LOOKUP_CONTEXT	Context
	)

Locks a directory for exclusive access. Used for writing/reading members of the directory object.

Parameters

[in]	Directory	The directory to lock.
[in]	Context	The lookup lock context.

Definition at line 212 of file ob_x.h.

{
    /* Update lock flag */
    Context->LockStateSignature = OBP_LOCK_STATE_PRE_ACQUISITION_EXCLUSIVE;
 
    /* Acquire an exclusive directory lock */
    KeEnterCriticalRegion();
    ExAcquirePushLockExclusive(&Directory->Lock);
 
    /* Update lock flag */
    Context->LockStateSignature = OBP_LOCK_STATE_POST_ACQUISITION_EXCLUSIVE;
}

Referenced by NtSetInformationObject(), and ObpAcquireLookupContextLock().

◆ ObpAcquireDirectoryLockShared()

FORCEINLINE VOID ObpAcquireDirectoryLockShared	(	IN POBJECT_DIRECTORY	Directory,
		IN POBP_LOOKUP_CONTEXT	Context
	)

Locks a directory for shared access. Used for reading members of the directory object.

Parameters

[in]	Directory	The directory to lock.
[in]	Context	The lookup lock context.

Definition at line 185 of file ob_x.h.

{
    /* Update lock flag */
    Context->LockStateSignature = OBP_LOCK_STATE_PRE_ACQUISITION_SHARED;
 
    /* Acquire an shared directory lock */
    KeEnterCriticalRegion();
    ExAcquirePushLockShared(&Directory->Lock);
 
    /* Update lock flag */
    Context->LockStateSignature = OBP_LOCK_STATE_POST_ACQUISITION_SHARED;
}

Referenced by NtQueryDirectoryObject(), and ObpLookupEntryDirectory().

◆ ObpAcquireLookupContextLock()

FORCEINLINE VOID ObpAcquireLookupContextLock	(	IN POBP_LOOKUP_CONTEXT	Context,
		IN POBJECT_DIRECTORY	Directory
	)

Locks an object directory lookup context for performing lookup operations (insertions/deletions) in a directory. The directory is locked for exclusive access.

Parameters

[in]	Context	The lookup context to lock.
[in]	Directory	The directory on which the lookup context applies.

Definition at line 281 of file ob_x.h.

{
    /* Acquire an exclusive directory lock and save its lock state */
    ObpAcquireDirectoryLockExclusive(Directory, Context);
    Context->Directory = Directory;
    Context->DirectoryLocked = TRUE;
}

Referenced by ObCreateObjectType(), ObInitSystem(), ObpDeleteNameCheck(), and ObpLookupObjectName().

◆ ObpAcquireObjectLock()

FORCEINLINE VOID ObpAcquireObjectLock ( IN POBJECT_HEADER ObjectHeader )

Definition at line 48 of file ob_x.h.

{
    ULONG Slot;
    POBJECT_TYPE ObjectType = ObjectHeader->Type;
 
    /* Sanity check */
    ASSERT(KeGetCurrentIrql() <= APC_LEVEL);
 
    /* Pick a slot */
    Slot = ObpSelectObjectLockSlot(ObjectHeader);
 
    /* Enter a critical region and acquire the resource */
    KeEnterCriticalRegion();
    ExAcquireResourceExclusiveLite(&ObjectType->ObjectLocks[Slot], TRUE);
}

Referenced by NtQuerySymbolicLinkObject(), ObInsertObject(), ObpDecrementHandleCount(), ObpDeleteNameCheck(), ObpIncrementHandleCount(), ObpIncrementUnnamedHandleCount(), ObpSetPermanentObject(), and ObSetSecurityDescriptorInfo().

◆ ObpAcquireObjectLockShared()

FORCEINLINE VOID ObpAcquireObjectLockShared ( IN POBJECT_HEADER ObjectHeader )

Definition at line 66 of file ob_x.h.

{
    ULONG Slot;
    POBJECT_TYPE ObjectType = ObjectHeader->Type;
 
    /* Sanity check */
    ASSERT(KeGetCurrentIrql() <= APC_LEVEL);
 
    /* Pick a slot */
    Slot = ObpSelectObjectLockSlot(ObjectHeader);
 
    /* Enter a critical region and acquire the resource */
    KeEnterCriticalRegion();
    ExAcquireResourceSharedLite(&ObjectType->ObjectLocks[Slot], TRUE);
}

Referenced by ObpReferenceSecurityDescriptor().

◆ ObpAllocateObjectCreateInfoBuffer()

FORCEINLINE PVOID ObpAllocateObjectCreateInfoBuffer ( IN PP_NPAGED_LOOKASIDE_NUMBER Type )

Definition at line 379 of file ob_x.h.

{
    PVOID Buffer;
    PNPAGED_LOOKASIDE_LIST List;
    PKPRCB Prcb = KeGetCurrentPrcb();
 
    /* Get the P list first */
    List = (PNPAGED_LOOKASIDE_LIST)Prcb->PPLookasideList[Type].P;
 
    /* Attempt allocation */
    List->L.TotalAllocates++;
    Buffer = (PVOID)InterlockedPopEntrySList(&List->L.ListHead);
    if (!Buffer)
    {
        /* Let the balancer know that the P list failed */
        List->L.AllocateMisses++;
 
        /* Try the L List */
        List = (PNPAGED_LOOKASIDE_LIST)Prcb->PPLookasideList[Type].L;
        List->L.TotalAllocates++;
        Buffer = (PVOID)InterlockedPopEntrySList(&List->L.ListHead);
        if (!Buffer)
        {
            /* Let the balancer know the L list failed too */
            List->L.AllocateMisses++;
 
            /* Allocate it */
            Buffer = List->L.Allocate(List->L.Type, List->L.Size, List->L.Tag);
        }
    }
 
    /* Return buffer */
    return Buffer;
}

Referenced by ObCreateObject(), and ObpAllocateObjectNameBuffer().

◆ ObpCalloutEnd()

FORCEINLINE VOID ObpCalloutEnd	(	IN KIRQL	CalloutIrql,
		IN PCHAR	Procedure,
		IN POBJECT_TYPE	ObjectType,
		IN PVOID	Object
	)

Definition at line 505 of file ob_x.h.

{
    UNREFERENCED_PARAMETER(CalloutIrql);
}

Referenced by ObAssignSecurity(), ObGetObjectSecurity(), ObpCloseHandleTableEntry(), ObpDecrementHandleCount(), ObpDeleteObject(), ObpIncrementHandleCount(), ObpIncrementUnnamedHandleCount(), and ObpLookupObjectName().

◆ ObpCalloutStart()

FORCEINLINE VOID ObpCalloutStart ( IN PKIRQL CalloutIrql )

Definition at line 497 of file ob_x.h.

{
    /* No-op */
    UNREFERENCED_PARAMETER(CalloutIrql);
}

Referenced by ObAssignSecurity(), ObGetObjectSecurity(), ObpCloseHandleTableEntry(), ObpDecrementHandleCount(), ObpDeleteObject(), ObpIncrementHandleCount(), ObpIncrementUnnamedHandleCount(), and ObpLookupObjectName().

◆ ObpDereferenceNameInfo()

FORCEINLINE VOID ObpDereferenceNameInfo ( IN POBJECT_HEADER_NAME_INFO HeaderNameInfo )

Definition at line 143 of file ob_x.h.

{
    POBJECT_DIRECTORY Directory;
 
    /* Bail out if there's no info at all */
    if (!HeaderNameInfo) return;
 
    /* Remove a query reference and check if it was the last one */
    if (!InterlockedDecrement((PLONG)&HeaderNameInfo->QueryReferences))
    {
        /* Check if we have a name */
        if (HeaderNameInfo->Name.Buffer)
        {
            /* We can get rid of the object name now */
            ExFreePoolWithTag(HeaderNameInfo->Name.Buffer, OB_NAME_TAG);
            RtlInitEmptyUnicodeString(&HeaderNameInfo->Name, NULL, 0);
        }
 
        /* Check if the object has a directory associated to it */
        Directory = HeaderNameInfo->Directory;
        if (Directory)
        {
            /* Delete the directory */
            HeaderNameInfo->Directory = NULL;
            ObDereferenceObjectDeferDelete(Directory);
        }
    }
}

Referenced by ObInsertObject(), ObpCreateSymbolicLinkName(), ObpDeleteNameCheck(), ObpProcessDosDeviceSymbolicLink(), ObpReleaseLookupContextObject(), ObSetDeviceMap(), and ObSetDirectoryDeviceMap().

◆ ObpEnterObjectTypeMutex()

FORCEINLINE VOID ObpEnterObjectTypeMutex ( IN POBJECT_TYPE ObjectType )

Definition at line 340 of file ob_x.h.

{
    /* Sanity check */
    ASSERT(KeGetCurrentIrql() <= APC_LEVEL);
 
    /* Enter a critical region and acquire the resource */
    KeEnterCriticalRegion();
    ExAcquireResourceExclusiveLite(&ObjectType->Mutex, TRUE);
}

Referenced by ObCreateObjectType(), ObpDeleteObject(), ObpIncrementHandleCount(), ObpIncrementUnnamedHandleCount(), ObSetDeviceMap(), and ObSetDirectoryDeviceMap().

◆ ObpFreeCapturedAttributes()

FORCEINLINE VOID ObpFreeCapturedAttributes	(	IN PVOID	Buffer,
		IN PP_NPAGED_LOOKASIDE_NUMBER	Type
	)

Definition at line 416 of file ob_x.h.

{
    PNPAGED_LOOKASIDE_LIST List;
    PKPRCB Prcb = KeGetCurrentPrcb();
 
    /* Use the P List */
    List = (PNPAGED_LOOKASIDE_LIST)Prcb->PPLookasideList[Type].P;
    List->L.TotalFrees++;
 
    /* Check if the Free was within the Depth or not */
    if (ExQueryDepthSList(&List->L.ListHead) >= List->L.Depth)
    {
        /* Let the balancer know */
        List->L.FreeMisses++;
 
        /* Use the L List */
        List = (PNPAGED_LOOKASIDE_LIST)Prcb->PPLookasideList[Type].L;
        List->L.TotalFrees++;
 
        /* Check if the Free was within the Depth or not */
        if (ExQueryDepthSList(&List->L.ListHead) >= List->L.Depth)
        {
            /* All lists failed, use the pool */
            List->L.FreeMisses++;
            List->L.Free(Buffer);
        }
        else
        {
            /* The free was within the Depth */
            InterlockedPushEntrySList(&List->L.ListHead,
                                      (PSLIST_ENTRY)Buffer);
        }
    }
    else
    {
        /* The free was within the Depth */
        InterlockedPushEntrySList(&List->L.ListHead,
                                  (PSLIST_ENTRY)Buffer);
    }
}

Referenced by ObCreateObject(), ObFreeObjectCreateInfoBuffer(), ObpFreeObjectCreateInformation(), and ObpFreeObjectNameBuffer().

◆ ObpFreeObjectCreateInformation()

FORCEINLINE VOID ObpFreeObjectCreateInformation ( IN POBJECT_CREATE_INFORMATION ObjectCreateInfo )

Definition at line 460 of file ob_x.h.

{
    /* First release the attributes, then free them from the lookaside list */
    ObpReleaseObjectCreateInformation(ObjectCreateInfo);
    ObpFreeCapturedAttributes(ObjectCreateInfo, LookasideCreateInfoList);
}

Referenced by ObCreateObject(), ObDeleteCapturedInsertInfo(), ObInsertObject(), ObOpenObjectByName(), and ObpDeallocateObject().

◆ ObpInitializeLookupContext()

FORCEINLINE VOID ObpInitializeLookupContext ( IN POBP_LOOKUP_CONTEXT Context )

Initializes a new object directory lookup context. Used for lookup operations (insertions/deletions) in a directory. Employed in conjunction with the directory locking functions.

Parameters

[in] Context The new lookup context to initialize.

Definition at line 258 of file ob_x.h.

{
    /* Initialize a null context */
    Context->Object = NULL;
    Context->Directory = NULL;
    Context->DirectoryLocked = FALSE;
    Context->LockStateSignature = OBP_LOCK_STATE_INITIALIZED;
}

Referenced by NtQueryDirectoryObject(), NtSetInformationObject(), ObCreateObjectType(), ObInitSystem(), ObInsertObject(), ObpDeleteNameCheck(), ObpLookupObjectName(), and ObpProcessDosDeviceSymbolicLink().

◆ ObpLeaveObjectTypeMutex()

FORCEINLINE VOID ObpLeaveObjectTypeMutex ( IN POBJECT_TYPE ObjectType )

Definition at line 352 of file ob_x.h.

{
    /* Enter a critical region and acquire the resource */
    ExReleaseResourceLite(&ObjectType->Mutex);
    KeLeaveCriticalRegion();
 
    /* Sanity check */
    ASSERT(KeGetCurrentIrql() <= APC_LEVEL);
}

Referenced by ObCreateObjectType(), ObpDeleteObject(), ObpIncrementHandleCount(), ObpIncrementUnnamedHandleCount(), ObSetDeviceMap(), and ObSetDirectoryDeviceMap().

◆ ObpReferenceNameInfo()

FORCEINLINE POBJECT_HEADER_NAME_INFO ObpReferenceNameInfo ( IN POBJECT_HEADER ObjectHeader )

Definition at line 102 of file ob_x.h.

{
    POBJECT_HEADER_NAME_INFO ObjectNameInfo;
    ULONG NewValue, References;
 
    /* Make sure we have name information at all */
    ObjectNameInfo = OBJECT_HEADER_TO_NAME_INFO(ObjectHeader);
    if (!ObjectNameInfo) return NULL;
 
    /* Get the number of references */
    References = ObjectNameInfo->QueryReferences;
    for (;;)
    {
        /* Check if the count is 0 and fail if so */
        if (!References) return NULL;
 
        /* Increment the number of references */
        NewValue = InterlockedCompareExchange((PLONG)&ObjectNameInfo->
                                              QueryReferences,
                                              References + 1,
                                              References);
        if (NewValue == References) break;
 
        /* We failed, try again */
        References = NewValue;
    }
 
    /* Check for magic flag */
    if (ObjectNameInfo->QueryReferences & 0x80000000)
    {
        /* FIXME: Unhandled*/
        DbgPrint("OB: Unhandled path\n");
        ASSERT(FALSE);
    }
 
    /* Return the name information */
    return ObjectNameInfo;
}

Referenced by ObInsertObject(), ObpCreateSymbolicLinkName(), ObpDeleteNameCheck(), ObpLookupEntryDirectory(), ObpProcessDosDeviceSymbolicLink(), ObSetDeviceMap(), and ObSetDirectoryDeviceMap().

◆ ObpReleaseDirectoryLock()

FORCEINLINE VOID ObpReleaseDirectoryLock	(	IN POBJECT_DIRECTORY	Directory,
		IN POBP_LOOKUP_CONTEXT	Context
	)

Unlocks a previously shared or exclusively locked directory.

Parameters

[in]	Directory	The directory to unlock.
[in]	Context	The lookup lock context.

Definition at line 238 of file ob_x.h.

{
    /* Release the lock */
    ExReleasePushLock(&Directory->Lock);
    Context->LockStateSignature = OBP_LOCK_STATE_RELEASED;
    KeLeaveCriticalRegion();
}

Referenced by NtQueryDirectoryObject(), NtSetInformationObject(), ObpLookupEntryDirectory(), and ObpReleaseLookupContext().

◆ ObpReleaseLookupContext()

FORCEINLINE VOID ObpReleaseLookupContext ( IN POBP_LOOKUP_CONTEXT Context )

Releases an initialized object directory lookup context. Unlocks it if necessary, and dereferences the underlying object.

Parameters

[in] Context The lookup context to release.

Definition at line 323 of file ob_x.h.

{
    /* Check if we came back with the directory locked */
    if (Context->DirectoryLocked)
    {
        /* Release the directory lock */
        ObpReleaseDirectoryLock(Context->Directory, Context);
        Context->Directory = NULL;
        Context->DirectoryLocked = FALSE;
    }
 
    /* Clear the context */
    ObpReleaseLookupContextObject(Context);
}

Referenced by NtSetInformationObject(), ObCreateObjectType(), ObInitSystem(), ObInsertObject(), ObOpenObjectByName(), ObpCreateHandle(), ObpDeleteNameCheck(), ObpLookupObjectName(), ObpProcessDosDeviceSymbolicLink(), and ObReferenceObjectByName().

◆ ObpReleaseLookupContextObject()

FORCEINLINE VOID ObpReleaseLookupContextObject ( IN POBP_LOOKUP_CONTEXT Context )

Definition at line 292 of file ob_x.h.

{
    POBJECT_HEADER ObjectHeader;
    POBJECT_HEADER_NAME_INFO HeaderNameInfo;
 
    /* Check if we had an object */
    if (Context->Object)
    {
        /* Get the object name information */
        ObjectHeader = OBJECT_TO_OBJECT_HEADER(Context->Object);
        HeaderNameInfo = OBJECT_HEADER_TO_NAME_INFO(ObjectHeader);
 
        /* Release the name information */
        ObpDereferenceNameInfo(HeaderNameInfo);
 
        /* Dereference the object */
        ObDereferenceObject(Context->Object);
        Context->Object = NULL;
    }
}

Referenced by ObpLookupEntryDirectory(), and ObpReleaseLookupContext().

◆ ObpReleaseObjectCreateInformation()

FORCEINLINE VOID ObpReleaseObjectCreateInformation ( IN POBJECT_CREATE_INFORMATION ObjectCreateInfo )

Definition at line 364 of file ob_x.h.

{
    /* Check if we have a security descriptor */
    if (ObjectCreateInfo->SecurityDescriptor)
    {
        /* Release it */
        SeReleaseSecurityDescriptor(ObjectCreateInfo->SecurityDescriptor,
                                    ObjectCreateInfo->ProbeMode,
                                    TRUE);
        ObjectCreateInfo->SecurityDescriptor = NULL;
    }
}

Referenced by ObOpenObjectByName(), ObpCaptureObjectCreateInformation(), and ObpFreeObjectCreateInformation().

◆ ObpReleaseObjectLock()

FORCEINLINE VOID ObpReleaseObjectLock ( IN POBJECT_HEADER ObjectHeader )

Definition at line 84 of file ob_x.h.

{
    ULONG Slot;
    POBJECT_TYPE ObjectType = ObjectHeader->Type;
 
    /* Pick a slot */
    Slot = ObpSelectObjectLockSlot(ObjectHeader);
 
    /* Release the resource and leave a critical region */
    ExReleaseResourceLite(&ObjectType->ObjectLocks[Slot]);
    KeLeaveCriticalRegion();
 
    /* Sanity check */
    ASSERT(KeGetCurrentIrql() <= APC_LEVEL);
}

Referenced by NtQuerySymbolicLinkObject(), ObInsertObject(), ObpDecrementHandleCount(), ObpDeleteNameCheck(), ObpIncrementHandleCount(), ObpIncrementUnnamedHandleCount(), ObpReferenceSecurityDescriptor(), ObpSetPermanentObject(), and ObSetSecurityDescriptorInfo().

◆ ObpSelectObjectLockSlot()

FORCEINLINE ULONG ObpSelectObjectLockSlot ( IN POBJECT_HEADER ObjectHeader )

Definition at line 40 of file ob_x.h.

{
    /* We have 4 locks total, this will return a 0-index slot */
    return (((ULONG_PTR)ObjectHeader) >> 8) & 3;
}

Referenced by ObpAcquireObjectLock(), ObpAcquireObjectLockShared(), and ObpReleaseObjectLock().

◆ ObpValidateAttributes()

FORCEINLINE ULONG ObpValidateAttributes	(	IN ULONG	Attributes,
		IN KPROCESSOR_MODE	PreviousMode
	)

Definition at line 22 of file ob_x.h.

{
    if (PreviousMode == KernelMode)
    {
        /* For kernel, allow any valid attributes */
        return Attributes & OBJ_VALID_KERNEL_ATTRIBUTES;
    }
    else
    {
        /* For user, mask out kernel-only attributes */
        return (Attributes & OBJ_VALID_ATTRIBUTES) &
               ~(OBJ_KERNEL_HANDLE);
    }
}

Referenced by NtOpenProcess(), NtOpenProcessTokenEx(), NtOpenThread(), NtOpenThreadTokenEx(), and ProbeAndCaptureObjectAttributes().

Macros

Functions

Macro Definition Documentation

◆ OBP_LOCK_STATE_INITIALIZED

◆ OBP_LOCK_STATE_POST_ACQUISITION_EXCLUSIVE

◆ OBP_LOCK_STATE_POST_ACQUISITION_SHARED

◆ OBP_LOCK_STATE_PRE_ACQUISITION_EXCLUSIVE

◆ OBP_LOCK_STATE_PRE_ACQUISITION_SHARED

◆ OBP_LOCK_STATE_RELEASED

◆ OBP_NAME_LOOKASIDE_MAX_SIZE

Function Documentation

◆ ObpAcquireDirectoryLockExclusive()

◆ ObpAcquireDirectoryLockShared()

◆ ObpAcquireLookupContextLock()

◆ ObpAcquireObjectLock()

◆ ObpAcquireObjectLockShared()

◆ ObpAllocateObjectCreateInfoBuffer()

◆ ObpCalloutEnd()

◆ ObpCalloutStart()

◆ ObpDereferenceNameInfo()

◆ ObpEnterObjectTypeMutex()

◆ ObpFreeCapturedAttributes()

◆ ObpFreeObjectCreateInformation()

◆ ObpInitializeLookupContext()

◆ ObpLeaveObjectTypeMutex()

◆ ObpReferenceNameInfo()

◆ ObpReleaseDirectoryLock()

◆ ObpReleaseLookupContext()

◆ ObpReleaseLookupContextObject()

◆ ObpReleaseObjectCreateInformation()

◆ ObpReleaseObjectLock()

◆ ObpSelectObjectLockSlot()

◆ ObpValidateAttributes()