kmtest_drv.c File Reference

#include <ntddk.h>
#include <ntifs.h>
#include <ndk/ketypes.h>
#include <ntstrsafe.h>
#include <limits.h>
#include <pseh/pseh2.h>
#include <debug.h>
#include <kmt_public.h>
#include <kmt_test.h>

Include dependency graph for kmtest_drv.c:

Go to the source code of this file.

Classes
struct	_KMT_USER_WORK_ENTRY
struct	_KMT_USER_WORK_LIST

Macros
#define	NDEBUG
#define	KMT_DEFINE_TEST_FUNCTIONS

Typedefs
typedef struct _KMT_USER_WORK_ENTRY	KMT_USER_WORK_ENTRY
typedef struct _KMT_USER_WORK_ENTRY *	PKMT_USER_WORK_ENTRY
typedef struct _KMT_USER_WORK_LIST	KMT_USER_WORK_LIST
typedef struct _KMT_USER_WORK_LIST *	PKMT_USER_WORK_LIST

Functions
BOOLEAN	KmtDetectVirtualMachine (VOID)
DriverUnload
Driver cleanup funtion. Parameters DriverObject Driver Object
static VOID NTAPI	DriverUnload (IN PDRIVER_OBJECT DriverObject)
DriverCreate
Driver Dispatch function for IRP_MJ_CREATE Parameters DeviceObject Device Object Irp I/O request packet Returns Status
static NTSTATUS NTAPI	DriverCreate (IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp)
DriverCleanup
Driver Dispatch function for IRP_MJ_CLEANUP Parameters DeviceObject Device Object Irp I/O request packet Returns Status
static NTSTATUS NTAPI	DriverCleanup (IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp)
DriverClose
Driver Dispatch function for IRP_MJ_CLOSE Parameters DeviceObject Device Object Irp I/O request packet Returns Status
static NTSTATUS NTAPI	DriverClose (IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp)
DriverIoControl
Driver Dispatch function for IRP_MJ_DEVICE_CONTROL Parameters DeviceObject Device Object Irp I/O request packet Returns Status
static NTSTATUS NTAPI	DriverIoControl (IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp)
KmtUserModeCallback
Enqueue a request to the usermode callback queue and blocks until the work is finished. Parameters Operation TODO Parameters TODO TODO: why is this PVOID? Returns Response from user mode
PKMT_RESPONSE	KmtUserModeCallback (IN KMT_CALLBACK_INFORMATION_CLASS Operation, IN PVOID Parameters)
KmtFreeCallbackResponse
TODO Parameters Response TODO
VOID	KmtFreeCallbackResponse (PKMT_RESPONSE Response)
KmtCleanUsermodeCallbacks
TODO
static VOID	KmtCleanUsermodeCallbacks (VOID)

Variables
DRIVER_INITIALIZE	DriverEntry
static DRIVER_UNLOAD	DriverUnload

Macro Definition Documentation

KMT_DEFINE_TEST_FUNCTIONS

#define KMT_DEFINE_TEST_FUNCTIONS

Definition at line 20 of file kmtest_drv.c.

NDEBUG

#define NDEBUG

Definition at line 16 of file kmtest_drv.c.

Typedef Documentation

KMT_USER_WORK_ENTRY

typedef struct _KMT_USER_WORK_ENTRY KMT_USER_WORK_ENTRY

KMT_USER_WORK_LIST

typedef struct _KMT_USER_WORK_LIST KMT_USER_WORK_LIST

PKMT_USER_WORK_ENTRY

typedef struct _KMT_USER_WORK_ENTRY * PKMT_USER_WORK_ENTRY

PKMT_USER_WORK_LIST

typedef struct _KMT_USER_WORK_LIST * PKMT_USER_WORK_LIST

Function Documentation

DriverCleanup()

static NTSTATUS NTAPI DriverCleanup ( IN PDEVICE_OBJECT  DeviceObject, IN PIRP  Irp  )

static

Definition at line 222 of file kmtest_drv.c.

{
    NTSTATUS Status = STATUS_SUCCESS;
    PIO_STACK_LOCATION IoStackLocation;
    PKMT_DEVICE_EXTENSION DeviceExtension;
 
    PAGED_CODE();
 
    IoStackLocation = IoGetCurrentIrpStackLocation(Irp);
 
    DPRINT("DriverCleanup. DeviceObject=%p, RequestorMode=%d, FileObject=%p, FsContext=%p, FsContext2=%p\n",
             DeviceObject, Irp->RequestorMode, IoStackLocation->FileObject,
             IoStackLocation->FileObject->FsContext, IoStackLocation->FileObject->FsContext2);
 
    ASSERT(IoStackLocation->FileObject->FsContext2 == NULL);
    DeviceExtension = DeviceObject->DeviceExtension;
    if (DeviceExtension->Mdl && IoStackLocation->FileObject->FsContext == DeviceExtension->Mdl)
    {
        MmUnlockPages(DeviceExtension->Mdl);
        IoFreeMdl(DeviceExtension->Mdl);
        DeviceExtension->Mdl = NULL;
        ResultBuffer = DeviceExtension->ResultBuffer = NULL;
    }
    else
    {
        ASSERT(IoStackLocation->FileObject->FsContext == NULL);
    }
 
    Irp->IoStatus.Status = Status;
    Irp->IoStatus.Information = 0;
 
    IoCompleteRequest(Irp, IO_NO_INCREMENT);
 
    return Status;
}

DriverClose()

static NTSTATUS NTAPI DriverClose ( IN PDEVICE_OBJECT  DeviceObject, IN PIRP  Irp  )

static

Definition at line 275 of file kmtest_drv.c.

{
    NTSTATUS Status = STATUS_SUCCESS;
 
    PAGED_CODE();
 
    DPRINT("DriverClose. DeviceObject=%p, RequestorMode=%d\n",
             DeviceObject, Irp->RequestorMode);
 
    Irp->IoStatus.Status = Status;
    Irp->IoStatus.Information = 0;
 
    IoCompleteRequest(Irp, IO_NO_INCREMENT);
 
    return Status;
}

DriverCreate()

static NTSTATUS NTAPI DriverCreate ( IN PDEVICE_OBJECT  DeviceObject, IN PIRP  Irp  )

static

Definition at line 184 of file kmtest_drv.c.

{
    NTSTATUS Status = STATUS_SUCCESS;
    PIO_STACK_LOCATION IoStackLocation;
 
    PAGED_CODE();
 
    IoStackLocation = IoGetCurrentIrpStackLocation(Irp);
 
    DPRINT("DriverCreate. DeviceObject=%p, RequestorMode=%d, FileObject=%p, FsContext=%p, FsContext2=%p\n",
             DeviceObject, Irp->RequestorMode, IoStackLocation->FileObject,
             IoStackLocation->FileObject->FsContext, IoStackLocation->FileObject->FsContext2);
 
    Irp->IoStatus.Status = Status;
    Irp->IoStatus.Information = 0;
 
    IoCompleteRequest(Irp, IO_NO_INCREMENT);
 
    return Status;
}

DriverIoControl()

static NTSTATUS NTAPI DriverIoControl ( IN PDEVICE_OBJECT  DeviceObject, IN PIRP  Irp  )

static

Definition at line 309 of file kmtest_drv.c.

{
    NTSTATUS Status = STATUS_SUCCESS;
    PIO_STACK_LOCATION IoStackLocation;
    SIZE_T Length = 0;
 
    PAGED_CODE();
 
    IoStackLocation = IoGetCurrentIrpStackLocation(Irp);
 
    DPRINT("DriverIoControl. Code=0x%08X, DeviceObject=%p, FileObject=%p, FsContext=%p, FsContext2=%p\n",
             IoStackLocation->Parameters.DeviceIoControl.IoControlCode,
             DeviceObject, IoStackLocation->FileObject,
             IoStackLocation->FileObject->FsContext, IoStackLocation->FileObject->FsContext2);
 
    switch (IoStackLocation->Parameters.DeviceIoControl.IoControlCode)
    {
        case IOCTL_KMTEST_GET_TESTS:
        {
            PCKMT_TEST TestEntry;
            LPSTR OutputBuffer = Irp->AssociatedIrp.SystemBuffer;
            size_t Remaining = IoStackLocation->Parameters.DeviceIoControl.OutputBufferLength;
 
            DPRINT("DriverIoControl. IOCTL_KMTEST_GET_TESTS, outlen=%lu\n",
                     IoStackLocation->Parameters.DeviceIoControl.OutputBufferLength);
 
            for (TestEntry = TestList; TestEntry->TestName; ++TestEntry)
            {
                RtlStringCbCopyExA(OutputBuffer, Remaining, TestEntry->TestName, &OutputBuffer, &Remaining, 0);
                if (Remaining)
                {
                    *OutputBuffer++ = '\0';
                    --Remaining;
                }
            }
            if (Remaining)
            {
                *OutputBuffer++ = '\0';
                --Remaining;
            }
            Length = IoStackLocation->Parameters.DeviceIoControl.OutputBufferLength - Remaining;
            break;
        }
        case IOCTL_KMTEST_RUN_TEST:
        {
            ANSI_STRING TestName;
            PCKMT_TEST TestEntry;
 
            DPRINT("DriverIoControl. IOCTL_KMTEST_RUN_TEST, inlen=%lu, outlen=%lu\n",
                     IoStackLocation->Parameters.DeviceIoControl.InputBufferLength,
                     IoStackLocation->Parameters.DeviceIoControl.OutputBufferLength);
            TestName.Length = TestName.MaximumLength = (USHORT)min(IoStackLocation->Parameters.DeviceIoControl.InputBufferLength, USHRT_MAX);
            TestName.Buffer = Irp->AssociatedIrp.SystemBuffer;
            DPRINT("DriverIoControl. Run test: %Z\n", &TestName);
 
            for (TestEntry = TestList; TestEntry->TestName; ++TestEntry)
            {
                ANSI_STRING EntryName;
                if (TestEntry->TestName[0] == '-')
                    RtlInitAnsiString(&EntryName, TestEntry->TestName + 1);
                else
                    RtlInitAnsiString(&EntryName, TestEntry->TestName);
 
                if (!RtlCompareString(&TestName, &EntryName, FALSE))
                {
                    DPRINT1("DriverIoControl. Starting test %Z\n", &EntryName);
                    TestEntry->TestFunction();
                    DPRINT1("DriverIoControl. Finished test %Z\n", &EntryName);
                    break;
                }
            }
 
            if (!TestEntry->TestName)
                Status = STATUS_OBJECT_NAME_INVALID;
 
            break;
        }
        case IOCTL_KMTEST_SET_RESULTBUFFER:
        {
            PKMT_DEVICE_EXTENSION DeviceExtension = DeviceObject->DeviceExtension;
 
            DPRINT("DriverIoControl. IOCTL_KMTEST_SET_RESULTBUFFER, buffer=%p, inlen=%lu, outlen=%lu\n",
                    IoStackLocation->Parameters.DeviceIoControl.Type3InputBuffer,
                    IoStackLocation->Parameters.DeviceIoControl.InputBufferLength,
                    IoStackLocation->Parameters.DeviceIoControl.OutputBufferLength);
 
            if (DeviceExtension->Mdl)
            {
                if (IoStackLocation->FileObject->FsContext != DeviceExtension->Mdl)
                {
                    Status = STATUS_ACCESS_DENIED;
                    break;
                }
                MmUnlockPages(DeviceExtension->Mdl);
                IoFreeMdl(DeviceExtension->Mdl);
                IoStackLocation->FileObject->FsContext = NULL;
                ResultBuffer = DeviceExtension->ResultBuffer = NULL;
            }
 
            DeviceExtension->Mdl = IoAllocateMdl(IoStackLocation->Parameters.DeviceIoControl.Type3InputBuffer,
                                                    IoStackLocation->Parameters.DeviceIoControl.InputBufferLength,
                                                    FALSE, FALSE, NULL);
            if (!DeviceExtension->Mdl)
            {
                Status = STATUS_INSUFFICIENT_RESOURCES;
                break;
            }
 
            _SEH2_TRY
            {
                MmProbeAndLockPages(DeviceExtension->Mdl, UserMode, IoModifyAccess);
            }
            _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
            {
                Status = _SEH2_GetExceptionCode();
                IoFreeMdl(DeviceExtension->Mdl);
                DeviceExtension->Mdl = NULL;
                break;
            } _SEH2_END;
 
            ResultBuffer = DeviceExtension->ResultBuffer = MmGetSystemAddressForMdlSafe(DeviceExtension->Mdl, NormalPagePriority);
            IoStackLocation->FileObject->FsContext = DeviceExtension->Mdl;
 
            DPRINT("DriverIoControl. ResultBuffer: %ld %ld %ld %ld\n",
                    ResultBuffer->Successes, ResultBuffer->Failures,
                    ResultBuffer->LogBufferLength, ResultBuffer->LogBufferMaxLength);
            break;
        }
        case IOCTL_KMTEST_USERMODE_AWAIT_REQ:
        {
            PLIST_ENTRY Entry;
            PKMT_USER_WORK_ENTRY WorkItem;
 
            DPRINT("DriverIoControl. IOCTL_KMTEST_USERMODE_AWAIT_REQ, len=%lu\n",
                    IoStackLocation->Parameters.DeviceIoControl.OutputBufferLength);
 
            /* TODO: prevent multiple concurrent invocations */
            Status = KeWaitForSingleObject(&WorkList.NewWorkEvent, UserRequest, UserMode, FALSE, NULL);
            if (Status == STATUS_USER_APC || Status == STATUS_KERNEL_APC)
                break;
 
            if (IoStackLocation->Parameters.DeviceIoControl.OutputBufferLength < sizeof(KMT_CALLBACK_REQUEST_PACKET))
            {
                Status = STATUS_INVALID_BUFFER_SIZE;
                break;
            }
 
            ASSERT(!IsListEmpty(&WorkList.ListHead));
 
            Entry = WorkList.ListHead.Flink;
            WorkItem = CONTAINING_RECORD(Entry, KMT_USER_WORK_ENTRY, ListEntry);
 
            Length = sizeof(WorkItem->Request);
            RtlCopyMemory(Irp->AssociatedIrp.SystemBuffer, &WorkItem->Request, Length);
            Status = STATUS_SUCCESS;
 
            KeClearEvent(&WorkList.NewWorkEvent);
            break;
 
        }
        case IOCTL_KMTEST_USERMODE_SEND_RESPONSE:
        {
            PLIST_ENTRY Entry;
            PKMT_USER_WORK_ENTRY WorkEntry;
            PVOID Response;
            ULONG ResponseSize = IoStackLocation->Parameters.DeviceIoControl.OutputBufferLength;
 
            DPRINT("DriverIoControl. IOCTL_KMTEST_USERMODE_SEND_RESPONSE, inlen=%lu, outlen=%lu\n",
                    IoStackLocation->Parameters.DeviceIoControl.InputBufferLength,
                    IoStackLocation->Parameters.DeviceIoControl.OutputBufferLength);
 
            if (IoStackLocation->Parameters.DeviceIoControl.InputBufferLength != sizeof(ULONG) || ResponseSize != sizeof(KMT_RESPONSE))
            {
                Status = STATUS_INVALID_BUFFER_SIZE;
                break;
            }
 
            /* FIXME: don't misuse the output buffer as an input! */
            Response = MmGetSystemAddressForMdlSafe(Irp->MdlAddress, NormalPagePriority);
            if (Response == NULL)
            {
                Status = STATUS_INSUFFICIENT_RESOURCES;
                break;
            }
 
            ExAcquireFastMutex(&WorkList.Lock);
 
            Status = STATUS_OBJECTID_NOT_FOUND;
 
            Entry = WorkList.ListHead.Flink;
            while (Entry != &WorkList.ListHead)
            {
                WorkEntry = CONTAINING_RECORD(Entry, KMT_USER_WORK_ENTRY, ListEntry);
                if (WorkEntry->Request.RequestId == *(PULONG)Irp->AssociatedIrp.SystemBuffer)
                {
                    WorkEntry->Response = ExAllocatePoolWithTag(PagedPool, sizeof(KMT_RESPONSE), 'pseR');
                    if (WorkEntry->Response == NULL)
                    {
                        Status = STATUS_INSUFFICIENT_RESOURCES;
                        break;
                    }
 
                    RtlCopyMemory(WorkEntry->Response, Response, ResponseSize);
                    KeSetEvent(&WorkEntry->WorkDoneEvent, IO_NO_INCREMENT, FALSE);
                    Status = STATUS_SUCCESS;
                    break;
                }
 
                Entry = Entry->Flink;
            }
 
            ExReleaseFastMutex(&WorkList.Lock);
 
            break;
        }
        default:
            DPRINT1("DriverIoControl. Invalid IoCtl code 0x%08X\n",
                     IoStackLocation->Parameters.DeviceIoControl.IoControlCode);
            Status = STATUS_INVALID_DEVICE_REQUEST;
            break;
    }
 
    Irp->IoStatus.Status = Status;
    Irp->IoStatus.Information = Length;
 
    IoCompleteRequest(Irp, IO_NO_INCREMENT);
 
    return Status;
}

DriverUnload()

static VOID NTAPI DriverUnload ( IN PDRIVER_OBJECT  DriverObject )

static

Definition at line 146 of file kmtest_drv.c.

{
    PAGED_CODE();
 
    UNREFERENCED_PARAMETER(DriverObject);
 
    DPRINT("DriverUnload\n");
 
    KmtCleanUsermodeCallbacks();
 
    if (MainDeviceObject)
    {
#if DBG
        PKMT_DEVICE_EXTENSION DeviceExtension = MainDeviceObject->DeviceExtension;
        ASSERT(!DeviceExtension->Mdl);
        ASSERT(!DeviceExtension->ResultBuffer);
#endif
        ASSERT(!ResultBuffer);
        IoDeleteDevice(MainDeviceObject);
    }
}

KmtCleanUsermodeCallbacks()

static VOID KmtCleanUsermodeCallbacks ( VOID  )

static

Definition at line 626 of file kmtest_drv.c.

{
    PLIST_ENTRY Entry;
 
    PAGED_CODE();
 
    ExAcquireFastMutex(&WorkList.Lock);
 
    Entry = WorkList.ListHead.Flink;
    while (Entry != &WorkList.ListHead)
    {
        PKMT_USER_WORK_ENTRY WorkEntry = CONTAINING_RECORD(Entry, KMT_USER_WORK_ENTRY, ListEntry);
        if (WorkEntry->Response != NULL)
        {
            KmtFreeCallbackResponse(WorkEntry->Response);
        }
 
        Entry = Entry->Flink;
 
        ExFreePoolWithTag(WorkEntry, 'ekrW');
    }
 
    ExReleaseFastMutex(&WorkList.Lock);
}

Referenced by DriverUnload().

KmtDetectVirtualMachine()

BOOLEAN KmtDetectVirtualMachine

(

VOID

)

Definition at line 54 of file vm_detect.c.

{
#if defined(_M_IX86) || defined(_M_AMD64)
    return VmIsHypervisorPresent() || VmIsVbox() || VmIsVMware();
#else
    return FALSE;
#endif
}

KmtFreeCallbackResponse()

VOID KmtFreeCallbackResponse

(

PKMT_RESPONSE

Response

)

Definition at line 611 of file kmtest_drv.c.

{
    PAGED_CODE();
 
    ExFreePoolWithTag(Response, 'pseR');
}

Referenced by KmtCleanUsermodeCallbacks().

KmtUserModeCallback()

PKMT_RESPONSE KmtUserModeCallback	(	IN KMT_CALLBACK_INFORMATION_CLASS	Operation,
		IN PVOID	Parameters
	)

Definition at line 556 of file kmtest_drv.c.

{
    PKMT_RESPONSE Result;
    NTSTATUS Status;
    PKMT_USER_WORK_ENTRY WorkEntry;
    LARGE_INTEGER Timeout;
 
    PAGED_CODE();
 
    WorkEntry = ExAllocatePoolWithTag(PagedPool, sizeof(KMT_USER_WORK_ENTRY), 'ekrW');
    if (WorkEntry == NULL)
        return NULL;
 
    KeInitializeEvent(&WorkEntry->WorkDoneEvent, NotificationEvent, FALSE);
    WorkEntry->Request.RequestId = RequestId++;
    WorkEntry->Request.OperationClass = Operation;
    WorkEntry->Request.Parameters = Parameters;
    WorkEntry->Response = NULL;
 
    ExAcquireFastMutex(&WorkList.Lock);
    InsertTailList(&WorkList.ListHead, &WorkEntry->ListEntry);
    ExReleaseFastMutex(&WorkList.Lock);
 
    KeSetEvent(&WorkList.NewWorkEvent, IO_NO_INCREMENT, FALSE);
 
    Timeout.QuadPart = -10 * 1000 * 1000 * 10; //wait for 10 seconds
    Status = KeWaitForSingleObject(&WorkEntry->WorkDoneEvent, Executive, UserMode, FALSE, &Timeout);
 
    if (Status == STATUS_USER_APC || Status == STATUS_KERNEL_APC || Status == STATUS_TIMEOUT)
    {
        DPRINT1("Unexpected callback abortion! Reason: %lx\n", Status);
    }
 
    ExAcquireFastMutex(&WorkList.Lock);
    RemoveEntryList(&WorkEntry->ListEntry);
    ExReleaseFastMutex(&WorkList.Lock);
 
    Result = WorkEntry->Response;
 
    ExFreePoolWithTag(WorkEntry, 'ekrW');
 
    return Result;
}

Variable Documentation

DriverEntry

DRIVER_INITIALIZE DriverEntry

Definition at line 44 of file kmtest_drv.c.

DriverUnload

DRIVER_UNLOAD DriverUnload

static

Definition at line 45 of file kmtest_drv.c.