objtype.c File Reference

#include <ntoskrnl.h>
#include <debug.h>

Include dependency graph for objtype.c:

Go to the source code of this file.

Macros
#define	NDEBUG

Functions
NTSTATUS	SeCaptureObjectTypeList (_In_reads_opt_(ObjectTypeListLength) POBJECT_TYPE_LIST ObjectTypeList, _In_ ULONG ObjectTypeListLength, _In_ KPROCESSOR_MODE PreviousMode, _Out_ POBJECT_TYPE_LIST *CapturedObjectTypeList)
	Captures a list of object types.
VOID	SeReleaseObjectTypeList (_In_ _Post_invalid_ POBJECT_TYPE_LIST CapturedObjectTypeList, _In_ KPROCESSOR_MODE PreviousMode)
	Releases a buffer list of object types.

Macro Definition Documentation

NDEBUG

#define NDEBUG

Definition at line 11 of file objtype.c.

Function Documentation

SeCaptureObjectTypeList()

NTSTATUS SeCaptureObjectTypeList	(	_In_reads_opt_(ObjectTypeListLength) POBJECT_TYPE_LIST	ObjectTypeList,
		_In_ ULONG	ObjectTypeListLength,
		_In_ KPROCESSOR_MODE	PreviousMode,
		_Out_ POBJECT_TYPE_LIST *	CapturedObjectTypeList
	)

Captures a list of object types.

Parameters

[in]	ObjectTypeList	An existing list of object types.
[in]	ObjectTypeListLength	The length size of the list.
[in]	PreviousMode	Processor access level mode.
[out]	CapturedObjectTypeList	The captured list of object types.

Returns

Returns STATUS_SUCCESS if the list of object types has been captured successfully. STATUS_INVALID_PARAMETER is returned if the caller hasn't supplied a buffer list of object types. STATUS_INSUFFICIENT_RESOURCES is returned if pool memory allocation for the captured list has failed.

Definition at line 39 of file objtype.c.

{
    SIZE_T Size;
 
    if (PreviousMode == KernelMode)
    {
        return STATUS_NOT_IMPLEMENTED;
    }
 
    if (ObjectTypeListLength == 0)
    {
        *CapturedObjectTypeList = NULL;
        return STATUS_SUCCESS;
    }
 
    if (ObjectTypeList == NULL)
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    /* Calculate the list size and check for integer overflow */
    Size = ObjectTypeListLength * sizeof(OBJECT_TYPE_LIST);
    if (Size == 0)
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    /* Allocate a new list */
    *CapturedObjectTypeList = ExAllocatePoolWithTag(PagedPool, Size, TAG_SEPA);
    if (*CapturedObjectTypeList == NULL)
    {
        return STATUS_INSUFFICIENT_RESOURCES;
    }
 
    _SEH2_TRY
    {
        ProbeForRead(ObjectTypeList, Size, sizeof(ULONG));
        RtlCopyMemory(*CapturedObjectTypeList, ObjectTypeList, Size);
    }
    _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
    {
        ExFreePoolWithTag(*CapturedObjectTypeList, TAG_SEPA);
        *CapturedObjectTypeList = NULL;
        _SEH2_YIELD(return _SEH2_GetExceptionCode());
    }
    _SEH2_END;
 
    return STATUS_SUCCESS;
}

Referenced by SepAccessCheckAndAuditAlarm().

SeReleaseObjectTypeList()

VOID SeReleaseObjectTypeList	(	_In_ _Post_invalid_ POBJECT_TYPE_LIST	CapturedObjectTypeList,
		_In_ KPROCESSOR_MODE	PreviousMode
	)

Releases a buffer list of object types.

Parameters

[in]	CapturedObjectTypeList	A list of object types to free.
[in]	PreviousMode	Processor access level mode.

Returns

Nothing.

Definition at line 107 of file objtype.c.

{
    if ((PreviousMode != KernelMode) && (CapturedObjectTypeList != NULL))
        ExFreePoolWithTag(CapturedObjectTypeList, TAG_SEPA);
}

Referenced by SepAccessCheckAndAuditAlarm().