bootlog.c File Reference

#include <ntoskrnl.h>
#include <debug.h>

Include dependency graph for bootlog.c:

Go to the source code of this file.

Macros
#define	NDEBUG

Functions
VOID	IopInitBootLog (BOOLEAN StartBootLog)
VOID	IopStartBootLog (VOID)
VOID	IopStopBootLog (VOID)
VOID	IopBootLog (PUNICODE_STRING DriverName, BOOLEAN Success)
static NTSTATUS	IopWriteLogFile (PWSTR LogText)
static NTSTATUS	IopCreateLogFile (VOID)
VOID	IopSaveBootLogToFile (VOID)

Variables
static BOOLEAN	IopBootLogCreate = FALSE
static BOOLEAN	IopBootLogEnabled = FALSE
static BOOLEAN	IopLogFileEnabled = FALSE
static ULONG	IopLogEntryCount = 0
static ERESOURCE	IopBootLogResource

Macro Definition Documentation

NDEBUG

#define NDEBUG

Definition at line 13 of file bootlog.c.

Function Documentation

IopBootLog()

VOID IopBootLog	(	PUNICODE_STRING	DriverName,
		BOOLEAN	Success
	)

Definition at line 53 of file bootlog.c.

{
    OBJECT_ATTRIBUTES ObjectAttributes;
    WCHAR Buffer[256];
    WCHAR ValueNameBuffer[8];
    UNICODE_STRING KeyName;
    UNICODE_STRING ValueName;
    HANDLE ControlSetKey;
    HANDLE BootLogKey;
    NTSTATUS Status;
 
    if (IopBootLogEnabled == FALSE)
        return;
 
    ExAcquireResourceExclusiveLite(&IopBootLogResource, TRUE);
 
    DPRINT("Boot log: %wS %wZ\n",
           Success ? L"Loaded driver" : L"Did not load driver",
           DriverName);
 
    _swprintf(Buffer,
              L"%ws %wZ",
              Success ? L"Loaded driver" : L"Did not load driver",
              DriverName);
 
    _swprintf(ValueNameBuffer, L"%lu", IopLogEntryCount);
 
    RtlInitUnicodeString(&KeyName,
                         L"\\Registry\\Machine\\System\\CurrentControlSet");
    InitializeObjectAttributes(&ObjectAttributes,
                               &KeyName,
                               OBJ_CASE_INSENSITIVE,
                               NULL,
                               NULL);
    Status = ZwOpenKey(&ControlSetKey,
                       KEY_ALL_ACCESS,
                       &ObjectAttributes);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("ZwOpenKey() failed (Status %lx)\n", Status);
        ExReleaseResourceLite(&IopBootLogResource);
        return;
    }
 
    RtlInitUnicodeString(&KeyName, L"BootLog");
    InitializeObjectAttributes(&ObjectAttributes,
                               &KeyName,
                               OBJ_CASE_INSENSITIVE | OBJ_OPENIF,
                               ControlSetKey,
                               NULL);
    Status = ZwCreateKey(&BootLogKey,
                         KEY_ALL_ACCESS,
                         &ObjectAttributes,
                         0,
                         NULL,
                         REG_OPTION_NON_VOLATILE,
                         NULL);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("ZwCreateKey() failed (Status %lx)\n", Status);
        ZwClose(ControlSetKey);
        ExReleaseResourceLite(&IopBootLogResource);
        return;
    }
 
    RtlInitUnicodeString(&ValueName, ValueNameBuffer);
    Status = ZwSetValueKey(BootLogKey,
                           &ValueName,
                           0,
                           REG_SZ,
                           (PVOID)Buffer,
                           (ULONG)(wcslen(Buffer) + 1) * sizeof(WCHAR));
    ZwClose(BootLogKey);
    ZwClose(ControlSetKey);
 
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("NtSetValueKey() failed (Status %lx)\n", Status);
    }
    else
    {
        IopLogEntryCount++;
    }
 
    ExReleaseResourceLite(&IopBootLogResource);
}

IopCreateLogFile()

static NTSTATUS IopCreateLogFile ( VOID  )

static

Definition at line 223 of file bootlog.c.

{
    OBJECT_ATTRIBUTES ObjectAttributes;
    UNICODE_STRING FileName;
    IO_STATUS_BLOCK IoStatusBlock;
    HANDLE FileHandle;
    LARGE_INTEGER ByteOffset;
    WCHAR Signature;
    NTSTATUS Status;
 
    DPRINT("IopSaveBootLogToFile() called\n");
 
    ExAcquireResourceExclusiveLite(&IopBootLogResource, TRUE);
 
    RtlInitUnicodeString(&FileName,
                         L"\\SystemRoot\\rosboot.log");
    InitializeObjectAttributes(&ObjectAttributes,
                               &FileName,
                               OBJ_CASE_INSENSITIVE | OBJ_OPENIF,
                               NULL,
                               NULL);
 
    Status = ZwCreateFile(&FileHandle,
                          FILE_ALL_ACCESS,
                          &ObjectAttributes,
                          &IoStatusBlock,
                          NULL,
                          0,
                          0,
                          FILE_SUPERSEDE,
                          FILE_NON_DIRECTORY_FILE | FILE_SYNCHRONOUS_IO_NONALERT,
                          NULL,
                          0);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("ZwCreateFile() failed (Status %lx)\n", Status);
        return Status;
    }
 
    ByteOffset.QuadPart = (LONGLONG)0;
 
    Signature = 0xFEFF;
    Status = ZwWriteFile(FileHandle,
                         NULL,
                         NULL,
                         NULL,
                         &IoStatusBlock,
                         (PVOID)&Signature,
                         sizeof(WCHAR),
                         &ByteOffset,
                         NULL);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("ZwWriteKey() failed (Status %lx)\n", Status);
    }
 
    ZwClose(FileHandle);
 
    return Status;
}

Referenced by IopSaveBootLogToFile().

IopInitBootLog()

VOID IopInitBootLog

(

BOOLEAN

StartBootLog

)

Definition at line 29 of file bootlog.c.

{
    ExInitializeResourceLite(&IopBootLogResource);
    if (StartBootLog) IopStartBootLog();
}

IopSaveBootLogToFile()

VOID IopSaveBootLogToFile

(

VOID

)

Definition at line 286 of file bootlog.c.

{
    PKEY_VALUE_PARTIAL_INFORMATION KeyInfo;
    WCHAR ValueNameBuffer[8];
    OBJECT_ATTRIBUTES ObjectAttributes;
    UNICODE_STRING KeyName;
    UNICODE_STRING ValueName;
    HANDLE KeyHandle;
    ULONG BufferSize;
    ULONG ResultLength;
    ULONG i;
    NTSTATUS Status;
 
    if (IopBootLogCreate == FALSE)
        return;
 
    DPRINT("IopSaveBootLogToFile() called\n");
 
    ExAcquireResourceExclusiveLite(&IopBootLogResource, TRUE);
 
    Status = IopCreateLogFile();
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("IopCreateLogFile() failed (Status %lx)\n", Status);
        ExReleaseResourceLite(&IopBootLogResource);
        return;
    }
 
    //Status = IopWriteLogFile(L"ReactOS "KERNEL_VERSION_STR);
 
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("IopWriteLogFile() failed (Status %lx)\n", Status);
        ExReleaseResourceLite(&IopBootLogResource);
        return;
    }
 
    Status = IopWriteLogFile(NULL);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("IopWriteLogFile() failed (Status %lx)\n", Status);
        ExReleaseResourceLite(&IopBootLogResource);
        return;
    }
 
 
    BufferSize = sizeof(KEY_VALUE_PARTIAL_INFORMATION) + 256 * sizeof(WCHAR);
    KeyInfo = ExAllocatePool(PagedPool,
                             BufferSize);
    if (KeyInfo == NULL)
    {
        ExReleaseResourceLite(&IopBootLogResource);
        return;
    }
 
    RtlInitUnicodeString(&KeyName,
                         L"\\Registry\\Machine\\System\\CurrentControlSet\\BootLog");
    InitializeObjectAttributes(&ObjectAttributes,
                               &KeyName,
                               OBJ_CASE_INSENSITIVE,
                               NULL,
                               NULL);
    Status = ZwOpenKey(&KeyHandle,
                       KEY_ALL_ACCESS,
                       &ObjectAttributes);
    if (!NT_SUCCESS(Status))
    {
        ExFreePool(KeyInfo);
        ExReleaseResourceLite(&IopBootLogResource);
        return;
    }
 
    for (i = 0; ; i++)
    {
        _swprintf(ValueNameBuffer, L"%lu", i);
 
        RtlInitUnicodeString(&ValueName,
                             ValueNameBuffer);
 
        Status = ZwQueryValueKey(KeyHandle,
                                 &ValueName,
                                 KeyValuePartialInformation,
                                 KeyInfo,
                                 BufferSize,
                                 &ResultLength);
        if (Status == STATUS_OBJECT_NAME_NOT_FOUND)
        {
            break;
        }
 
        if (!NT_SUCCESS(Status))
        {
            ZwClose(KeyHandle);
            ExFreePool(KeyInfo);
            ExReleaseResourceLite(&IopBootLogResource);
            return;
        }
 
        Status = IopWriteLogFile((PWSTR)&KeyInfo->Data);
        if (!NT_SUCCESS(Status))
        {
            ZwClose(KeyHandle);
            ExFreePool(KeyInfo);
            ExReleaseResourceLite(&IopBootLogResource);
            return;
        }
 
        /* Delete keys */
        ZwDeleteValueKey(KeyHandle,
                         &ValueName);
    }
 
    ZwClose(KeyHandle);
 
    ExFreePool(KeyInfo);
 
    IopLogFileEnabled = TRUE;
    ExReleaseResourceLite(&IopBootLogResource);
 
    DPRINT("IopSaveBootLogToFile() done\n");
}

IopStartBootLog()

VOID IopStartBootLog

(

VOID

)

Definition at line 38 of file bootlog.c.

{
    IopBootLogCreate = TRUE;
    IopBootLogEnabled = TRUE;
}

Referenced by IopInitBootLog().

IopStopBootLog()

VOID IopStopBootLog

(

VOID

)

Definition at line 46 of file bootlog.c.

{
    IopBootLogEnabled = FALSE;
}

IopWriteLogFile()

static NTSTATUS IopWriteLogFile ( PWSTR  LogText )

static

Definition at line 144 of file bootlog.c.

{
    OBJECT_ATTRIBUTES ObjectAttributes;
    UNICODE_STRING FileName;
    IO_STATUS_BLOCK IoStatusBlock;
    HANDLE FileHandle;
    PWSTR CrLf = L"\r\n";
    NTSTATUS Status;
 
    DPRINT("IopWriteLogFile() called\n");
 
    RtlInitUnicodeString(&FileName,
                         L"\\SystemRoot\\rosboot.log");
    InitializeObjectAttributes(&ObjectAttributes,
                               &FileName,
                               OBJ_CASE_INSENSITIVE | OBJ_OPENIF,
                               NULL,
                               NULL);
 
    Status = ZwCreateFile(&FileHandle,
                          FILE_APPEND_DATA | SYNCHRONIZE,
                          &ObjectAttributes,
                          &IoStatusBlock,
                          NULL,
                          0,
                          0,
                          FILE_OPEN,
                          FILE_NON_DIRECTORY_FILE | FILE_SYNCHRONOUS_IO_NONALERT,
                          NULL,
                          0);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("ZwCreateFile() failed (Status %lx)\n", Status);
        return Status;
    }
 
    if (LogText != NULL)
    {
        Status = ZwWriteFile(FileHandle,
                             NULL,
                             NULL,
                             NULL,
                             &IoStatusBlock,
                             LogText,
                             (ULONG)wcslen(LogText) * sizeof(WCHAR),
                             NULL,
                             NULL);
        if (!NT_SUCCESS(Status))
        {
            DPRINT1("ZwWriteFile() failed (Status %lx)\n", Status);
            ZwClose(FileHandle);
            return Status;
        }
    }
 
    /* L"\r\n" */
    Status = ZwWriteFile(FileHandle,
                         NULL,
                         NULL,
                         NULL,
                         &IoStatusBlock,
                         (PVOID)CrLf,
                         2 * sizeof(WCHAR),
                         NULL,
                         NULL);
 
    ZwClose(FileHandle);
 
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("ZwWriteFile() failed (Status %lx)\n", Status);
    }
 
    return Status;
}

Referenced by IopSaveBootLogToFile().

Variable Documentation

IopBootLogCreate

BOOLEAN IopBootLogCreate = FALSE

static

Definition at line 18 of file bootlog.c.

Referenced by IopSaveBootLogToFile(), and IopStartBootLog().

IopBootLogEnabled

BOOLEAN IopBootLogEnabled = FALSE

static

Definition at line 19 of file bootlog.c.

Referenced by IopBootLog(), IopStartBootLog(), and IopStopBootLog().

IopBootLogResource

ERESOURCE IopBootLogResource

static

Definition at line 22 of file bootlog.c.

Referenced by IopBootLog(), IopCreateLogFile(), IopInitBootLog(), and IopSaveBootLogToFile().

IopLogEntryCount

ULONG IopLogEntryCount = 0

static

Definition at line 21 of file bootlog.c.

Referenced by IopBootLog().

IopLogFileEnabled

BOOLEAN IopLogFileEnabled = FALSE

static

Definition at line 20 of file bootlog.c.

Referenced by IopSaveBootLogToFile().