RtlStack.c File Reference

#include <kmt_test.h>

Include dependency graph for RtlStack.c:

Go to the source code of this file.

Macros
#define	KMT_EMULATE_KERNEL

Functions
static VOID	TestStackWalk3 (VOID)
static DECLSPEC_NOINLINE VOID	TestStackWalk4 (VOID)
static DECLSPEC_NOINLINE VOID	TestStackWalk2 (VOID)
static DECLSPEC_NOINLINE VOID	TestStackWalk1 (VOID)
	START_TEST (RtlStack)

Variables
static PVOID	ReturnAddresses [4]

Macro Definition Documentation

KMT_EMULATE_KERNEL

#define KMT_EMULATE_KERNEL

Definition at line 8 of file RtlStack.c.

Function Documentation

START_TEST()

START_TEST

(

RtlStack

)

Definition at line 205 of file RtlStack.c.

{
    TestStackWalk1();
#ifdef _M_AMD64
    TestRtlPcToFileHeader();
#endif // _M_AMD64
}

TestStackWalk1()

static DECLSPEC_NOINLINE VOID TestStackWalk1 ( VOID  )

static

Definition at line 138 of file RtlStack.c.

{
    ReturnAddresses[0] = _ReturnAddress();
    TestStackWalk2();
}

Referenced by START_TEST().

TestStackWalk2()

static DECLSPEC_NOINLINE VOID TestStackWalk2 ( VOID  )

static

Definition at line 129 of file RtlStack.c.

{
    ReturnAddresses[1] = _ReturnAddress();
    TestStackWalk3();
}

Referenced by TestStackWalk1().

TestStackWalk3()

static DECLSPEC_NOINLINE VOID TestStackWalk3 ( VOID  )

static

Definition at line 120 of file RtlStack.c.

{
    ReturnAddresses[2] = _ReturnAddress();
    TestStackWalk4();
}

Referenced by TestStackWalk2().

TestStackWalk4()

static DECLSPEC_NOINLINE VOID TestStackWalk4 ( VOID  )

static

Definition at line 20 of file RtlStack.c.

{
    PVOID Frames[5];
    ULONG Ret;
    ULONG Hash;
    ULONG ExpectedHash;
    ULONG i;
    const ULONG FunctionSizeGuess = 0x1000;
    NTSTATUS ExceptionStatus = STATUS_SUCCESS;
 
    ReturnAddresses[3] = _ReturnAddress();
 
    Ret = RtlWalkFrameChain(NULL, 5, 0);
    ok_eq_ulong(Ret, 0);
 
    RtlFillMemory(Frames, sizeof(Frames), 0x55);
    Ret = RtlWalkFrameChain(Frames, 0, 0);
    ok_eq_ulong(Ret, 0);
    ok_eq_pointer(Frames[0], (PVOID)(ULONG_PTR)0x5555555555555555);
 
    RtlFillMemory(Frames, sizeof(Frames), 0x55);
    Ret = RtlWalkFrameChain(Frames, 5, 0);
    ok_eq_ulong(Ret, 5);
    ok((ULONG_PTR)Frames[0] > (ULONG_PTR)TestStackWalk4, "Frame is %p, function is %p\n", Frames[0], TestStackWalk4);
    ok((ULONG_PTR)Frames[0] < (ULONG_PTR)TestStackWalk4 + FunctionSizeGuess, "Frame is %p, function is %p\n", Frames[0], TestStackWalk4);
    ok_eq_pointer(Frames[1], ReturnAddresses[3]);
    ok_eq_pointer(Frames[2], ReturnAddresses[2]);
    ok_eq_pointer(Frames[3], ReturnAddresses[1]);
    ok_eq_pointer(Frames[4], ReturnAddresses[0]);
 
    RtlFillMemory(Frames, sizeof(Frames), 0x55);
    Ret = RtlWalkFrameChain(Frames, 4, 0);
    ok_eq_ulong(Ret, 4);
    ok((ULONG_PTR)Frames[0] > (ULONG_PTR)TestStackWalk4, "Frame is %p, function is %p\n", Frames[0], TestStackWalk4);
    ok((ULONG_PTR)Frames[0] < (ULONG_PTR)TestStackWalk4 + FunctionSizeGuess, "Frame is %p, function is %p\n", Frames[0], TestStackWalk4);
    ok_eq_pointer(Frames[1], ReturnAddresses[3]);
    ok_eq_pointer(Frames[2], ReturnAddresses[2]);
    ok_eq_pointer(Frames[3], ReturnAddresses[1]);
    ok_eq_pointer(Frames[4], (PVOID)(ULONG_PTR)0x5555555555555555);
 
    _SEH2_TRY
    {
        RtlCaptureStackBackTrace(0, 5, NULL, NULL);
    }
    _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
    {
        ExceptionStatus = _SEH2_GetExceptionCode();
    }
    _SEH2_END;
    if (GetNTVersion() == _WIN32_WINNT_WS03)
        ok_eq_hex(ExceptionStatus, STATUS_ACCESS_VIOLATION);
    else
        ok_eq_hex(ExceptionStatus, STATUS_SUCCESS);
 
    RtlFillMemory(Frames, sizeof(Frames), 0x55);
    Hash = 0x55555555;
    Ret = RtlCaptureStackBackTrace(0, 0, Frames, &Hash);
    ok_eq_ulong(Ret, 0);
    ok_eq_hex(Hash, 0x55555555);
    ok_eq_pointer(Frames[0], (PVOID)(ULONG_PTR)0x5555555555555555);
 
    RtlFillMemory(Frames, sizeof(Frames), 0x55);
    Hash = 0x55555555;
    Ret = RtlCaptureStackBackTrace(0, 1, Frames, NULL);
    ok_eq_ulong(Ret, 1);
    ok((ULONG_PTR)Frames[0] > (ULONG_PTR)TestStackWalk4, "Frame is %p, function is %p\n", Frames[0], TestStackWalk4);
    ok((ULONG_PTR)Frames[0] < (ULONG_PTR)TestStackWalk4 + FunctionSizeGuess, "Frame is %p, function is %p\n", Frames[0], TestStackWalk4);
    ok_eq_pointer(Frames[1], (PVOID)(ULONG_PTR)0x5555555555555555);
 
    RtlFillMemory(Frames, sizeof(Frames), 0x55);
    Ret = RtlCaptureStackBackTrace(0, 5, Frames, &Hash);
    ok_eq_ulong(Ret, 5);
    ExpectedHash = 0;
    for (i = 0; i < 5; i++)
        ExpectedHash += (ULONG)(ULONG_PTR)Frames[i];
    ok_eq_hex(Hash, ExpectedHash);
    ok((ULONG_PTR)Frames[0] > (ULONG_PTR)TestStackWalk4, "Frame is %p, function is %p\n", Frames[0], TestStackWalk4);
    ok((ULONG_PTR)Frames[0] < (ULONG_PTR)TestStackWalk4 + FunctionSizeGuess, "Frame is %p, function is %p\n", Frames[0], TestStackWalk4);
    ok_eq_pointer(Frames[1], ReturnAddresses[3]);
    ok_eq_pointer(Frames[2], ReturnAddresses[2]);
    ok_eq_pointer(Frames[3], ReturnAddresses[1]);
    ok_eq_pointer(Frames[4], ReturnAddresses[0]);
 
    RtlFillMemory(Frames, sizeof(Frames), 0x55);
    Ret = RtlCaptureStackBackTrace(1, 4, Frames, &Hash);
    ok_eq_ulong(Ret, 4);
    ExpectedHash = 0;
    for (i = 0; i < 4; i++)
        ExpectedHash += (ULONG)(ULONG_PTR)Frames[i];
    ok_eq_hex(Hash, ExpectedHash);
    ok_eq_pointer(Frames[0], ReturnAddresses[3]);
    ok_eq_pointer(Frames[1], ReturnAddresses[2]);
    ok_eq_pointer(Frames[2], ReturnAddresses[1]);
    ok_eq_pointer(Frames[3], ReturnAddresses[0]);
    ok_eq_pointer(Frames[4], (PVOID)(ULONG_PTR)0x5555555555555555);
}

Referenced by TestStackWalk3(), and TestStackWalk4().

Variable Documentation

ReturnAddresses

PVOID ReturnAddresses[4]

static

Definition at line 11 of file RtlStack.c.

Referenced by TestStackWalk1(), TestStackWalk2(), TestStackWalk3(), and TestStackWalk4().