vdm.h File Reference

#include <win/vdm.h>

Include dependency graph for vdm.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
struct	_VDM_CONSOLE_RECORD
struct	_VDM_DOS_RECORD

Macros
#define	VDM_POLICY_KEY_NAME   L"Software\\Policies\\Microsoft\\Windows\\AppCompat"
#define	VDM_DISALLOWED_VALUE_NAME   L"VDMDisallowed"

Typedefs
typedef struct _VDM_CONSOLE_RECORD	VDM_CONSOLE_RECORD
typedef struct _VDM_CONSOLE_RECORD *	PVDM_CONSOLE_RECORD
typedef struct _VDM_DOS_RECORD	VDM_DOS_RECORD
typedef struct _VDM_DOS_RECORD *	PVDM_DOS_RECORD

Functions
NTSTATUS	BaseSrvGetConsoleRecord (HANDLE ConsoleHandle, PVDM_CONSOLE_RECORD *Record)
NTSTATUS	GetConsoleRecordBySessionId (ULONG TaskId, PVDM_CONSOLE_RECORD *Record)
BOOLEAN	BaseSrvIsVdmAllowed (VOID)
VOID	BaseInitializeVDM (VOID)
VOID	BaseSrvCleanupVDMResources (IN PCSR_PROCESS CsrProcess)

Macro Definition Documentation

VDM_DISALLOWED_VALUE_NAME

#define VDM_DISALLOWED_VALUE_NAME   L"VDMDisallowed"

Definition at line 17 of file vdm.h.

VDM_POLICY_KEY_NAME

#define VDM_POLICY_KEY_NAME   L"Software\\Policies\\Microsoft\\Windows\\AppCompat"

Definition at line 16 of file vdm.h.

Typedef Documentation

PVDM_CONSOLE_RECORD

typedef struct _VDM_CONSOLE_RECORD * PVDM_CONSOLE_RECORD

PVDM_DOS_RECORD

typedef struct _VDM_DOS_RECORD * PVDM_DOS_RECORD

VDM_CONSOLE_RECORD

typedef struct _VDM_CONSOLE_RECORD VDM_CONSOLE_RECORD

VDM_DOS_RECORD

typedef struct _VDM_DOS_RECORD VDM_DOS_RECORD

Function Documentation

BaseInitializeVDM()

VOID BaseInitializeVDM

(

VOID

)

Definition at line 588 of file vdm.c.

{
    /* Initialize the list head */
    InitializeListHead(&VDMConsoleListHead);
 
    /* Initialize the critical sections */
    RtlInitializeCriticalSection(&DosCriticalSection);
    RtlInitializeCriticalSection(&WowCriticalSection);
}

Referenced by CSR_SERVER_DLL_INIT().

BaseSrvCleanupVDMResources()

VOID BaseSrvCleanupVDMResources

(

IN PCSR_PROCESS

CsrProcess

)

Definition at line 297 of file vdm.c.

{
    ULONG ProcessId = HandleToUlong(CsrProcess->ClientId.UniqueProcess);
    PVDM_CONSOLE_RECORD ConsoleRecord = NULL;
    PVDM_DOS_RECORD DosRecord;
    PLIST_ENTRY i;
 
    /* Enter the critical section */
    RtlEnterCriticalSection(&DosCriticalSection);
 
    /* Search for a record that has the same process handle */
    i = VDMConsoleListHead.Flink;
    while (i != &VDMConsoleListHead)
    {
        ConsoleRecord = CONTAINING_RECORD(i, VDM_CONSOLE_RECORD, Entry);
        i = i->Flink;
 
        if (ConsoleRecord->ProcessId == ProcessId)
        {
            if (ConsoleRecord->ServerEvent)
            {
                NtClose(ConsoleRecord->ServerEvent);
                ConsoleRecord->ServerEvent = NULL;
            }
 
            /* Cleanup the DOS records */
            while (!IsListEmpty(&ConsoleRecord->DosListHead))
            {
                DosRecord = CONTAINING_RECORD(ConsoleRecord->DosListHead.Flink,
                                              VDM_DOS_RECORD, Entry);
 
                /* Set the event and close it */
                if (DosRecord->ServerEvent)
                {
                    NtSetEvent(DosRecord->ServerEvent, NULL);
                    NtClose(DosRecord->ServerEvent);
                    DosRecord->ServerEvent = NULL;
                }
 
                /* Remove the DOS entry */
                if (DosRecord->CommandInfo) BaseSrvFreeVDMInfo(DosRecord->CommandInfo);
                RemoveEntryList(&DosRecord->Entry);
                RtlFreeHeap(BaseSrvHeap, 0, DosRecord);
            }
 
            /* Remove the console record */
            RemoveEntryList(&ConsoleRecord->Entry);
            BaseSrvDestroyConsoleRecord(ConsoleRecord);
        }
    }
 
    /* Leave the critical section */
    RtlLeaveCriticalSection(&DosCriticalSection);
}

Referenced by BaseClientDisconnectRoutine().

BaseSrvGetConsoleRecord()

NTSTATUS BaseSrvGetConsoleRecord	(	HANDLE	ConsoleHandle,
		PVDM_CONSOLE_RECORD *	Record
	)

Definition at line 49 of file vdm.c.

{
    PLIST_ENTRY i;
    PVDM_CONSOLE_RECORD CurrentRecord = NULL;
 
    /* NULL is not a valid console handle */
    if (ConsoleHandle == NULL) return STATUS_INVALID_PARAMETER;
 
    /* Search for a record that has the same console handle */
    for (i = VDMConsoleListHead.Flink; i != &VDMConsoleListHead; i = i->Flink)
    {
        CurrentRecord = CONTAINING_RECORD(i, VDM_CONSOLE_RECORD, Entry);
        if (CurrentRecord->ConsoleHandle == ConsoleHandle) break;
    }
 
    /* Check if nothing was found */
    if (i == &VDMConsoleListHead) CurrentRecord = NULL;
 
    *Record = CurrentRecord;
    return CurrentRecord ? STATUS_SUCCESS : STATUS_NOT_FOUND;
}

Referenced by CSR_API().

BaseSrvIsVdmAllowed()

BOOLEAN BaseSrvIsVdmAllowed

(

VOID

)

Definition at line 143 of file vdm.c.

{
    NTSTATUS Status;
    BOOLEAN VdmAllowed = TRUE;
    HANDLE RootKey, KeyHandle;
    UNICODE_STRING KeyName, ValueName, MachineKeyName;
    OBJECT_ATTRIBUTES Attributes;
    UCHAR ValueBuffer[sizeof(KEY_VALUE_PARTIAL_INFORMATION) + sizeof(ULONG)];
    PKEY_VALUE_PARTIAL_INFORMATION ValueInfo = (PKEY_VALUE_PARTIAL_INFORMATION)ValueBuffer;
    ULONG ActualSize;
 
    /* Initialize the unicode strings */
    RtlInitUnicodeString(&MachineKeyName, L"\\Registry\\Machine");
    RtlInitUnicodeString(&KeyName, VDM_POLICY_KEY_NAME);
    RtlInitUnicodeString(&ValueName, VDM_DISALLOWED_VALUE_NAME);
 
    InitializeObjectAttributes(&Attributes,
                               &MachineKeyName,
                               OBJ_CASE_INSENSITIVE,
                               NULL,
                               NULL);
 
    /* Open the local machine key */
    Status = NtOpenKey(&RootKey, KEY_READ, &Attributes);
    if (!NT_SUCCESS(Status)) return FALSE;
 
    InitializeObjectAttributes(&Attributes,
                               &KeyName,
                               OBJ_CASE_INSENSITIVE,
                               RootKey,
                               NULL);
 
    /* Open the policy key in the local machine hive, if it exists */
    if (NT_SUCCESS(NtOpenKey(&KeyHandle, KEY_READ, &Attributes)))
    {
        /* Read the value, if it's set */
        if (NT_SUCCESS(NtQueryValueKey(KeyHandle,
                                       &ValueName,
                                       KeyValuePartialInformation,
                                       ValueInfo,
                                       sizeof(ValueBuffer),
                                       &ActualSize)))
        {
            if (*((PULONG)ValueInfo->Data))
            {
                /* The VDM has been disabled in the registry */
                VdmAllowed = FALSE;
            }
        }
 
        NtClose(KeyHandle);
    }
 
    /* Close the local machine key */
    NtClose(RootKey);
 
    /* If it's disabled system-wide, there's no need to check the user key */
    if (!VdmAllowed) return FALSE;
 
    /* Open the current user key of the client */
    if (!CsrImpersonateClient(NULL)) return VdmAllowed;
    Status = RtlOpenCurrentUser(KEY_READ, &RootKey);
    CsrRevertToSelf();
 
    /* If that fails, return the system-wide setting */
    if (!NT_SUCCESS(Status)) return VdmAllowed;
 
    InitializeObjectAttributes(&Attributes,
                               &KeyName,
                               OBJ_CASE_INSENSITIVE,
                               RootKey,
                               NULL);
 
    /* Open the policy key in the current user hive, if it exists */
    if (NT_SUCCESS(NtOpenKey(&KeyHandle, KEY_READ, &Attributes)))
    {
        /* Read the value, if it's set */
        if (NT_SUCCESS(NtQueryValueKey(KeyHandle,
                                       &ValueName,
                                       KeyValuePartialInformation,
                                       ValueInfo,
                                       sizeof(ValueBuffer),
                                       &ActualSize)))
        {
            if (*((PULONG)ValueInfo->Data))
            {
                /* The VDM has been disabled in the registry */
                VdmAllowed = FALSE;
            }
        }
 
        NtClose(KeyHandle);
    }
 
    return VdmAllowed;
}

Referenced by CSR_API().

GetConsoleRecordBySessionId()

NTSTATUS GetConsoleRecordBySessionId	(	ULONG	TaskId,
		PVDM_CONSOLE_RECORD *	Record
	)

Definition at line 95 of file vdm.c.

{
    PLIST_ENTRY i;
    PVDM_CONSOLE_RECORD CurrentRecord = NULL;
 
    /* Search for a record that has the same console handle */
    for (i = VDMConsoleListHead.Flink; i != &VDMConsoleListHead; i = i->Flink)
    {
        CurrentRecord = CONTAINING_RECORD(i, VDM_CONSOLE_RECORD, Entry);
        if (CurrentRecord->SessionId == TaskId) break;
    }
 
    /* Check if nothing was found */
    if (i == &VDMConsoleListHead) CurrentRecord = NULL;
 
    *Record = CurrentRecord;
    return CurrentRecord ? STATUS_SUCCESS : STATUS_NOT_FOUND;
}

Referenced by CSR_API().