wmifuncs.h File Reference

Go to the source code of this file.

Macros
#define	TRACE_INFORMATION_CLASS_DEFINE

Functions
	_IRQL_requires_max_ (APC_LEVEL) NTKERNELAPI NTSTATUS NTAPI WmiQueryTraceInformation(_In_ TRACE_INFORMATION_CLASS TraceInformationClass
	_Out_writes_bytes_ (TraceInformationLength) PVOID TraceInformation
	_IRQL_requires_max_ (PASSIVE_LEVEL) NTSTATUS NTKRNLVISTAAPI NTAPI EtwRegister(_In_ LPCGUID ProviderId
	_IRQL_requires_max_ (HIGH_LEVEL) BOOLEAN NTKERNELAPI NTAPI EtwEventEnabled(_In_ REGHANDLE RegHandle
	_When_ (ControlCode==EVENT_ACTIVITY_CTRL_CREATE_ID, _IRQL_requires_max_(HIGH_LEVEL)) _When_(ControlCode!
	_Inout_updates_bytes_ (sizeof(GUID)) LPGUID ActivityId)
_In_ PCEVENT_DESCRIPTOR _In_opt_ LPCGUID _In_ ULONG	_In_reads_opt_ (UserDataCount) PEVENT_DATA_DESCRIPTOR UserData)

Variables
_In_ ULONG	TraceInformationLength
_In_ ULONG _Out_opt_ PULONG	RequiredLength
_In_ ULONG _Out_opt_ PULONG _In_opt_ PVOID	Buffer
_In_opt_ PETWENABLECALLBACK	EnableCallback
_In_opt_ PETWENABLECALLBACK _In_opt_ PVOID	CallbackContext
_In_opt_ PETWENABLECALLBACK _In_opt_ PVOID _Out_ PREGHANDLE	RegHandle
_In_ PCEVENT_DESCRIPTOR	EventDescriptor
_In_ UCHAR	Level
_In_ UCHAR _In_ ULONGLONG	Keyword
_In_ PCEVENT_DESCRIPTOR _In_opt_ LPCGUID	ActivityId
_In_ PCEVENT_DESCRIPTOR _In_opt_ LPCGUID _In_ ULONG	UserDataCount
_In_ PCEVENT_DESCRIPTOR _In_opt_ LPCGUID _In_opt_ LPCGUID	RelatedActivityId
_In_ UCHAR _In_ ULONGLONG _In_opt_ LPCGUID _In_ PCWSTR	String
_In_ PCEVENT_DESCRIPTOR _In_ ULONG64	Filter
_In_ PCEVENT_DESCRIPTOR _In_ ULONG64 _In_ ULONG	Flags

Macro Definition Documentation

TRACE_INFORMATION_CLASS_DEFINE

#define TRACE_INFORMATION_CLASS_DEFINE

Definition at line 64 of file wmifuncs.h.

Function Documentation

_In_reads_opt_()

_In_ PCEVENT_DESCRIPTOR _In_ ULONG64 _In_ ULONG _In_opt_ LPCGUID _In_opt_ LPCGUID _In_ ULONG _In_reads_opt_

(

UserDataCount

)

_Inout_updates_bytes_()

_Inout_updates_bytes_

(

sizeof(GUID)

)

_IRQL_requires_max_() [1/3]

_IRQL_requires_max_

(

APC_LEVEL

)

Definition at line 197 of file cddata.c.

{
    THREAD_CONTEXT ThreadContext = {0};
    PIRP_CONTEXT IrpContext = NULL;
    BOOLEAN Wait;

#ifdef CD_SANITY
    PVOID PreviousTopLevel;
#endif

    NTSTATUS Status;

#if DBG

    KIRQL SaveIrql = KeGetCurrentIrql();

#endif

    ASSERT_OPTIONAL_IRP( Irp );

    UNREFERENCED_PARAMETER( DeviceObject );

    FsRtlEnterFileSystem();

#ifdef CD_SANITY
    PreviousTopLevel = IoGetTopLevelIrp();
#endif

    //
    //  Loop until this request has been completed or posted.
    //

    do {

        //
        //  Use a try-except to handle the exception cases.
        //

        _SEH2_TRY {

            //
            //  If the IrpContext is NULL then this is the first pass through
            //  this loop.
            //

            if (IrpContext == NULL) {

                //
                //  Decide if this request is waitable an allocate the IrpContext.
                //  If the file object in the stack location is NULL then this
                //  is a mount which is always waitable.  Otherwise we look at
                //  the file object flags.
                //

                if (IoGetCurrentIrpStackLocation( Irp )->FileObject == NULL) {

                    Wait = TRUE;

                } else {

                    Wait = CanFsdWait( Irp );
                }

                IrpContext = CdCreateIrpContext( Irp, Wait );

                //
                //  Update the thread context information.
                //

                CdSetThreadContext( IrpContext, &ThreadContext );

#ifdef CD_SANITY
                NT_ASSERT( !CdTestTopLevel ||
                        SafeNodeType( IrpContext->TopLevel ) == CDFS_NTC_IRP_CONTEXT );
#endif

            //
            //  Otherwise cleanup the IrpContext for the retry.
            //

            } else {

                //
                //  Set the MORE_PROCESSING flag to make sure the IrpContext
                //  isn't inadvertently deleted here.  Then cleanup the
                //  IrpContext to perform the retry.
                //

                SetFlag( IrpContext->Flags, IRP_CONTEXT_FLAG_MORE_PROCESSING );
                CdCleanupIrpContext( IrpContext, FALSE );
            }

            //
            //  Case on the major irp code.
            //

            switch (IrpContext->MajorFunction) {

            case IRP_MJ_CREATE :

                Status = CdCommonCreate( IrpContext, Irp );
                break;

            case IRP_MJ_CLOSE :

                Status = CdCommonClose( IrpContext, Irp );
                break;

            case IRP_MJ_READ :

                //
                //  If this is an Mdl complete request, don't go through
                //  common read.
                //

                if (FlagOn( IrpContext->MinorFunction, IRP_MN_COMPLETE )) {

                    Status = CdCompleteMdl( IrpContext, Irp );

                } else {

                    Status = CdCommonRead( IrpContext, Irp );
                }

                break;

            case IRP_MJ_WRITE :

                Status = CdCommonWrite( IrpContext, Irp );
                break;

            case IRP_MJ_QUERY_INFORMATION :

                Status = CdCommonQueryInfo( IrpContext, Irp );
                break;

            case IRP_MJ_SET_INFORMATION :

                Status = CdCommonSetInfo( IrpContext, Irp );
                break;

            case IRP_MJ_QUERY_VOLUME_INFORMATION :

                Status = CdCommonQueryVolInfo( IrpContext, Irp );
                break;

            case IRP_MJ_DIRECTORY_CONTROL :

                Status = CdCommonDirControl( IrpContext, Irp );
                break;

            case IRP_MJ_FILE_SYSTEM_CONTROL :

                Status = CdCommonFsControl( IrpContext, Irp );
                break;

            case IRP_MJ_DEVICE_CONTROL :

                Status = CdCommonDevControl( IrpContext, Irp );
                break;

            case IRP_MJ_LOCK_CONTROL :

                Status = CdCommonLockControl( IrpContext, Irp );
                break;

            case IRP_MJ_CLEANUP :

                Status = CdCommonCleanup( IrpContext, Irp );
                break;

            case IRP_MJ_PNP :

                Status = CdCommonPnp( IrpContext, Irp );
                break;

            case IRP_MJ_SHUTDOWN :
            
                Status = CdCommonShutdown( IrpContext, Irp );
                break;

            default :

                Status = STATUS_INVALID_DEVICE_REQUEST;
                CdCompleteRequest( IrpContext, Irp, Status );
            }

        } _SEH2_EXCEPT( CdExceptionFilter( IrpContext, _SEH2_GetExceptionInformation() )) {

            Status = CdProcessException( IrpContext, Irp, _SEH2_GetExceptionCode() );
        } _SEH2_END;

    } while (Status == STATUS_CANT_WAIT);

#ifdef CD_SANITY
    NT_ASSERT( !CdTestTopLevel ||
            (PreviousTopLevel == IoGetTopLevelIrp()) );
#endif

    FsRtlExitFileSystem();

    NT_ASSERT( SaveIrql == KeGetCurrentIrql( ));

    return Status;
}

_IRQL_requires_max_() [2/3]

_IRQL_requires_max_

(

PASSIVE_LEVEL

)

Definition at line 64 of file Messaging.c.

{
    PFLT_SERVER_PORT_OBJECT PortObject;
    NTSTATUS Status;

    /* The caller must allow at least one connection */
    if (MaxConnections == 0)
    {
        return STATUS_INVALID_PARAMETER;
    }

    /* The request must be for a kernel handle */
    if (!(ObjectAttributes->Attributes & OBJ_KERNEL_HANDLE))
    {
        return STATUS_INVALID_PARAMETER;
    }

    /*
     * Get rundown protection on the target to stop the owner
     * from unloading whilst this port object is open. It gets
     * removed in the FltpServerPortClose callback
     */
    Status = FltObjectReference(Filter);
    if (!NT_SUCCESS(Status))
    {
        return Status;
    }

    /* Create the server port object for this filter */
    Status = ObCreateObject(KernelMode,
                            ServerPortObjectType,
                            ObjectAttributes,
                            KernelMode,
                            NULL,
                            sizeof(FLT_SERVER_PORT_OBJECT),
                            0,
                            0,
                            (PVOID *)&PortObject);
    if (NT_SUCCESS(Status))
    {
        /* Zero out the struct */
        RtlZeroMemory(PortObject, sizeof(FLT_SERVER_PORT_OBJECT));

        /* Increment the ref count on the target filter */
        FltpObjectPointerReference((PFLT_OBJECT)Filter);

        /* Setup the filter port object */
        PortObject->Filter = Filter;
        PortObject->ConnectNotify = ConnectNotifyCallback;
        PortObject->DisconnectNotify = DisconnectNotifyCallback;
        PortObject->MessageNotify = MessageNotifyCallback;
        PortObject->Cookie = ServerPortCookie;
        PortObject->MaxConnections = MaxConnections;

        /* Insert the object */
        Status = ObInsertObject(PortObject,
                                NULL,
                                STANDARD_RIGHTS_ALL | FILE_READ_DATA,
                                0,
                                NULL,
                                (PHANDLE)ServerPort);
        if (NT_SUCCESS(Status))
        {
            /* Lock the connection list */
            ExAcquireFastMutex(&Filter->ConnectionList.mLock);

            /* Add the new port object to the connection list and increment the count */
            InsertTailList(&Filter->ConnectionList.mList, &PortObject->FilterLink);
            Filter->ConnectionList.mCount++;

            /* Unlock the connection list*/
            ExReleaseFastMutex(&Filter->ConnectionList.mLock);
        }
    }

    if (!NT_SUCCESS(Status))
    {
        /* Allow the filter to be cleaned up */
        FltObjectDereference(Filter);
    }

    return Status;
}

_IRQL_requires_max_() [3/3]

_IRQL_requires_max_

(

HIGH_LEVEL

)

Definition at line 68 of file ke.h.

{
    return (KIRQL)__readcr8();
}

_Out_writes_bytes_()

_Out_writes_bytes_

(

TraceInformationLength

)

_When_()

_When_	(	ControlCode	= =EVENT_ACTIVITY_CTRL_CREATE_ID,
		_IRQL_requires_max_(HIGH_LEVEL)
	)

Variable Documentation

ActivityId

_In_ PCEVENT_DESCRIPTOR _In_ ULONG64 _In_ ULONG _In_opt_ LPCGUID ActivityId

Definition at line 119 of file wmifuncs.h.

Referenced by ClasspDeviceTrimProcess(), DeviceProcessDsmTrimRequest(), and STRUCT().

Buffer

_In_ ULONG _Out_opt_ PULONG _In_opt_ PVOID Buffer

Definition at line 29 of file wmifuncs.h.

CallbackContext

_In_opt_ PETWENABLECALLBACK _In_opt_ PVOID CallbackContext

Definition at line 76 of file wmifuncs.h.

EnableCallback

_In_opt_ PETWENABLECALLBACK EnableCallback

Definition at line 76 of file wmifuncs.h.

EventDescriptor

_In_ PCEVENT_DESCRIPTOR EventDescriptor

Definition at line 93 of file wmifuncs.h.

Referenced by EventDescCreate(), EventDescGetChannel(), EventDescGetId(), EventDescGetKeyword(), EventDescGetLevel(), EventDescGetOpcode(), EventDescGetTask(), EventDescGetVersion(), EventDescOrKeyword(), EventDescSetChannel(), EventDescSetId(), EventDescSetKeyword(), EventDescSetLevel(), EventDescSetOpcode(), EventDescSetTask(), EventDescSetVersion(), and EventDescZero().

Filter

_In_ PCEVENT_DESCRIPTOR _In_ ULONG64 Filter

Definition at line 156 of file wmifuncs.h.

Flags

_In_ PCEVENT_DESCRIPTOR _In_ ULONG64 _In_ ULONG Flags

Definition at line 156 of file wmifuncs.h.

Keyword

_In_ UCHAR _In_ ULONGLONG Keyword

Definition at line 101 of file wmifuncs.h.

Level

_In_ UCHAR Level

Definition at line 101 of file wmifuncs.h.

RegHandle

_In_opt_ PETWENABLECALLBACK _In_opt_ PVOID _Out_ PREGHANDLE RegHandle

Definition at line 76 of file wmifuncs.h.

Referenced by GetLongestChildKeyName(), GetNthChildKeyName(), KeI386VdmInitialize(), OpenChildKeyRead(), OpenRegistryKey(), QueryRegistryValue(), QueryRegistryValueString(), QueryRegistryValueStringMulti(), ReadStringFromRegistry(), and test_SetupDiInstallClassExA().

RelatedActivityId

_In_ PCEVENT_DESCRIPTOR _In_ ULONG64 _In_ ULONG _In_opt_ LPCGUID _In_opt_ LPCGUID RelatedActivityId

Definition at line 130 of file wmifuncs.h.

RequiredLength

_In_ ULONG _Out_opt_ PULONG RequiredLength

Definition at line 29 of file wmifuncs.h.

Referenced by AcpiExInsertIntoField(), AcpiNsExternalizeName(), AcpiUtInitializeBuffer(), ExpQueryModuleInformation(), Ext2QueryVolumeInformation(), FFSQueryVolumeInformation(), ImageGetCertificateData(), IntCopyRegistryKey(), IopActionInterrogateDeviceStack(), IopDetectResourceConflict(), IopDoNameTransmogrify(), IoReportDetectedDevice(), LsarEnumerateAccounts(), LsarpEnumeratePrivileges(), NtAdjustPrivilegesToken(), NtQueryInformationAtom(), NtQueryInformationJobObject(), NtQueryInformationToken(), NtSetInformationJobObject(), RegOpenUserClassesRoot(), RfsdQueryVolumeInformation(), RtlpCallQueryRegistryRoutine(), SamrEnumerateAliasesInDomain(), SamrEnumerateDomainsInSamServer(), SamrEnumerateGroupsInDomain(), SamrEnumerateUsersInDomain(), SeCaptureSidAndAttributesArray(), and SeQueryInformationToken().

String

_In_ UCHAR _In_ ULONGLONG _In_opt_ LPCGUID _In_ PCWSTR String

Definition at line 142 of file wmifuncs.h.

TraceInformationLength

_In_ ULONG TraceInformationLength

Definition at line 29 of file wmifuncs.h.

UserDataCount

_In_ PCEVENT_DESCRIPTOR _In_ ULONG64 _In_ ULONG _In_opt_ LPCGUID _In_opt_ LPCGUID _In_ ULONG UserDataCount

Definition at line 119 of file wmifuncs.h.