Go to the source code of this file.
Function Documentation
◆ _IRQL_requires_max_()
| _IRQL_requires_max_ | ( | PASSIVE_LEVEL | ) |
Queries information details about a security descriptor.
Computes the quota size of a security descriptor.
Assigns a security descriptor for a new object.
An extended function that assigns a security descriptor for a new object.
Frees a security descriptor.
An extended function that sets new information data to a security descriptor.
Modifies some information data about a security descriptor.
- Parameters
-
[in] SecurityInformation Security information details to be queried from a security descriptor. [out] SecurityDescriptor The returned security descriptor with security information data. [in,out] Length The returned length of a security descriptor. [in,out] ObjectsSecurityDescriptor The returned object security descriptor.
- Returns
- Returns STATUS_SUCCESS if the operations have been completed successfully and that the specific information about the security descriptor has been queried. STATUS_BUFFER_TOO_SMALL is returned if the buffer size is too small to contain the queried info about the security descriptor.
- Parameters
-
[in] Object If specified, the function will use this arbitrary object that points to an object security descriptor. [in] SecurityInformation Security information details to be set. [in] SecurityDescriptor A security descriptor where its info is to be changed. [in,out] ObjectsSecurityDescriptor The returned pointer to security descriptor objects. [in] PoolType Pool type for the new security descriptor to allocate. [in] GenericMapping The generic mapping of access rights masks.
- Returns
- See SeSetSecurityDescriptorInfoEx.
- Parameters
-
[in] Object If specified, the function will use this arbitrary object that points to an object security descriptor. [in] SecurityInformation Security information details to be set. [in] SecurityDescriptor A security descriptor where its info is to be changed. [in,out] ObjectsSecurityDescriptor The returned pointer to security descriptor objects. [in] AutoInheritFlags Flags bitmask inheritation, influencing how the security descriptor can be inherited and if it can be in the first place. [in] PoolType Pool type for the new security descriptor to allocate. [in] GenericMapping The generic mapping of access rights masks.
- Returns
- Returns STATUS_SUCCESS if the operations have been completed without problems and that new info has been set to the security descriptor. STATUS_NO_SECURITY_ON_OBJECT is returned if the object does not have a security descriptor. STATUS_INSUFFICIENT_RESOURCES is returned if memory pool allocation for the new security descriptor with new info set has failed.
- Parameters
-
[in] SecurityDescriptor A security descriptor to be freed from memory.
- Returns
- Returns STATUS_SUCCESS.
- Parameters
-
[in] _ParentDescriptor A security descriptor of the parent object that is being created. [in] _ExplicitDescriptor An explicit security descriptor that is applied to a new object. [out] NewDescriptor The new allocated security descriptor. [in] ObjectType The type of the new object. [in] IsDirectoryObject Set this to TRUE if the newly created object is a directory object, otherwise set this to FALSE. [in] AutoInheritFlags Automatic inheritance flags that influence how access control entries within ACLs from security descriptors are inherited. [in] SubjectContext Security subject context of the new object. [in] GenericMapping Generic mapping of access mask rights. [in] PoolType This parameter is unused.
- Returns
- Returns STATUS_SUCCESS if the operations have been completed successfully and that the security descriptor has been assigned to the new object. STATUS_NO_TOKEN is returned if the caller hasn't supplied a valid argument to a security subject context. STATUS_INVALID_OWNER is returned if the caller hasn't supplied a parent descriptor that belongs to the main user (owner). STATUS_INVALID_PRIMARY_GROUP is returned by the same reason as with the previous NTSTATUS code. The two NTSTATUS codes are returned if the calling thread stated that the owner and/or group is defaulted to the parent descriptor (SEF_DEFAULT_OWNER_FROM_PARENT and/or SEF_DEFAULT_GROUP_FROM_PARENT respectively). STATUS_INSUFFICIENT_RESOURCES is returned if memory pool allocation for the descriptor buffer has failed. A failure NTSTATUS is returned otherwise.
- Parameters
-
[in] ParentDescriptor A security descriptor of the parent object that is being created. [in] ExplicitDescriptor An explicit security descriptor that is applied to a new object. [out] NewDescriptor The new allocated security descriptor. [in] IsDirectoryObject Set this to TRUE if the newly created object is a directory object, otherwise set this to FALSE. [in] SubjectContext Security subject context of the new object. [in] GenericMapping Generic mapping of access mask rights. [in] PoolType This parameter is unused.
- Returns
- See SeAssignSecurityEx.
- Parameters
-
[in] SecurityDescriptor A security descriptor. [out] QuotaInfoSize The returned quota size of the given security descriptor to the caller. The function may return 0 to this parameter if the descriptor doesn't have a group or a discretionary access control list (DACL) even.
- Returns
- Returns STATUS_SUCCESS if the quota size of a security descriptor has been computed successfully. STATUS_UNKNOWN_REVISION is returned if the security descriptor has an invalid revision.
Definition at line 923 of file Messaging.c.
◆ _Out_writes_bytes_opt_() [1/2]
| _In_ SECURITY_INFORMATION _Out_writes_bytes_opt_ | ( | Length | ) |
◆ _Out_writes_bytes_opt_() [2/2]
| _In_ OBJECT_INFORMATION_CLASS _Out_writes_bytes_opt_ | ( | ObjectInformationLength | ) |
◆ NtClose()
| NTSYSCALLAPI NTSTATUS NTAPI NtClose | ( | _In_ HANDLE | Handle | ) |
◆ NtCloseObjectAuditAlarm()
| __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtCloseObjectAuditAlarm | ( | _In_ PUNICODE_STRING | SubsystemName, |
| _In_opt_ PVOID | HandleId, | ||
| _In_ BOOLEAN | GenerateOnClose | ||
| ) |
◆ NtCreateDirectoryObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtCreateDirectoryObject | ( | _Out_ PHANDLE | DirectoryHandle, |
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_ATTRIBUTES | ObjectAttributes | ||
| ) |
◆ NtCreateSymbolicLinkObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtCreateSymbolicLinkObject | ( | _Out_ PHANDLE | SymbolicLinkHandle, |
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_ATTRIBUTES | ObjectAttributes, | ||
| _In_ PUNICODE_STRING | Name | ||
| ) |
◆ NtDeleteObjectAuditAlarm()
| __kernel_entry NTSYSCALLAPI NTSTATUS NTAPI NtDeleteObjectAuditAlarm | ( | _In_ PUNICODE_STRING | SubsystemName, |
| _In_opt_ PVOID | HandleId, | ||
| _In_ BOOLEAN | GenerateOnClose | ||
| ) |
◆ NtDuplicateObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtDuplicateObject | ( | _In_ HANDLE | SourceProcessHandle, |
| _In_ HANDLE | SourceHandle, | ||
| _In_ HANDLE | TargetProcessHandle, | ||
| _Out_ PHANDLE | TargetHandle, | ||
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ ULONG | HandleAttributes, | ||
| _In_ ULONG | Options | ||
| ) |
◆ NtMakePermanentObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtMakePermanentObject | ( | _In_ HANDLE | Object | ) |
◆ NtMakeTemporaryObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtMakeTemporaryObject | ( | _In_ HANDLE | Handle | ) |
◆ NtOpenDirectoryObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtOpenDirectoryObject | ( | _Out_ PHANDLE | FileHandle, |
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_ATTRIBUTES | ObjectAttributes | ||
| ) |
◆ NtOpenJobObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtOpenJobObject | ( | _Out_ PHANDLE | JobHandle, |
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_ATTRIBUTES | ObjectAttributes | ||
| ) |
◆ NtOpenSymbolicLinkObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtOpenSymbolicLinkObject | ( | _Out_ PHANDLE | SymbolicLinkHandle, |
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_ATTRIBUTES | ObjectAttributes | ||
| ) |
◆ NtQueryDirectoryObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtQueryDirectoryObject | ( | _In_ HANDLE | DirectoryHandle, |
| _Out_ PVOID | Buffer, | ||
| _In_ ULONG | BufferLength, | ||
| _In_ BOOLEAN | ReturnSingleEntry, | ||
| _In_ BOOLEAN | RestartScan, | ||
| _Inout_ PULONG | Context, | ||
| _Out_opt_ PULONG | ReturnLength | ||
| ) |
◆ NtQuerySymbolicLinkObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtQuerySymbolicLinkObject | ( | _In_ HANDLE | SymLinkObjHandle, |
| _Out_ PUNICODE_STRING | LinkTarget, | ||
| _Out_opt_ PULONG | DataWritten | ||
| ) |
◆ NtSetInformationObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtSetInformationObject | ( | _In_ HANDLE | ObjectHandle, |
| _In_ OBJECT_INFORMATION_CLASS | ObjectInformationClass, | ||
| _In_reads_bytes_(Length) PVOID | ObjectInformation, | ||
| _In_ ULONG | Length | ||
| ) |
Sets information for an object or for a handle to an object.
- Parameters
-
[in] ObjectHandle Handle to the target object. For the ObjectHandleFlagInformationclass, this is the handle whose attributes are to be modified. For theObjectSessionInformationclass, this must be a handle to a directory object.[in] ObjectInformationClass Specifies the type of information to set. The only supported classes are: ObjectHandleFlagInformation and ObjectSessionInformation. (Windows 10 RS2 added support for ObjectSessionObjectInformation. Windows 11 25H2 added support for ObjectSetRefTraceInformation.) [in] ObjectInformation Pointer to a caller-supplied buffer containing the information to set. For the ObjectHandleFlagInformationclass, this buffer must point to anOBJECT_HANDLE_ATTRIBUTE_INFORMATIONstructure describing the desired handle attributes (inherit and protect-from-close). For theObjectSessionInformationclass, this parameter is ignored.[in] Length The size in bytes, of the buffer pointed to by ObjectInformation. For theObjectHandleFlagInformationclass, this must be sizeof(OBJECT_HANDLE_ATTRIBUTE_INFORMATION). For theObjectSessionInformationclass, this parameter is ignored.
- Returns
- STATUS_SUCCESS or an appropriate error value.
- Remarks
- This routine only supports the following classes:
ObjectHandleFlagInformation, to set theOBJ_INHERITandOBJ_PROTECT_CLOSEattributes of a handle.ObjectSessionInformation, to associate a directory object with the caller's current session identifier; this requires the SeTcbPrivilege.
ObjectHandleFlagInformation operates on per-handle state rather than on the underlying object itself.
Definition at line 1844 of file oblife.c.
Referenced by BaseInitializeStaticServerData(), ProtectHandle(), SetHandleInformation(), SockCreateOrReferenceAsyncThread(), SockGetAsyncSelectHelperAfdHandle(), and UnProtectHandle().
◆ NtSetSecurityObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtSetSecurityObject | ( | _In_ HANDLE | Handle, |
| _In_ SECURITY_INFORMATION | SecurityInformation, | ||
| _In_ PSECURITY_DESCRIPTOR | SecurityDescriptor | ||
| ) |
◆ NtSignalAndWaitForSingleObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtSignalAndWaitForSingleObject | ( | _In_ HANDLE | SignalObject, |
| _In_ HANDLE | WaitObject, | ||
| _In_ BOOLEAN | Alertable, | ||
| _In_ PLARGE_INTEGER | Time | ||
| ) |
◆ NtWaitForMultipleObjects()
| NTSYSCALLAPI NTSTATUS NTAPI NtWaitForMultipleObjects | ( | _In_ ULONG | Count, |
| _In_ HANDLE | Object[], | ||
| _In_ WAIT_TYPE | WaitType, | ||
| _In_ BOOLEAN | Alertable, | ||
| _In_ PLARGE_INTEGER | Time | ||
| ) |
◆ NtWaitForMultipleObjects32()
| NTSTATUS NTAPI NtWaitForMultipleObjects32 | ( | _In_ ULONG | ObjectCount, |
| _In_ PLONG | Handles, | ||
| _In_ WAIT_TYPE | WaitType, | ||
| _In_ BOOLEAN | Alertable, | ||
| _In_opt_ PLARGE_INTEGER | TimeOut | ||
| ) |
◆ NtWaitForSingleObject()
| NTSYSCALLAPI NTSTATUS NTAPI NtWaitForSingleObject | ( | _In_ HANDLE | Object, |
| _In_ BOOLEAN | Alertable, | ||
| _In_opt_ PLARGE_INTEGER | Timeout | ||
| ) |
◆ ObAssignSecurity()
| NTKERNELAPI NTSTATUS NTAPI ObAssignSecurity | ( | _In_ PACCESS_STATE | AccessState, |
| _In_ PSECURITY_DESCRIPTOR | SecurityDescriptor, | ||
| _In_ PVOID | Object, | ||
| _In_ POBJECT_TYPE | Type | ||
| ) |
◆ ObCloseHandle()
| NTKERNELAPI NTSTATUS NTAPI ObCloseHandle | ( | _In_ HANDLE | Handle, |
| _In_ KPROCESSOR_MODE | AccessMode | ||
| ) |
◆ ObCreateObject()
| NTKERNELAPI NTSTATUS NTAPI ObCreateObject | ( | _In_opt_ KPROCESSOR_MODE | ObjectAttributesAccessMode, |
| _In_ POBJECT_TYPE | ObjectType, | ||
| _In_opt_ POBJECT_ATTRIBUTES | ObjectAttributes, | ||
| _In_ KPROCESSOR_MODE | AccessMode, | ||
| _Inout_opt_ PVOID | ParseContext, | ||
| _In_ ULONG | ObjectSize, | ||
| _In_opt_ ULONG | PagedPoolCharge, | ||
| _In_opt_ ULONG | NonPagedPoolCharge, | ||
| _Out_ PVOID * | Object | ||
| ) |
◆ ObCreateObjectType()
| NTKERNELAPI NTSTATUS NTAPI ObCreateObjectType | ( | _In_ PUNICODE_STRING | TypeName, |
| _In_ POBJECT_TYPE_INITIALIZER | ObjectTypeInitializer, | ||
| _Reserved_ PVOID | Reserved, | ||
| _Out_ POBJECT_TYPE * | ObjectType | ||
| ) |
◆ ObDereferenceObjectDeferDelete()
| NTKERNELAPI VOID NTAPI ObDereferenceObjectDeferDelete | ( | _In_ PVOID | Object | ) |
◆ ObDereferenceSecurityDescriptor()
| NTKERNELAPI VOID NTAPI ObDereferenceSecurityDescriptor | ( | _Inout_ PSECURITY_DESCRIPTOR | SecurityDescriptor, |
| _In_ ULONG | Count | ||
| ) |
◆ ObFindHandleForObject()
| NTKERNELAPI BOOLEAN NTAPI ObFindHandleForObject | ( | _In_ PEPROCESS | Process, |
| _In_ PVOID | Object, | ||
| _In_ POBJECT_TYPE | ObjectType, | ||
| _In_opt_ POBJECT_HANDLE_INFORMATION | HandleInformation, | ||
| _Out_opt_ PHANDLE | Handle | ||
| ) |
◆ ObGetObjectPointerCount()
| NTKERNELAPI ULONG NTAPI ObGetObjectPointerCount | ( | _In_ PVOID | Object | ) |
◆ ObLogSecurityDescriptor()
| NTKERNELAPI NTSTATUS NTAPI ObLogSecurityDescriptor | ( | _In_ PSECURITY_DESCRIPTOR | InputSecurityDescriptor, |
| _Out_ PSECURITY_DESCRIPTOR * | OutputSecurityDescriptor, | ||
| _In_ ULONG | RefBias | ||
| ) |
◆ ObOpenObjectByName()
| NTKERNELAPI NTSTATUS NTAPI ObOpenObjectByName | ( | _In_ POBJECT_ATTRIBUTES | ObjectAttributes, |
| _In_ POBJECT_TYPE | ObjectType, | ||
| _In_ KPROCESSOR_MODE | AccessMode, | ||
| _In_opt_ PACCESS_STATE | PassedAccessState, | ||
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _Inout_opt_ PVOID | ParseContext, | ||
| _Out_ PHANDLE | Handle | ||
| ) |
◆ ObReferenceObjectByName()
| NTKERNELAPI NTSTATUS NTAPI ObReferenceObjectByName | ( | _In_ PUNICODE_STRING | ObjectName, |
| _In_ ULONG | Attributes, | ||
| _In_opt_ PACCESS_STATE | PassedAccessState, | ||
| _In_opt_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_TYPE | ObjectType, | ||
| _In_ KPROCESSOR_MODE | AccessMode, | ||
| _Inout_opt_ PVOID | ParseContext, | ||
| _Out_ PVOID * | Object | ||
| ) |
◆ ObReferenceSecurityDescriptor()
| NTKERNELAPI VOID NTAPI ObReferenceSecurityDescriptor | ( | _In_ PSECURITY_DESCRIPTOR | SecurityDescriptor, |
| _In_ ULONG | Count | ||
| ) |
◆ ObSetHandleAttributes()
| NTKERNELAPI NTSTATUS NTAPI ObSetHandleAttributes | ( | _In_ HANDLE | Handle, |
| _In_ POBJECT_HANDLE_ATTRIBUTE_INFORMATION | HandleFlags, | ||
| _In_ KPROCESSOR_MODE | PreviousMode | ||
| ) |
Sets the attributes (inheritable and protect-from-close) of an existing object handle.
- Parameters
-
[in] Handle Handle whose attributes are to be modified. [in] HandleFlags Pointer to an OBJECT_HANDLE_ATTRIBUTE_INFORMATIONstructure specifying the new values for the handle's inherit and protect-from-close attributes.[in] PreviousMode Processor mode of the original caller. This is used to determine whether Handlemay refer to a kernel handle.
- Returns
- STATUS_SUCCESS on success, or STATUS_ACCESS_DENIED if the handle could not be located or its attributes could not be changed.
- Remarks
- This routine operates on per-handle state rather than on the underlying object itself. Requests to make a handle inheritable fail if the target object type does not permit the
OBJ_INHERITattribute.
Definition at line 3318 of file obhandle.c.
Referenced by NtSetInformationObject().
◆ ObSetSecurityObjectByPointer()
| NTKERNELAPI NTSTATUS NTAPI ObSetSecurityObjectByPointer | ( | _In_ PVOID | Object, |
| _In_ SECURITY_INFORMATION | SecurityInformation, | ||
| _In_ PSECURITY_DESCRIPTOR | SecurityDescriptor | ||
| ) |
◆ ZwClose()
Referenced by __drv_maxIRQL(), _Function_class_(), _IRQL_requires_max_(), _Success_(), acpi_create_registry_table(), acpi_create_volatile_registry_tables(), ACPIDispatchDeviceControl(), AcpiOsExecute(), AdvancedErrorChecks(), AfdCloseSocket(), allow_degraded_mount(), ApphelpCacheRead(), ApphelpCacheWrite(), AtaCreateIdeDirectory(), AtaFdoCreatePortThread(), AtaGetRegistryKey(), AtaInPEMode(), AtaLegacyShouldDetectChannels(), AtaSetPortRegistryKey(), AtaSetRegistryKey(), BasicBehaviorChecks(), BehaviorChecks(), BroadcastOpen(), BuildWindowStationNameList(), CheckForDeviceDesc(), CheckSection_(), ClasspIsMediaChangeDisabledDueToHardwareLimitation(), ClasspIsMediaChangeDisabledForClass(), ClasspMediaChangeDeviceInstanceOverride(), ClassPnp(), ClasspScanForSpecialInRegistry(), Close(), CloseKey(), ClosePin(), CloseRemoteDatabase(), CmBattAddDevice(), CmBattCreateFdo(), CmLoadKey(), CmpCloseHiveFiles(), CmpCreateEvent(), CmpInitHiveFromFile(), CmpInitializeHiveList(), CmpInitializeMachineDependentConfiguration(), CmpLinkHiveToMaster(), CmpLinkKeyToHive(), CmpOpenHiveFiles(), CompBattGetDeviceObjectPointer(), CreateClientPort(), CreateDeviceFromRegistry(), CreateGreenFdo(), CreateMixerPinAndSetFormat(), CreatePinCallback(), CreateRemoteDatabaseWorker(), FxSystemThread::CreateThread(), DiskAddDevice(), DiskCreateFdo(), DiskRemoveDevice(), DriverEntry(), EngLoadModuleEx(), EngpGetDisplayDriverAccelerationLevel(), EngpGetDisplayDriverParameters(), EngpGetRegistryHandleFromDeviceMap(), EngpHasVgaDriver(), EngpUpdateGraphicsDeviceList(), EngpUpdateMonitorDevices(), EnumDeviceKeys(), EnumerateDevices(), EnumerateSoundDevices(), EnumerateSubkey(), ExCreateCallback(), ExpGetCurrentUserUILanguage(), ExpSetCurrentUserUILanguage(), ExpUuidLoadSequenceNumber(), ExpUuidSaveSequenceNumber(), ExpValidateNlsLocaleId(), Ext2StartReaper(), FatGetCompatibilityModeValue(), FatIsFujitsuFMR(), FdoCreateRawParallelPdo(), FdoRemoveAdapter(), FileSectionViewPermissionCheck(), FindDeviceDescForAdapter(), FindProductName(), FinishThread(), FontLink_LoadDefaultCharset(), FontLink_LoadDefaultFonts(), FontLink_LoadSettings(), FontLink_PopulateEntries(), FreeGlobalData(), fs_ignored(), FsRecRegisterFs(), FsRtlDeregisterUncProvider(), FsRtlGetTunnelParameterValue(), FsRtlInitializeWorkerThread(), FsRtlpIsDfsEnabled(), FsRtlRegisterUncProvider(), FsRtlTest_StartTest(), get_registry_value(), GetClassRegistryHandle(), GetClassServicePath(), GetFilterAltitude(), GetImageName(), GetObjectType(), GetProcessorInformation(), GetRegistryValueBuffer(), GetVersionRegistryHandle(), GetVersionServicePath(), HalpDmaAllocateChildAdapter(), HalpGetChipHacks(), HalpGetNMICrashFlag(), HalpMarkAcpiHal(), HalpMarkChipsetDecode(), HalpQueryPciRegistryInfo(), HalpRegisterPciDebuggingDeviceInfo(), HalpReportSerialNumber(), i8042StoreSMBiosTables(), InitDisplayDriver(), InitializeProvider(), InitMetrics(), InitUserImpl(), InitVideo(), IntDeleteRegFontEntries(), IntGdiAddFontResourceSingle(), IntGetFullFileName(), IntLoadFontsInRegistry(), IntLoadFontSubstList(), IntLoadRegistryParameters(), IntLoadSystemFonts(), IntQueryUserSecurityIdentification(), IntVideoPortChildQueryId(), IntVideoPortMapPhysicalMemory(), IoCreateDriver(), IoCreateSymbolicLink(), IoCreateUnprotectedSymbolicLink(), IoDeleteSymbolicLink(), IoGetDeviceInterfaceAlias(), IoGetDeviceInterfaces(), IoOpenDeviceInterfaceRegistryKey(), IoOpenDeviceRegistryKey(), IopBootLog(), IopCreateDeviceKeyPath(), IopCreateEvent(), IopCreateFile(), IopCreateLogFile(), IopCreateRegistryKeyEx(), IopEnumerateDetectedDevices(), IopGetDeviceObjectPointer(), IopGetParentIdPrefix(), IopInitializeBuiltinDriver(), IopInitializeDriverModule(), IopInitializePlugPlayServices(), IopInstallCriticalDevice(), IopIsFirmwareMapperDisabled(), IopLoadUnloadDriverWorker(), IopLogWorker(), IopOpenInterfaceKey(), IopOpenOrCreateSymbolicLinkSubKeys(), IopQueryBusDescription(), IopQueryDeviceCapabilities(), IopQueryDeviceDescription(), IopSaveBootLogToFile(), IopSetDeviceInstanceData(), IopSetServiceEnumData(), IopShouldProcessDevice(), IopStartRamdisk(), IopUpdateControlKeyWithResources(), IopUpdateResourceMap(), IopUpdateRootKey(), IopWriteLogFile(), IoQueryDeviceDescription(), IoRegisterDeviceInterface(), IoReportDetectedDevice(), IoReportHalResourceUsage(), IoSetDeviceInterfaceState(), IoSetSystemPartition(), KdbpCliInit(), KdpDebugLogInit(), KeI386VdmInitialize(), KsCacheMedium(), KsFilterFactoryUpdateCacheData(), KsMapModuleName(), KspEnumerateBusRegistryKeys(), KspInstallInterface(), KspReadMediaCategory(), KspScanBus(), KsRegisterFilterWithNoKSPins(), LogMessage(), LsaDeregisterLogonProcess(), LsaRegisterLogonProcess(), main(), MiCreateMemoryEvent(), MiShutdownSystem(), MmCheckSystemImage(), MmInitBsmThread(), MmLoadSystemImage(), MountMgrMountedDeviceArrival(), MountMgrQuerySymbolicLink(), MountMgrValidateBackPointer(), MupCloseUncProvider(), MupGetProviderInformation(), MuppIsDfsEnabled(), Mx::MxClose(), ndisBindMiniportsToProtocol(), NdisCloseConfiguration(), NdisIPnPStartDevice(), NdisOpenConfiguration(), NdisOpenConfigurationKeyByIndex(), NdisOpenConfigurationKeyByName(), NdisOpenFile(), NdisOpenProtocolConfiguration(), nfs41_CreateConnection(), nfs41_DeleteConnection(), NtCreatePagingFile(), NtUserLoadKeyboardLayoutEx(), ObjectBasicInformationTests(), ObjectNameInformationTests(), ObtClose(), ObtCreateObjectTypes(), OnlineMountedVolumes(), OpenDevice(), OpenRegistryHandlesFromSymbolicLink(), OpenSubkey(), PageFileBehaviorChecks(), PciAcpiFindRsdt(), PciAddDevice(), PciGetBiosConfig(), PciGetIrqRoutingTableFromRegistry(), PciGetRegistryValue(), PciIdeXCreateIdeDirectory(), PciSaveBiosConfig(), PcNewRegistryKey(), Phase1InitializationDiscard(), PiAttachFilterDriversCallback(), PiCallDriverAddDevice(), PiControlInitializeDevice(), PiGetDeviceRegistryProperty(), PiInitCacheGroupInformation(), PiInitializeDevNode(), Pin_fnClose(), PiStartDeviceFinal(), PnpDeviceObjectToDeviceInstance(), PopAddRemoveSysCapsCallback(), PopFlushVolumes(), PopFlushVolumeWorker(), PopQueryBatteryState(), PopReadShutdownPolicy(), ProcessorSetFriendlyName(), PsLocateSystemDll(), QueryVolumeName(), read_group_mappings(), read_mappings(), read_registry(), ReadIpConfiguration(), ReconcileThisDatabaseWithMasterWorker(), RegGetSectionDWORD(), registry_load_volume_options(), registry_mark_volume_mounted(), registry_mark_volume_unmounted_path(), RegistryInitAdapterKey(), RegistryInitLunKey(), RtlAcquirePrivilege(), RtlAdjustPrivilege(), RtlCheckRegistryKey(), RtlCreateBootStatusDataFile(), RtlCreateSystemVolumeInformationFolder(), RtlCreateUserProcess(), RtlFormatCurrentUserKeyPath(), RtlGetNtProductType(), RtlImpersonateSelf(), RtlpCloseRegistryHandle(), RtlpMapFile(), RtlpSysVolTakeOwnership(), RtlQueryRegistryValues(), RtlReleasePrivilege(), RtlUnlockBootStatusData(), RxGetRegistryParameters(), RxInitializeDispatcher(), RxReadRegistryParameters(), RxSpinUpWorkerThread(), ScsiPortInitialize(), SearchForLegacyDrivers(), SeGetLogonIdDeviceMap(), SepCleanupLUIDDeviceMapDirectory(), SepInitializationPhase1(), SepRegQueryHelper(), SerenumDetectLegacyDevice(), SerenumDetectPnpDevice(), SerialPnpStartDevice(), SermouseDetectLegacyDevice(), ServiceCheckBootStart(), SetRegistryValue(), SharedMemoryFree(), SimpleErrorChecks(), SocketDestroy(), SocketShutdown(), SpiCreatePortConfig(), SpiInitOpenKeys(), START_TEST(), sys_shutdown(), SysAudio_Shutdown(), SystemProcessTest(), SystemProcessWorker(), TdiCloseDevice(), TdiOpenDevice(), Test_IoOpenDeviceInterfaceRegistryKey(), TestAllInformation(), TestCreateEvent(), TestEventConcurrent(), TestPhysicalMemorySection(), TestSymlinks(), TestTcpConnect(), UDFDismountDevice(), uninit(), USBAudioInitComponentId(), USBAudioRegCreateMediaCategoriesKey(), USBD_GetPdoRegistryParameter(), USBH_SetPdoRegistryParameter(), USBH_WriteFailReasonID(), USBPORT_GetRegistryKeyValueFullInfo(), USBPORT_SetRegistryKeyValue(), UserChangeDisplaySettings(), UserEnumDisplayDevices(), UserEnumRegistryDisplaySettings(), UserGetLanguageID(), UserLoadImage(), UserLoadKbdFile(), UserProcessDestroy(), VdmpInitialize(), VfatSetRenameInformation(), VfdCloseImage(), VfdCreateDevice(), VfdDeleteDevice(), VfdOpenImage(), ViCreateDriveLetter(), ViMountImage(), WdfDeleteKmdfVersionFromRegistry(), WdfLdrDiagnosticsValueByNameAsULONG(), WdfWriteKmdfVersionToRegistry(), WdmAudCleanup(), WdmAudIoctlClose(), WdmAudOpenSysAudioDevices(), WorkerThread(), WskSocket(), xHalIoAssignDriveLetters(), and CRegistryKey::~CRegistryKey().
◆ ZwCloseObjectAuditAlarm()
| NTSYSAPI NTSTATUS NTAPI ZwCloseObjectAuditAlarm | ( | _In_ PUNICODE_STRING | SubsystemName, |
| _In_ PVOID | HandleId, | ||
| _In_ BOOLEAN | GenerateOnClose | ||
| ) |
◆ ZwCreateDirectoryObject()
| NTSYSAPI NTSTATUS NTAPI ZwCreateDirectoryObject | ( | _Out_ PHANDLE | DirectoryHandle, |
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_ATTRIBUTES | ObjectAttributes | ||
| ) |
◆ ZwCreateSymbolicLinkObject()
| NTSYSAPI NTSTATUS NTAPI ZwCreateSymbolicLinkObject | ( | _Out_ PHANDLE | SymbolicLinkHandle, |
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_ATTRIBUTES | ObjectAttributes, | ||
| _In_ PUNICODE_STRING | Name | ||
| ) |
Referenced by IoCreateSymbolicLink(), IoCreateUnprotectedSymbolicLink(), SeGetLogonIdDeviceMap(), and START_TEST().
◆ ZwDeleteObjectAuditAlarm()
| NTSYSAPI NTSTATUS NTAPI ZwDeleteObjectAuditAlarm | ( | _In_ PUNICODE_STRING | SubsystemName, |
| _In_ PVOID | HandleId, | ||
| _In_ BOOLEAN | GenerateOnClose | ||
| ) |
◆ ZwMakePermanentObject()
◆ ZwMakeTemporaryObject()
Referenced by DiskCreateFdo(), DiskRemoveDevice(), IoDeleteSymbolicLink(), ObtClose(), SepCleanupLUIDDeviceMapDirectory(), and TestReference().
◆ ZwOpenDirectoryObject()
| NTSYSAPI NTSTATUS NTAPI ZwOpenDirectoryObject | ( | _Out_ PHANDLE | FileHandle, |
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_ATTRIBUTES | ObjectAttributes | ||
| ) |
◆ ZwOpenJobObject()
| NTSYSAPI NTSTATUS NTAPI ZwOpenJobObject | ( | _Out_ PHANDLE | JobHandle, |
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_ATTRIBUTES | ObjectAttributes | ||
| ) |
◆ ZwOpenSymbolicLinkObject()
| NTSYSAPI NTSTATUS NTAPI ZwOpenSymbolicLinkObject | ( | _Out_ PHANDLE | SymbolicLinkHandle, |
| _In_ ACCESS_MASK | DesiredAccess, | ||
| _In_ POBJECT_ATTRIBUTES | ObjectAttributes | ||
| ) |
◆ ZwSetInformationObject()
| NTSYSAPI NTSTATUS NTAPI ZwSetInformationObject | ( | _In_ HANDLE | ObjectHandle, |
| _In_ OBJECT_INFORMATION_CLASS | ObjectInformationClass, | ||
| _In_ PVOID | ObjectInformation, | ||
| _In_ ULONG | Length | ||
| ) |
◆ ZwSignalAndWaitForSingleObject()
| NTSYSAPI NTSTATUS NTAPI ZwSignalAndWaitForSingleObject | ( | _In_ HANDLE | SignalObject, |
| _In_ HANDLE | WaitObject, | ||
| _In_ BOOLEAN | Alertable, | ||
| _In_opt_ PLARGE_INTEGER | Time | ||
| ) |
◆ ZwWaitForMultipleObjects()
| NTSYSAPI NTSTATUS NTAPI ZwWaitForMultipleObjects | ( | _In_ ULONG | Count, |
| _In_ HANDLE | Object[], | ||
| _In_ WAIT_TYPE | WaitType, | ||
| _In_ BOOLEAN | Alertable, | ||
| _In_ PLARGE_INTEGER | Time | ||
| ) |
Referenced by KernelModeTest().
Variable Documentation
◆ Buffer
◆ BufferLength
◆ Context
◆ DesiredAccess
◆ HandleAttributes
Definition at line 442 of file obfuncs.h.
Referenced by NtDuplicateObject(), NtOpenProcessTokenEx(), NtOpenThreadTokenEx(), ObDuplicateObject(), ObOpenObjectByPointer(), ObpCreateHandle(), ObpCreateUnnamedHandle(), ObpEnumFindHandleProcedure(), ObpIncrementHandleCount(), ObpIncrementUnnamedHandleCount(), SepOpenThreadToken(), START_TEST(), UserOpenInputDesktop(), and WmipOpenGuidObject().
◆ Length
◆ LengthNeeded
◆ ObjectInformationClass
| _In_ OBJECT_INFORMATION_CLASS ObjectInformationClass |
◆ ObjectInformationLength
| _In_ OBJECT_INFORMATION_CLASS _In_ ULONG ObjectInformationLength |
◆ Options
◆ RestartScan
◆ ReturnLength
◆ ReturnSingleEntry
◆ SecurityInformation
| _In_ SECURITY_INFORMATION SecurityInformation |
◆ SourceHandle
Definition at line 438 of file obfuncs.h.
Referenced by CmpConvertHandleToKernelHandle(), CON_API(), MoveFileWithProgressW(), NtDuplicateObject(), ObDuplicateObject(), PrivMoveFileIdentityW(), and SetupMoveFile().
◆ TargetHandle
Definition at line 440 of file obfuncs.h.
Referenced by AcpiEvaluateObjectTyped(), AcpiNsHandleToName(), AcpiNsHandleToPathname(), IopOpenLinkOrRenameTarget(), KernelModeTest(), NtDuplicateObject(), NtSetInformationFile(), ObDuplicateObject(), and VfatSetRenameInformation().
