smmsg.h File Reference

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Classes
struct	_SM_CREATE_FOREIGN_SESSION_MSG
struct	_SM_SESSION_COMPLETE_MSG
struct	_SM_TERMINATE_FOREIGN_SESSION_MSG
struct	_SM_EXEC_PGM_MSG
struct	_SM_LOAD_DEFERED_SUBSYSTEM_MSG
struct	_SM_START_CSR_MSG
struct	_SM_STOP_CSR_MSG
struct	_SM_API_MSG
struct	_SB_CREATE_SESSION_MSG
struct	_SB_TERMINATE_SESSION_MSG
struct	_SB_FOREIGN_SESSION_COMPLETE_MSG
struct	_SB_CREATE_PROCESS_MSG
struct	_SB_CONNECTION_INFO
struct	_SB_API_MSG

Macros
#define	_SM_MSG_
#define	SB_PROCESS_FLAGS_DEBUG   0x1
#define	SB_PROCESS_FLAGS_WAIT_ON_THREAD   0x2
#define	SB_PROCESS_FLAGS_RESERVE_1MB   0x8
#define	SB_PROCESS_FLAGS_SKIP_CHECKS   0x20

Typedefs
typedef enum _SMSRV_API_NUMBER	SMSRV_API_NUMBER
typedef struct _SM_CREATE_FOREIGN_SESSION_MSG	SM_CREATE_FOREIGN_SESSION_MSG
typedef struct _SM_CREATE_FOREIGN_SESSION_MSG *	PSM_CREATE_FOREIGN_SESSION_MSG
typedef struct _SM_SESSION_COMPLETE_MSG	SM_SESSION_COMPLETE_MSG
typedef struct _SM_SESSION_COMPLETE_MSG *	PSM_SESSION_COMPLETE_MSG
typedef struct _SM_TERMINATE_FOREIGN_SESSION_MSG	SM_TERMINATE_FOREIGN_SESSION_MSG
typedef struct _SM_TERMINATE_FOREIGN_SESSION_MSG *	PSM_TERMINATE_FOREIGN_SESSION_MSG
typedef struct _SM_EXEC_PGM_MSG	SM_EXEC_PGM_MSG
typedef struct _SM_EXEC_PGM_MSG *	PSM_EXEC_PGM_MSG
typedef struct _SM_LOAD_DEFERED_SUBSYSTEM_MSG	SM_LOAD_DEFERED_SUBSYSTEM_MSG
typedef struct _SM_LOAD_DEFERED_SUBSYSTEM_MSG *	PSM_LOAD_DEFERED_SUBSYSTEM_MSG
typedef struct _SM_START_CSR_MSG	SM_START_CSR_MSG
typedef struct _SM_START_CSR_MSG *	PSM_START_CSR_MSG
typedef struct _SM_STOP_CSR_MSG	SM_STOP_CSR_MSG
typedef struct _SM_STOP_CSR_MSG *	PSM_STOP_CSR_MSG
typedef struct _SM_API_MSG	SM_API_MSG
typedef struct _SM_API_MSG *	PSM_API_MSG
typedef enum _SB_API_NUMBER	SB_API_NUMBER
typedef struct _SB_CREATE_SESSION_MSG	SB_CREATE_SESSION_MSG
typedef struct _SB_CREATE_SESSION_MSG *	PSB_CREATE_SESSION_MSG
typedef struct _SB_TERMINATE_SESSION_MSG	SB_TERMINATE_SESSION_MSG
typedef struct _SB_TERMINATE_SESSION_MSG *	PSB_TERMINATE_SESSION_MSG
typedef struct _SB_FOREIGN_SESSION_COMPLETE_MSG	SB_FOREIGN_SESSION_COMPLETE_MSG
typedef struct _SB_FOREIGN_SESSION_COMPLETE_MSG *	PSB_FOREIGN_SESSION_COMPLETE_MSG
typedef struct _SB_CREATE_PROCESS_MSG	SB_CREATE_PROCESS_MSG
typedef struct _SB_CREATE_PROCESS_MSG *	PSB_CREATE_PROCESS_MSG
typedef struct _SB_CONNECTION_INFO	SB_CONNECTION_INFO
typedef struct _SB_CONNECTION_INFO *	PSB_CONNECTION_INFO
typedef struct _SB_API_MSG	SB_API_MSG
typedef struct _SB_API_MSG *	PSB_API_MSG
typedef BOOLEAN(NTAPI *	PSB_API_ROUTINE) (IN PSB_API_MSG SbApiMsg)

Enumerations
enum	_SMSRV_API_NUMBER {   SmpCreateForeignSessionApi, SmpSessionCompleteApi, SmpTerminateForeignSessionApi, SmpExecPgmApi,   SmpLoadDeferedSubsystemApi, SmpStartCsrApi, SmpStopCsrApi, SmpMaxApiNumber }
enum	_SB_API_NUMBER {   SbpCreateSession, SbpTerminateSession, SbpForeignSessionComplete, SbpCreateProcess,   SbpMaxApiNumber }

Functions
	C_ASSERT (sizeof(SM_EXEC_PGM_MSG)==0x48)
	C_ASSERT (sizeof(SM_API_MSG)==0x130)
	C_ASSERT (sizeof(SB_CONNECTION_INFO)==0xF4)
	C_ASSERT (sizeof(SB_API_MSG)==0x110)
NTSTATUS NTAPI	SmConnectToSm (IN PUNICODE_STRING SbApiPortName, IN HANDLE SbApiPort, IN ULONG ImageType, OUT PHANDLE SmApiPort)
NTSTATUS NTAPI	SmExecPgm (IN HANDLE SmApiPort, IN PRTL_USER_PROCESS_INFORMATION ProcessInformation, IN BOOLEAN DebugFlag)
NTSTATUS NTAPI	SmSessionComplete (IN HANDLE SmApiPort, IN ULONG SessionId, IN NTSTATUS SessionStatus)
NTSTATUS NTAPI	SmStartCsr (IN HANDLE SmApiPort, OUT PULONG pMuSessionId, IN PUNICODE_STRING CommandLine, OUT PHANDLE pWindowsSubSysProcessId, OUT PHANDLE pInitialCommandProcessId)
NTSTATUS NTAPI	SmStopCsr (IN HANDLE SmApiPort, IN ULONG SessionId)

Macro Definition Documentation

_SM_MSG_

#define _SM_MSG_

Definition at line 10 of file smmsg.h.

SB_PROCESS_FLAGS_DEBUG

#define SB_PROCESS_FLAGS_DEBUG   0x1

Definition at line 161 of file smmsg.h.

SB_PROCESS_FLAGS_RESERVE_1MB

#define SB_PROCESS_FLAGS_RESERVE_1MB   0x8

Definition at line 163 of file smmsg.h.

SB_PROCESS_FLAGS_SKIP_CHECKS

#define SB_PROCESS_FLAGS_SKIP_CHECKS   0x20

Definition at line 164 of file smmsg.h.

SB_PROCESS_FLAGS_WAIT_ON_THREAD

#define SB_PROCESS_FLAGS_WAIT_ON_THREAD   0x2

Definition at line 162 of file smmsg.h.

Typedef Documentation

PSB_API_MSG

typedef struct _SB_API_MSG * PSB_API_MSG

PSB_API_ROUTINE

typedef BOOLEAN(NTAPI * PSB_API_ROUTINE) (IN PSB_API_MSG SbApiMsg)

Definition at line 234 of file smmsg.h.

PSB_CONNECTION_INFO

typedef struct _SB_CONNECTION_INFO * PSB_CONNECTION_INFO

PSB_CREATE_PROCESS_MSG

typedef struct _SB_CREATE_PROCESS_MSG * PSB_CREATE_PROCESS_MSG

PSB_CREATE_SESSION_MSG

typedef struct _SB_CREATE_SESSION_MSG * PSB_CREATE_SESSION_MSG

PSB_FOREIGN_SESSION_COMPLETE_MSG

typedef struct _SB_FOREIGN_SESSION_COMPLETE_MSG * PSB_FOREIGN_SESSION_COMPLETE_MSG

PSB_TERMINATE_SESSION_MSG

typedef struct _SB_TERMINATE_SESSION_MSG * PSB_TERMINATE_SESSION_MSG

PSM_API_MSG

typedef struct _SM_API_MSG * PSM_API_MSG

PSM_CREATE_FOREIGN_SESSION_MSG

typedef struct _SM_CREATE_FOREIGN_SESSION_MSG * PSM_CREATE_FOREIGN_SESSION_MSG

PSM_EXEC_PGM_MSG

typedef struct _SM_EXEC_PGM_MSG * PSM_EXEC_PGM_MSG

PSM_LOAD_DEFERED_SUBSYSTEM_MSG

typedef struct _SM_LOAD_DEFERED_SUBSYSTEM_MSG * PSM_LOAD_DEFERED_SUBSYSTEM_MSG

PSM_SESSION_COMPLETE_MSG

typedef struct _SM_SESSION_COMPLETE_MSG * PSM_SESSION_COMPLETE_MSG

PSM_START_CSR_MSG

typedef struct _SM_START_CSR_MSG * PSM_START_CSR_MSG

PSM_STOP_CSR_MSG

typedef struct _SM_STOP_CSR_MSG * PSM_STOP_CSR_MSG

PSM_TERMINATE_FOREIGN_SESSION_MSG

typedef struct _SM_TERMINATE_FOREIGN_SESSION_MSG * PSM_TERMINATE_FOREIGN_SESSION_MSG

SB_API_MSG

typedef struct _SB_API_MSG SB_API_MSG

SB_API_NUMBER

typedef enum _SB_API_NUMBER SB_API_NUMBER

SB_CONNECTION_INFO

typedef struct _SB_CONNECTION_INFO SB_CONNECTION_INFO

SB_CREATE_PROCESS_MSG

typedef struct _SB_CREATE_PROCESS_MSG SB_CREATE_PROCESS_MSG

SB_CREATE_SESSION_MSG

typedef struct _SB_CREATE_SESSION_MSG SB_CREATE_SESSION_MSG

SB_FOREIGN_SESSION_COMPLETE_MSG

typedef struct _SB_FOREIGN_SESSION_COMPLETE_MSG SB_FOREIGN_SESSION_COMPLETE_MSG

SB_TERMINATE_SESSION_MSG

typedef struct _SB_TERMINATE_SESSION_MSG SB_TERMINATE_SESSION_MSG

SM_API_MSG

typedef struct _SM_API_MSG SM_API_MSG

SM_CREATE_FOREIGN_SESSION_MSG

typedef struct _SM_CREATE_FOREIGN_SESSION_MSG SM_CREATE_FOREIGN_SESSION_MSG

SM_EXEC_PGM_MSG

typedef struct _SM_EXEC_PGM_MSG SM_EXEC_PGM_MSG

SM_LOAD_DEFERED_SUBSYSTEM_MSG

typedef struct _SM_LOAD_DEFERED_SUBSYSTEM_MSG SM_LOAD_DEFERED_SUBSYSTEM_MSG

SM_SESSION_COMPLETE_MSG

typedef struct _SM_SESSION_COMPLETE_MSG SM_SESSION_COMPLETE_MSG

SM_START_CSR_MSG

typedef struct _SM_START_CSR_MSG SM_START_CSR_MSG

SM_STOP_CSR_MSG

typedef struct _SM_STOP_CSR_MSG SM_STOP_CSR_MSG

SM_TERMINATE_FOREIGN_SESSION_MSG

typedef struct _SM_TERMINATE_FOREIGN_SESSION_MSG SM_TERMINATE_FOREIGN_SESSION_MSG

SMSRV_API_NUMBER

typedef enum _SMSRV_API_NUMBER SMSRV_API_NUMBER

Enumeration Type Documentation

_SB_API_NUMBER

enum _SB_API_NUMBER

Enumerator
SbpCreateSession
SbpTerminateSession
SbpForeignSessionComplete
SbpCreateProcess
SbpMaxApiNumber

Definition at line 128 of file smmsg.h.

{
    SbpCreateSession,
    SbpTerminateSession,
    SbpForeignSessionComplete,
    SbpCreateProcess,

    SbpMaxApiNumber
} SB_API_NUMBER;

_SMSRV_API_NUMBER

enum _SMSRV_API_NUMBER

Enumerator
SmpCreateForeignSessionApi
SmpSessionCompleteApi
SmpTerminateForeignSessionApi
SmpExecPgmApi
SmpLoadDeferedSubsystemApi
SmpStartCsrApi
SmpStopCsrApi
SmpMaxApiNumber

Definition at line 25 of file smmsg.h.

{
    SmpCreateForeignSessionApi,
    SmpSessionCompleteApi,
    SmpTerminateForeignSessionApi,
    SmpExecPgmApi,
    SmpLoadDeferedSubsystemApi,
    SmpStartCsrApi,
    SmpStopCsrApi,

    SmpMaxApiNumber
} SMSRV_API_NUMBER;

Function Documentation

C_ASSERT() [1/4]

C_ASSERT

(

sizeof(SM_EXEC_PGM_MSG)

= =0x48

)

C_ASSERT() [2/4]

C_ASSERT

(

sizeof(SM_API_MSG)

= =0x130

)

C_ASSERT() [3/4]

C_ASSERT

(

sizeof(SB_CONNECTION_INFO)

= =0xF4

)

C_ASSERT() [4/4]

C_ASSERT

(

sizeof(SB_API_MSG)

= =0x110

)

SmConnectToSm()

NTSTATUS NTAPI SmConnectToSm	(	IN PUNICODE_STRING	SbApiPortName,
		IN HANDLE	SbApiPort,
		IN ULONG	ImageType,
		OUT PHANDLE	SmApiPort
	)

Definition at line 68 of file smclient.c.

{
    NTSTATUS Status;
    SB_CONNECTION_INFO ConnectInfo;
    UNICODE_STRING PortName;
    SECURITY_QUALITY_OF_SERVICE SecurityQos;
    ULONG ConnectInfoLength = sizeof(ConnectInfo);

    /* Setup the QoS structure */
    SecurityQos.ImpersonationLevel = SecurityIdentification;
    SecurityQos.ContextTrackingMode = SECURITY_DYNAMIC_TRACKING;
    SecurityQos.EffectiveOnly = TRUE;

    /* Set the SM API port name */
    RtlInitUnicodeString(&PortName, L"\\SmApiPort");

    /* Check if this is a client connecting to SMSS, or SMSS to itself */
    if (SbApiPortName)
    {
        /* A client SB port as well as an image type must be present */
        if (!(SbApiPort) || !(ImageType)) return STATUS_INVALID_PARAMETER_MIX;

        /* Copy the client port name, and NULL-terminate it */
        RtlCopyMemory(ConnectInfo.SbApiPortName,
                      SbApiPortName->Buffer,
                      SbApiPortName->Length);
        ConnectInfo.SbApiPortName[SbApiPortName->Length /
                                  sizeof(WCHAR)] = UNICODE_NULL;

        /* Save the subsystem type */
        ConnectInfo.SubsystemType = ImageType;
    }
    else
    {
        /* No client port, and the subsystem type is not set */
        ConnectInfo.SbApiPortName[0] = UNICODE_NULL;
        ConnectInfo.SubsystemType = IMAGE_SUBSYSTEM_UNKNOWN;
    }

    /* Connect to SMSS and exchange connection information */
    Status = NtConnectPort(SmApiPort,
                           &PortName,
                           &SecurityQos,
                           NULL,
                           NULL,
                           NULL,
                           &ConnectInfo,
                           &ConnectInfoLength);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("SmConnectToSm: Connect to Sm failed %lx\n", Status);
    }
    else
    {
        /* Treat a warning or informational status as success */
        Status = STATUS_SUCCESS;
    }

    /* Return if the connection was successful or not */
    return Status;
}

Referenced by CsrServerInitialization(), and SmpExecuteInitialCommand().

SmExecPgm()

NTSTATUS NTAPI SmExecPgm	(	IN HANDLE	SmApiPort,
		IN PRTL_USER_PROCESS_INFORMATION	ProcessInformation,
		IN BOOLEAN	DebugFlag
	)

Definition at line 21 of file smclient.c.

{
    NTSTATUS Status;
    SM_API_MSG SmApiMsg;

#if 0 //def _WIN64 // You can take care of this Timo
    /* 64-bit SMSS needs to talk to 32-bit processes so do the LPC conversion */
    if (SmpIsWow64Process())
    {
        return SmpWow64ExecPgm(SmApiPort, ProcessInformation, DebugFlag);
    }
#endif

    /* Initialize the generic LPC header */
    SmApiMsg.h.u2.ZeroInit = 0;
    SmApiMsg.h.u1.s1.DataLength = sizeof(SM_EXEC_PGM_MSG) + 8;
    SmApiMsg.h.u1.s1.TotalLength = sizeof(SmApiMsg);

    /* Initialize this specific API's parameters */
    SmApiMsg.ApiNumber = SmpExecPgmApi;
    RtlCopyMemory(&SmApiMsg.u.ExecPgm.ProcessInformation,
                  ProcessInformation,
                  sizeof(SmApiMsg.u.ExecPgm.ProcessInformation));
    SmApiMsg.u.ExecPgm.DebugFlag = DebugFlag;

    /* Send the message to SMSS */
    Status = NtRequestWaitReplyPort(SmApiPort, &SmApiMsg.h, &SmApiMsg.h);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("SmExecPgm: NtRequestWaitReply Failed %lx\n", Status);
    }
    else
    {
        /* Upon success, we use the API's return value */
        Status = SmApiMsg.ReturnValue;
    }

    /* Close the handles that the parent passed in and return status */
    NtClose(ProcessInformation->ProcessHandle);
    NtClose(ProcessInformation->ThreadHandle);
    return Status;
}

Referenced by SmpExecPgm(), and SmpExecuteInitialCommand().

SmSessionComplete()

NTSTATUS NTAPI SmSessionComplete	(	IN HANDLE	SmApiPort,
		IN ULONG	SessionId,
		IN NTSTATUS	SessionStatus
	)

Definition at line 135 of file smclient.c.

{
    NTSTATUS Status;
    SM_API_MSG ApiMessage;
    PSM_SESSION_COMPLETE_MSG SessionComplete = &ApiMessage.u.SessionComplete;

    /* Set the message data */
    SessionComplete->SessionId = SessionId;
    SessionComplete->SessionStatus = SessionStatus;

    /* Set the API Message Port Message header */
    ApiMessage.ApiNumber = SmpSessionCompleteApi;
    ApiMessage.h.u1.s1.DataLength = sizeof(SM_SESSION_COMPLETE_MSG) + 8;
    ApiMessage.h.u1.s1.TotalLength = sizeof(SM_API_MSG);
    ApiMessage.h.u2.ZeroInit = 0;

    /* Sent the message and wait for a reply */
    Status = NtRequestWaitReplyPort(SmApiPort,
                                    &ApiMessage.h,
                                    &ApiMessage.h);
    if (NT_SUCCESS(Status))
    {
        /* Return the real status */
        Status = ApiMessage.ReturnValue;
    }
    else
    {
        DPRINT1("SmCompleteSession: NtRequestWaitReply failed\n");
    }

    /* Return status */
    return Status;
}

Referenced by CsrDereferenceNtSession().

SmStartCsr()

NTSTATUS NTAPI SmStartCsr	(	IN HANDLE	SmApiPort,
		OUT PULONG	pMuSessionId,
		IN PUNICODE_STRING	CommandLine,
		OUT PHANDLE	pWindowsSubSysProcessId,
		OUT PHANDLE	pInitialCommandProcessId
	)

Definition at line 173 of file smclient.c.

{
    NTSTATUS Status;
    SM_API_MSG SmApiMsg;

    /* Initialize the generic LPC header */
    RtlZeroMemory(&SmApiMsg, sizeof(SmApiMsg));
    SmApiMsg.h.u1.s1.DataLength = sizeof(SM_EXEC_PGM_MSG) + 8;
    SmApiMsg.h.u1.s1.TotalLength = sizeof(SmApiMsg);

    /* Initialize this specific API's parameters */
    SmApiMsg.ApiNumber = SmpStartCsrApi;
    if (CommandLine)
    {
        if (CommandLine->Length > ARRAYSIZE(SmApiMsg.u.StartCsr.Buffer))
        {
            DPRINT1("SmStartCsr: Command line too long\n");
            return STATUS_INVALID_PARAMETER;
        }
        RtlCopyMemory(SmApiMsg.u.StartCsr.Buffer, CommandLine->Buffer, CommandLine->Length);
        SmApiMsg.u.StartCsr.Length = CommandLine->Length;
    }

    /* Send the message to SMSS */
    Status = NtRequestWaitReplyPort(SmApiPort, &SmApiMsg.h, &SmApiMsg.h);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("SmStartCsr: NtRequestWaitReply Failed %lx\n", Status);
    }
    else
    {
        /* Upon success, we use the API's return value */
        Status = SmApiMsg.ReturnValue;
    }

    /* Give back informations to caller */
    *pMuSessionId = SmApiMsg.u.StartCsr.MuSessionId;
    *pWindowsSubSysProcessId = SmApiMsg.u.StartCsr.WindowsSubSysProcessId;
    *pInitialCommandProcessId = SmApiMsg.u.StartCsr.SmpInitialCommandProcessId;

    return Status;
}

Referenced by SmpStartCsr().

SmStopCsr()

NTSTATUS NTAPI SmStopCsr	(	IN HANDLE	SmApiPort,
		IN ULONG	SessionId
	)

Definition at line 222 of file smclient.c.

{
    NTSTATUS Status;
    SM_API_MSG SmApiMsg;

    /* Initialize the generic LPC header */
    RtlZeroMemory(&SmApiMsg, sizeof(SmApiMsg));
    SmApiMsg.h.u1.s1.DataLength = sizeof(SM_EXEC_PGM_MSG) + 8;
    SmApiMsg.h.u1.s1.TotalLength = sizeof(SmApiMsg);

    /* Initialize this specific API's parameters */
    SmApiMsg.ApiNumber = SmpStopCsrApi;
    SmApiMsg.u.StopCsr.MuSessionId = SessionId;

    /* Send the message to SMSS */
    Status = NtRequestWaitReplyPort(SmApiPort, &SmApiMsg.h, &SmApiMsg.h);
    if (!NT_SUCCESS(Status))
    {
        DPRINT1("SmStopCsr: NtRequestWaitReply Failed %lx\n", Status);
    }
    else
    {
        /* Upon success, we use the API's return value */
        Status = SmApiMsg.ReturnValue;
    }

    return Status;
}