You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
303 lines
6.3 KiB
303 lines
6.3 KiB
//+-----------------------------------------------------------------------
|
|
//
|
|
// Microsoft Windows
|
|
//
|
|
// Copyright (c) Microsoft Corporation 1992 - 1997
|
|
//
|
|
// File: support.cxx
|
|
//
|
|
// Contents: support routines for ksecdd.sys
|
|
//
|
|
//
|
|
// History: 3-7-94 Created MikeSw
|
|
// 12-15-97 Modified from private\lsa\client\ssp AdamBa
|
|
//
|
|
//------------------------------------------------------------------------
|
|
|
|
#include <rdrssp.h>
|
|
|
|
|
|
|
|
//+-------------------------------------------------------------------------
|
|
//
|
|
// Function: SecAllocate
|
|
//
|
|
// Synopsis:
|
|
//
|
|
// Effects:
|
|
//
|
|
// Arguments:
|
|
//
|
|
// Requires:
|
|
//
|
|
// Returns:
|
|
//
|
|
// Notes:
|
|
//
|
|
//
|
|
//--------------------------------------------------------------------------
|
|
|
|
|
|
VOID * SEC_ENTRY
|
|
SecAllocate(ULONG cbMemory)
|
|
{
|
|
return(ExAllocatePool(NonPagedPool, cbMemory));
|
|
}
|
|
|
|
|
|
|
|
//+-------------------------------------------------------------------------
|
|
//
|
|
// Function: SecFree
|
|
//
|
|
// Synopsis:
|
|
//
|
|
// Effects:
|
|
//
|
|
// Arguments:
|
|
//
|
|
// Requires:
|
|
//
|
|
// Returns:
|
|
//
|
|
// Notes:
|
|
//
|
|
//
|
|
//--------------------------------------------------------------------------
|
|
|
|
|
|
void SEC_ENTRY
|
|
SecFree(PVOID pvMemory)
|
|
{
|
|
ExFreePool(pvMemory);
|
|
}
|
|
|
|
|
|
|
|
//+-------------------------------------------------------------------------
|
|
//
|
|
// Function: MapSecurityErrorK
|
|
//
|
|
// Synopsis: maps a HRESULT from the security interface to a NTSTATUS
|
|
//
|
|
// Effects:
|
|
//
|
|
// Arguments:
|
|
//
|
|
// Requires:
|
|
//
|
|
// Returns:
|
|
//
|
|
// Notes:
|
|
//
|
|
//
|
|
//--------------------------------------------------------------------------
|
|
NTSTATUS SEC_ENTRY
|
|
MapSecurityErrorK(HRESULT Error)
|
|
{
|
|
return((NTSTATUS) Error);
|
|
}
|
|
|
|
|
|
//+-------------------------------------------------------------------------
|
|
//
|
|
// Function: GetTokenBuffer
|
|
//
|
|
// Synopsis:
|
|
//
|
|
// This routine parses a Token Descriptor and pulls out the useful
|
|
// information.
|
|
//
|
|
// Effects:
|
|
//
|
|
// Arguments:
|
|
//
|
|
// TokenDescriptor - Descriptor of the buffer containing (or to contain) the
|
|
// token. If not specified, TokenBuffer and TokenSize will be returned
|
|
// as NULL.
|
|
//
|
|
// BufferIndex - Index of the token buffer to find (0 for first, 1 for
|
|
// second).
|
|
//
|
|
// TokenBuffer - Returns a pointer to the buffer for the token.
|
|
//
|
|
// TokenSize - Returns a pointer to the location of the size of the buffer.
|
|
//
|
|
// ReadonlyOK - TRUE if the token buffer may be readonly.
|
|
//
|
|
// Requires:
|
|
//
|
|
// Returns:
|
|
//
|
|
// TRUE - If token buffer was properly found.
|
|
//
|
|
// Notes:
|
|
//
|
|
//
|
|
//--------------------------------------------------------------------------
|
|
|
|
|
|
BOOLEAN
|
|
GetTokenBuffer(
|
|
IN PSecBufferDesc TokenDescriptor OPTIONAL,
|
|
IN ULONG BufferIndex,
|
|
OUT PVOID * TokenBuffer,
|
|
OUT PULONG TokenSize,
|
|
IN BOOLEAN ReadonlyOK
|
|
)
|
|
{
|
|
ULONG i, Index = 0;
|
|
|
|
//
|
|
// If there is no TokenDescriptor passed in,
|
|
// just pass out NULL to our caller.
|
|
//
|
|
|
|
if ( !ARGUMENT_PRESENT( TokenDescriptor) ) {
|
|
*TokenBuffer = NULL;
|
|
*TokenSize = 0;
|
|
return TRUE;
|
|
}
|
|
|
|
//
|
|
// Check the version of the descriptor.
|
|
//
|
|
|
|
if ( TokenDescriptor->ulVersion != SECBUFFER_VERSION ) {
|
|
return FALSE;
|
|
}
|
|
|
|
//
|
|
// Loop through each described buffer.
|
|
//
|
|
|
|
for ( i=0; i<TokenDescriptor->cBuffers ; i++ ) {
|
|
PSecBuffer Buffer = &TokenDescriptor->pBuffers[i];
|
|
if ( (Buffer->BufferType & (~SECBUFFER_ATTRMASK)) == SECBUFFER_TOKEN ) {
|
|
|
|
//
|
|
// If the buffer is readonly and readonly isn't OK,
|
|
// reject the buffer.
|
|
//
|
|
|
|
if ( !ReadonlyOK && (Buffer->BufferType & SECBUFFER_READONLY) ) {
|
|
return FALSE;
|
|
}
|
|
|
|
if (Index != BufferIndex)
|
|
{
|
|
Index++;
|
|
continue;
|
|
}
|
|
|
|
//
|
|
// Return the requested information
|
|
//
|
|
|
|
*TokenBuffer = Buffer->pvBuffer;
|
|
*TokenSize = Buffer->cbBuffer;
|
|
return TRUE;
|
|
}
|
|
|
|
}
|
|
|
|
return FALSE;
|
|
}
|
|
|
|
//+-------------------------------------------------------------------------
|
|
//
|
|
// Function: GetSecurityToken
|
|
//
|
|
// Synopsis:
|
|
// This routine parses a Token Descriptor and pulls out the useful
|
|
// information.
|
|
//
|
|
// Effects:
|
|
//
|
|
// Arguments:
|
|
// TokenDescriptor - Descriptor of the buffer containing (or to contain) the
|
|
// token. If not specified, TokenBuffer and TokenSize will be returned
|
|
// as NULL.
|
|
//
|
|
// BufferIndex - Index of the token buffer to find (0 for first, 1 for
|
|
// second).
|
|
//
|
|
// TokenBuffer - Returns a pointer to the buffer for the token.
|
|
//
|
|
// Requires:
|
|
//
|
|
// Returns:
|
|
//
|
|
// TRUE - If token buffer was properly found.
|
|
//
|
|
// Notes:
|
|
//
|
|
//
|
|
//--------------------------------------------------------------------------
|
|
|
|
|
|
BOOLEAN
|
|
GetSecurityToken(
|
|
IN PSecBufferDesc TokenDescriptor OPTIONAL,
|
|
IN ULONG BufferIndex,
|
|
OUT PSecBuffer * TokenBuffer
|
|
)
|
|
{
|
|
ULONG i;
|
|
ULONG Index = 0;
|
|
|
|
PAGED_CODE();
|
|
|
|
//
|
|
// If there is no TokenDescriptor passed in,
|
|
// just pass out NULL to our caller.
|
|
//
|
|
|
|
if ( !ARGUMENT_PRESENT( TokenDescriptor) ) {
|
|
*TokenBuffer = NULL;
|
|
return TRUE;
|
|
}
|
|
|
|
//
|
|
// Check the version of the descriptor.
|
|
//
|
|
|
|
if ( TokenDescriptor->ulVersion != SECBUFFER_VERSION ) {
|
|
return FALSE;
|
|
}
|
|
|
|
//
|
|
// Loop through each described buffer.
|
|
//
|
|
|
|
for ( i=0; i<TokenDescriptor->cBuffers ; i++ ) {
|
|
PSecBuffer Buffer = &TokenDescriptor->pBuffers[i];
|
|
if ( (Buffer->BufferType & (~SECBUFFER_ATTRMASK)) == SECBUFFER_TOKEN ) {
|
|
|
|
//
|
|
// If the buffer is readonly and readonly isn't OK,
|
|
// reject the buffer.
|
|
//
|
|
|
|
if ( Buffer->BufferType & SECBUFFER_READONLY ) {
|
|
return FALSE;
|
|
}
|
|
|
|
if (Index != BufferIndex)
|
|
{
|
|
Index++;
|
|
continue;
|
|
}
|
|
//
|
|
// Return the requested information
|
|
//
|
|
|
|
*TokenBuffer = Buffer;
|
|
return TRUE;
|
|
}
|
|
|
|
}
|
|
|
|
return FALSE;
|
|
}
|
|
|