Leaked source code of windows server 2003
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

865 lines
18 KiB

/*++
Copyright (c) 2000 Microsoft Corporation
Module Name:
EmulateHeap.cpp
Abstract:
This SHIM is for the layer and it emulates the Win9x heap manager. In fact,
much of the code is adapted from the Win9x sources .\heap.c and .\lmem.c.
This SHIM hooks all the heap allocation/deallocation functions including
the local/global functions.
Notes:
This is a general purpose shim.
History:
11/16/2000 prashkud & linstev Created
--*/
#include "precomp.h"
IMPLEMENT_SHIM_BEGIN(EmulateHeap)
#include "ShimHookMacro.h"
APIHOOK_ENUM_BEGIN
APIHOOK_ENUM_ENTRY(HeapCreate)
APIHOOK_ENUM_ENTRY(HeapDestroy)
APIHOOK_ENUM_ENTRY(HeapValidate)
APIHOOK_ENUM_ENTRY(HeapCompact)
APIHOOK_ENUM_ENTRY(HeapWalk)
APIHOOK_ENUM_ENTRY(HeapLock)
APIHOOK_ENUM_ENTRY(HeapUnlock)
APIHOOK_ENUM_ENTRY(GetProcessHeap)
APIHOOK_ENUM_ENTRY(LocalAlloc)
APIHOOK_ENUM_ENTRY(LocalFree)
APIHOOK_ENUM_ENTRY(LocalReAlloc)
APIHOOK_ENUM_ENTRY(LocalLock)
APIHOOK_ENUM_ENTRY(LocalUnlock)
APIHOOK_ENUM_ENTRY(LocalHandle)
APIHOOK_ENUM_ENTRY(LocalSize)
APIHOOK_ENUM_ENTRY(LocalFlags)
APIHOOK_ENUM_ENTRY(GlobalAlloc)
APIHOOK_ENUM_ENTRY(GlobalFree)
APIHOOK_ENUM_ENTRY(GlobalReAlloc)
APIHOOK_ENUM_ENTRY(GlobalLock)
APIHOOK_ENUM_ENTRY(GlobalUnlock)
APIHOOK_ENUM_ENTRY(GlobalHandle)
APIHOOK_ENUM_ENTRY(GlobalSize)
APIHOOK_ENUM_ENTRY(GlobalFlags)
APIHOOK_ENUM_ENTRY(RtlAllocateHeap)
APIHOOK_ENUM_ENTRY(RtlReAllocateHeap)
APIHOOK_ENUM_ENTRY(RtlFreeHeap)
APIHOOK_ENUM_ENTRY(RtlSizeHeap)
APIHOOK_ENUM_END
extern "C" {
BOOL _HeapInit();
HANDLE _HeapCreate(DWORD flOptions, SIZE_T dwInitialSize, SIZE_T dwMaximumSize);
BOOL _HeapDestroy(HANDLE hHeap);
LPVOID _HeapAlloc(HANDLE hHeap, DWORD dwFlags, SIZE_T dwBytes);
LPVOID _HeapReAlloc(HANDLE hHeap, DWORD dwFlags, LPVOID lpMem, SIZE_T dwBytes);
BOOL _HeapFree(HANDLE hHeap, DWORD dwFlags, LPVOID lpMem);
DWORD _HeapSize(HANDLE hHeap, DWORD dwFlags, LPCVOID lpMem);
HLOCAL APIENTRY _LocalAlloc(UINT dwFlags, UINT dwBytes);
HLOCAL APIENTRY _LocalFree(HLOCAL hMem);
LPVOID _LocalReAlloc(LPVOID lpMem, SIZE_T dwBytes, UINT uFlags);
LPVOID _LocalLock(HLOCAL hMem);
BOOL _LocalUnlock(HLOCAL hMem);
HANDLE _LocalHandle(LPCVOID hMem);
UINT _LocalSize(HLOCAL hMem);
UINT _LocalFlags(HLOCAL hMem);
HANDLE _GetProcessHeap(void);
BOOL _IsOurHeap(HANDLE hHeap);
BOOL _IsOurLocalHeap(HANDLE hMem);
BOOL _IsOnOurHeap(LPCVOID lpMem);
}
/*++
Helper functions so as not to bloat the stubs.
--*/
BOOL UseOurHeap(HANDLE hHeap, LPCVOID lpMem)
{
return (_IsOurHeap(hHeap) || ((hHeap == RtlProcessHeap()) && _IsOnOurHeap(lpMem)));
}
BOOL ValidateNTHeap(HANDLE hHeap, LPCVOID lpMem)
{
BOOL bRet = FALSE;
__try
{
bRet = ORIGINAL_API(HeapValidate)(hHeap, 0, lpMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError, "[ValidateHeap] %08lx:%08lx is invalid", hHeap, lpMem);
}
return bRet;
}
/*++
Stub APIs.
--*/
LPVOID
APIHOOK(RtlAllocateHeap)(
HANDLE hHeap,
DWORD dwFlags,
SIZE_T dwBytes
)
{
if (_IsOurHeap(hHeap))
{
return _HeapAlloc(hHeap, dwFlags, dwBytes);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: RtlAllocateHeap");
return ORIGINAL_API(RtlAllocateHeap)(hHeap, dwFlags, dwBytes);
}
}
HANDLE
APIHOOK(HeapCreate)(
DWORD flOptions,
SIZE_T dwInitialSize,
SIZE_T dwMaximumSize
)
{
return _HeapCreate(flOptions, dwInitialSize, dwMaximumSize);
}
LPVOID
APIHOOK(RtlReAllocateHeap)(
HANDLE hHeap,
DWORD dwFlags,
LPVOID lpMem,
SIZE_T dwBytes
)
{
LPVOID uRet = FALSE;
if (UseOurHeap(hHeap, lpMem))
{
uRet = _HeapReAlloc(hHeap, dwFlags, lpMem, dwBytes);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: RtlReAllocateHeap");
if (ValidateNTHeap(hHeap, lpMem))
{
uRet = ORIGINAL_API(RtlReAllocateHeap)(hHeap, dwFlags, lpMem, dwBytes);
}
}
return uRet;
}
BOOL
APIHOOK(RtlFreeHeap)(
HANDLE hHeap,
DWORD dwFlags,
LPVOID lpMem
)
{
BOOL bRet = FALSE;
if (UseOurHeap(hHeap, lpMem))
{
bRet = _HeapFree(hHeap, dwFlags, lpMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: RtlFreeHeap");
if (ValidateNTHeap(hHeap, lpMem))
{
bRet = ORIGINAL_API(RtlFreeHeap)(hHeap, dwFlags, lpMem);
}
}
return bRet;
}
HANDLE
APIHOOK(GetProcessHeap)(VOID)
{
return _GetProcessHeap();
}
BOOL
APIHOOK(HeapDestroy)(HANDLE hHeap)
{
if (_IsOurHeap(hHeap))
{
return _HeapDestroy(hHeap);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: HeapDestroy");
return ORIGINAL_API(HeapDestroy)(hHeap);
}
}
DWORD
APIHOOK(RtlSizeHeap)(
HANDLE hHeap,
DWORD dwFlags,
LPCVOID lpMem
)
{
BOOL bRet = FALSE;
if (UseOurHeap(hHeap, lpMem))
{
bRet = _HeapSize(hHeap, dwFlags, lpMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: RtlSizeHeap");
if (ValidateNTHeap(hHeap, lpMem))
{
bRet = ORIGINAL_API(RtlSizeHeap)(hHeap, dwFlags, lpMem);
}
}
return bRet;
}
BOOL
APIHOOK(HeapValidate)(
HANDLE hHeap,
DWORD dwFlags,
LPCVOID lpMem
)
{
BOOL bRet = FALSE;
if (UseOurHeap(hHeap, lpMem))
{
// Win9x return values
SetLastError(ERROR_CALL_NOT_IMPLEMENTED);
bRet = -1;
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: HeapValidate");
__try
{
bRet = ORIGINAL_API(HeapValidate)(hHeap, dwFlags, lpMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError, "[HeapValidate] %08lx:%08lx is invalid", hHeap, lpMem);
}
}
return bRet;
}
HLOCAL
APIHOOK(LocalAlloc)(
UINT uFlags,
SIZE_T uBytes
)
{
return _LocalAlloc(uFlags, uBytes);
}
HLOCAL
APIHOOK(LocalFree)(
HLOCAL hMem
)
{
HLOCAL hRet = NULL;
if (_IsOurLocalHeap(hMem))
{
hRet = _LocalFree(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: LocalFree %08lx", hMem);
__try
{
hRet = ORIGINAL_API(LocalFree)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[LocalFree] Exception: Invalid Pointer %08lx", hMem);
}
}
return hRet;
}
HLOCAL
APIHOOK(LocalReAlloc)(
HLOCAL hMem,
SIZE_T uBytes,
UINT uFlags
)
{
HLOCAL hRet = NULL;
if (_IsOurLocalHeap(hMem))
{
hRet = _LocalReAlloc(hMem, uBytes, uFlags);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: LocalReAlloc %08lx", hMem);
__try
{
hRet = ORIGINAL_API(LocalReAlloc)(hMem, uBytes, uFlags);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[LocalReAlloc] Exception: Invalid Pointer %08lx", hMem);
}
}
return hRet;
}
LPVOID
APIHOOK(LocalLock)(
HLOCAL hMem
)
{
LPVOID pRet = NULL;
if (_IsOurLocalHeap(hMem))
{
pRet = _LocalLock(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: LocalLock %08lx", hMem);
__try
{
pRet = ORIGINAL_API(LocalLock)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[LocalLock] Exception: Invalid Pointer %08lx", hMem);
}
}
return pRet;
}
BOOL
APIHOOK(LocalUnlock)(
HLOCAL hMem
)
{
BOOL bRet = FALSE;
if (_IsOurLocalHeap(hMem))
{
bRet = _LocalUnlock(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: LocalUnlock %08lx", hMem);
__try
{
bRet = ORIGINAL_API(LocalUnlock)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[LocalUnLock] Exception: Invalid Pointer %08lx", hMem);
}
}
return bRet;
}
HANDLE
APIHOOK(LocalHandle)(
LPCVOID hMem
)
{
HANDLE hRet = NULL;
if (_IsOurLocalHeap((HANDLE)hMem))
{
hRet = _LocalHandle(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: LocalHandle %08lx", hMem);
__try
{
hRet = ORIGINAL_API(LocalHandle)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[LocalHandle] Exception: Invalid Pointer %08lx", hMem);
}
}
return hRet;
}
UINT
APIHOOK(LocalSize)(
HLOCAL hMem
)
{
UINT uRet = 0;
if (_IsOurLocalHeap(hMem))
{
uRet = _LocalSize(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: LocalSize %08lx", hMem);
__try
{
uRet = ORIGINAL_API(LocalSize)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[LocalSize] Exception: Invalid Pointer %08lx", hMem);
}
}
return uRet;
}
UINT
APIHOOK(LocalFlags)(
HLOCAL hMem
)
{
UINT uRet = 0;
if (_IsOurLocalHeap(hMem))
{
uRet = _LocalFlags(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: LocalFlags %08lx", hMem);
__try
{
uRet = ORIGINAL_API(LocalFlags)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[LocalFlags] Exception: Invalid Pointer %08lx", hMem);
}
}
return uRet;
}
HGLOBAL
APIHOOK(GlobalAlloc)(
UINT uFlags,
SIZE_T uBytes
)
{
uFlags = (((uFlags & GMEM_ZEROINIT) ? LMEM_ZEROINIT : 0 ) |
((uFlags & GMEM_MOVEABLE) ? LMEM_MOVEABLE : 0 ) |
((uFlags & GMEM_FIXED) ? LMEM_FIXED : 0 ));
return _LocalAlloc(uFlags, uBytes);
}
HGLOBAL
APIHOOK(GlobalFree)(
HGLOBAL hMem
)
{
HGLOBAL hRet = NULL;
if (_IsOurLocalHeap(hMem))
{
hRet = _LocalFree(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: GlobalFree %08lx", hMem);
__try
{
hRet = ORIGINAL_API(GlobalFree)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[GlobalFree] Exception: Invalid Pointer %08lx", hMem);
}
}
return hRet;
}
HGLOBAL
APIHOOK(GlobalReAlloc)(
HGLOBAL hMem,
SIZE_T uBytes,
UINT uFlags
)
{
UINT uLocalFlags =
(((uFlags & GMEM_ZEROINIT) ? LMEM_ZEROINIT : 0 ) |
((uFlags & GMEM_MOVEABLE) ? LMEM_MOVEABLE : 0 ) |
((uFlags & GMEM_FIXED) ? LMEM_FIXED : 0 ));
HLOCAL hRet = NULL;
if (_IsOurLocalHeap(hMem))
{
hRet = _LocalReAlloc(hMem, uBytes, uLocalFlags);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: GlobalReAlloc %08lx", hMem);
__try
{
hRet = ORIGINAL_API(GlobalReAlloc)(hMem, uBytes, uFlags);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[GlobalReAlloc] Exception: Invalid Pointer %08lx", hMem);
}
}
return hRet;
}
LPVOID
APIHOOK(GlobalLock)(
HGLOBAL hMem
)
{
LPVOID pRet = NULL;
if (_IsOurLocalHeap(hMem))
{
pRet = _LocalLock(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: GlobalLock %08lx", hMem);
__try
{
pRet = ORIGINAL_API(GlobalLock)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[GlobalLock] Exception: Invalid Pointer %08lx", hMem);
}
}
return pRet;
}
BOOL
APIHOOK(GlobalUnlock)(
HGLOBAL hMem
)
{
BOOL bRet = FALSE;
if (_IsOurLocalHeap(hMem))
{
bRet = _LocalUnlock(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: GlobalUnlock %08lx", hMem);
__try
{
bRet = ORIGINAL_API(GlobalUnlock)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[GlobalUnLock] Exception: Invalid Pointer %08lx", hMem);
}
}
return bRet;
}
HANDLE
APIHOOK(GlobalHandle)(
LPCVOID hMem
)
{
HANDLE hRet = NULL;
if (_IsOurLocalHeap((HANDLE)hMem))
{
hRet = _LocalHandle(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: GlobalHandle %08lx", hMem);
__try
{
hRet = ORIGINAL_API(GlobalHandle)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[GlobalHandle] Exception: Invalid Pointer %08lx for Heap",
hMem);
}
}
return hRet;
}
UINT
APIHOOK(GlobalSize)(
HGLOBAL hMem
)
{
UINT uRet = 0;
if (_IsOurLocalHeap(hMem))
{
uRet = _LocalSize(hMem);
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: GlobalSize %08lx", hMem);
__try
{
uRet = ORIGINAL_API(GlobalSize)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[GlobalSize] Exception: Invalid Pointer %08lx for Heap",
hMem);
}
}
return uRet;
}
UINT
APIHOOK(GlobalFlags)(
HGLOBAL hMem
)
{
UINT uRet = 0;
if (_IsOurLocalHeap(hMem))
{
uRet = _LocalFlags(hMem);
// Convert the flags
UINT uNewRet = uRet;
uRet = 0;
if (uNewRet & LMEM_DISCARDABLE)
{
uRet |= GMEM_DISCARDABLE;
}
if (uNewRet & LMEM_DISCARDED)
{
uRet |= GMEM_DISCARDED;
}
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: GlobalFlags %08lx", hMem);
__try
{
uRet = ORIGINAL_API(GlobalFlags)(hMem);
}
__except(EXCEPTION_EXECUTE_HANDLER)
{
LOGN( eDbgLevelError,
"[GlobalFlags] Exception: Invalid Pointer %08lx for Heap",
hMem);
}
}
return uRet;
}
UINT
APIHOOK(HeapCompact)(
HANDLE hHeap,
DWORD dwFlags
)
{
if (_IsOurHeap(hHeap))
{
// Win9x return values
SetLastError(ERROR_CALL_NOT_IMPLEMENTED);
return 0;
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: HeapCompact");
return ORIGINAL_API(HeapCompact)(hHeap, dwFlags);
}
}
BOOL
APIHOOK(HeapWalk)(
HANDLE hHeap,
LPPROCESS_HEAP_ENTRY pEntry
)
{
if (_IsOurHeap(hHeap))
{
// Win9x return values
SetLastError(ERROR_CALL_NOT_IMPLEMENTED);
return 0;
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: HeapWalk");
return ORIGINAL_API(HeapWalk)(hHeap, pEntry);
}
}
BOOL
APIHOOK(HeapLock)(
HANDLE hHeap
)
{
if (_IsOurHeap(hHeap))
{
// Win9x return values
SetLastError(ERROR_CALL_NOT_IMPLEMENTED);
return 0;
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: HeapLock");
return ORIGINAL_API(HeapLock)(hHeap);
}
}
BOOL
APIHOOK(HeapUnlock)(
HANDLE hHeap
)
{
if (_IsOurHeap(hHeap))
{
// Win9x return values
SetLastError(ERROR_CALL_NOT_IMPLEMENTED);
return 0;
}
else
{
DPFN( eDbgLevelInfo, "NTHEAP: HeapUnlock");
return ORIGINAL_API(HeapUnlock)(hHeap);
}
}
/*++
Register hooked functions
--*/
BOOL
NOTIFY_FUNCTION(
DWORD fdwReason
)
{
BOOL bRet = TRUE;
if (fdwReason == DLL_PROCESS_ATTACH)
{
bRet = _HeapInit();
if (bRet)
{
LOGN(eDbgLevelInfo, "[NotifyFn] Win9x heap manager initialized");
}
else
{
LOGN(eDbgLevelError, "[NotifyFn] Win9x heap manager initialization failed!");
}
}
return bRet;
}
HOOK_BEGIN
CALL_NOTIFY_FUNCTION
APIHOOK_ENTRY(KERNEL32.DLL, HeapCreate)
APIHOOK_ENTRY(KERNEL32.DLL, HeapDestroy)
APIHOOK_ENTRY(KERNEL32.DLL, HeapValidate)
APIHOOK_ENTRY(KERNEL32.DLL, HeapCompact)
APIHOOK_ENTRY(KERNEL32.DLL, HeapWalk)
APIHOOK_ENTRY(KERNEL32.DLL, HeapLock)
APIHOOK_ENTRY(KERNEL32.DLL, HeapUnlock)
APIHOOK_ENTRY(KERNEL32.DLL, GetProcessHeap)
APIHOOK_ENTRY(KERNEL32.DLL, LocalAlloc)
APIHOOK_ENTRY(KERNEL32.DLL, LocalFree)
APIHOOK_ENTRY(KERNEL32.DLL, LocalReAlloc)
APIHOOK_ENTRY(KERNEL32.DLL, LocalLock)
APIHOOK_ENTRY(KERNEL32.DLL, LocalUnlock)
APIHOOK_ENTRY(KERNEL32.DLL, LocalHandle)
APIHOOK_ENTRY(KERNEL32.DLL, LocalSize)
APIHOOK_ENTRY(KERNEL32.DLL, LocalFlags)
APIHOOK_ENTRY(KERNEL32.DLL, GlobalAlloc)
APIHOOK_ENTRY(KERNEL32.DLL, GlobalFree)
APIHOOK_ENTRY(KERNEL32.DLL, GlobalReAlloc)
APIHOOK_ENTRY(KERNEL32.DLL, GlobalLock)
APIHOOK_ENTRY(KERNEL32.DLL, GlobalUnlock)
APIHOOK_ENTRY(KERNEL32.DLL, GlobalHandle)
APIHOOK_ENTRY(KERNEL32.DLL, GlobalSize)
APIHOOK_ENTRY(KERNEL32.DLL, GlobalFlags)
APIHOOK_ENTRY(NTDLL.DLL, RtlAllocateHeap)
APIHOOK_ENTRY(NTDLL.DLL, RtlReAllocateHeap)
APIHOOK_ENTRY(NTDLL.DLL, RtlFreeHeap)
APIHOOK_ENTRY(NTDLL.DLL, RtlSizeHeap)
HOOK_END
IMPLEMENT_SHIM_END