|
|
/*++
Copyright (C) Microsoft Corporation, 1990 - 2000 All rights reserved.
Module Name:
dbgutil.c
Abstract:
This module provides all the Spooler Subsystem Debugger utility functions.
Author:
Krishna Ganugapati (KrishnaG) 1-July-1993
Revision History:
--*/ #include "precomp.h"
#pragma hdrstop
#include "dbglocal.h"
#include "dbgsec.h"
SYSTEM_INFO gSysInfo;
DWORD EvalValue( LPSTR *pptstr, PNTSD_GET_EXPRESSION EvalExpression, PNTSD_OUTPUT_ROUTINE Print) { LPSTR lpArgumentString; LPSTR lpAddress; DWORD dw; char ach[80]; UINT_PTR cch;
UNREFERENCED_PARAMETER(Print); lpArgumentString = *pptstr;
while (isspace(*lpArgumentString)) lpArgumentString++;
lpAddress = lpArgumentString; while ((!isspace(*lpArgumentString)) && (*lpArgumentString != 0)) lpArgumentString++;
cch = (UINT_PTR)lpArgumentString - (UINT_PTR)lpAddress; if (cch > 79) cch = 79;
strncpy(ach, lpAddress, (UINT)cch); // Print("\"%s\"\n", lpAddress);
dw = (DWORD)EvalExpression(lpAddress);
*pptstr = lpArgumentString; return dw; }
VOID ConvertSidToAsciiString( PSID pSid, LPSTR String )
/*++
Routine Description:
This function generates a printable unicode string representation of a SID.
The resulting string will take one of two forms. If the IdentifierAuthority value is not greater than 2^32, then the SID will be in the form:
S-1-281736-12-72-9-110 ^ ^^ ^^ ^ ^^^ | | | | | +-----+--+-+--+---- Decimal
Otherwise it will take the form:
S-1-0x173495281736-12-72-9-110 ^^^^^^^^^^^^^^ ^^ ^^ ^ ^^^ Hexidecimal | | | | +--+-+--+---- Decimal
Arguments:
pSid - opaque pointer that supplies the SID that is to be converted to Unicode.
Return Value:
If the Sid is successfully converted to a Unicode string, a pointer to the Unicode string is returned, else NULL is returned.
--*/
{ UCHAR Buffer[256]; UCHAR i; ULONG Tmp;
SID_IDENTIFIER_AUTHORITY *pSidIdentifierAuthority; PUCHAR pSidSubAuthorityCount;
if (!IsValidSid( pSid )) { *String= '\0'; return; }
sprintf(Buffer, "S-%u-", (USHORT)(((PISID)pSid)->Revision )); strcpy(String, Buffer);
pSidIdentifierAuthority = GetSidIdentifierAuthority(pSid);
if ( (pSidIdentifierAuthority->Value[0] != 0) || (pSidIdentifierAuthority->Value[1] != 0) ){ sprintf(Buffer, "0x%02hx%02hx%02hx%02hx%02hx%02hx", (USHORT)pSidIdentifierAuthority->Value[0], (USHORT)pSidIdentifierAuthority->Value[1], (USHORT)pSidIdentifierAuthority->Value[2], (USHORT)pSidIdentifierAuthority->Value[3], (USHORT)pSidIdentifierAuthority->Value[4], (USHORT)pSidIdentifierAuthority->Value[5] ); strcat(String, Buffer);
} else {
Tmp = (ULONG)pSidIdentifierAuthority->Value[5] + (ULONG)(pSidIdentifierAuthority->Value[4] << 8) + (ULONG)(pSidIdentifierAuthority->Value[3] << 16) + (ULONG)(pSidIdentifierAuthority->Value[2] << 24); sprintf(Buffer, "%lu", Tmp); strcat(String, Buffer); }
pSidSubAuthorityCount = GetSidSubAuthorityCount(pSid);
for (i=0;i< *(pSidSubAuthorityCount);i++ ) { sprintf(Buffer, "-%lu", *(GetSidSubAuthority(pSid, i))); strcat(String, Buffer); }
}
BOOL ReadProcessString( IN HANDLE hProcess, IN LPCVOID lpBaseAddress, OUT LPVOID lpBuffer, IN SIZE_T nSize, OUT SIZE_T *lpNumberOfBytesRead ) { BOOL bRetval = FALSE; SIZE_T cbRead = 0; UINT_PTR nAddress = 0;
//
// Attempt to read the memory, up to the provided size.
//
bRetval = ReadProcessMemory(hProcess, lpBaseAddress, lpBuffer, nSize, &cbRead);
//
// The string in the debugged process may have unmapped memory just after
// the end of the string, (this is true when page heap is enabled),
//
// If the read failed and the address plus the string buffer size crosses
// a page boundary then retry the operation up to the page end.
//
if (!bRetval) { nAddress = (UINT_PTR)lpBaseAddress;
//
// If we have crossed a page boundary.
//
if (((nAddress & (gSysInfo.dwPageSize-1)) + nSize) > gSysInfo.dwPageSize-1) { nSize = (SIZE_T)((gSysInfo.dwPageSize-1) - (nAddress & (gSysInfo.dwPageSize-1)));
bRetval = ReadProcessMemory(hProcess, lpBaseAddress, lpBuffer, nSize, &cbRead); } }
//
// The read succeeded.
//
if (bRetval) { //
// If the caller wants to know the number of bytes read.
//
if (lpNumberOfBytesRead) { *lpNumberOfBytesRead = cbRead; } }
return bRetval; }
//
// Query the system for the page size.
//
BOOL QuerySystemInformation( VOID ) { GetSystemInfo(&gSysInfo);
return TRUE; }
|