Source code of Windows XP (NT5)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

244 lines
7.5 KiB

/*++
Copyright (c) 1989 Microsoft Corporation
Module Name:
querysec.c
Abstract:
This module contains the routines which implement the
NtQuerySection service.
Author:
Lou Perazzoli (loup) 22-May-1989
Landy Wang (landyw) 02-Jun-1997
Revision History:
--*/
#include "mi.h"
#ifdef ALLOC_PRAGMA
#pragma alloc_text(PAGE,NtQuerySection)
#endif
NTSTATUS
NtQuerySection(
IN HANDLE SectionHandle,
IN SECTION_INFORMATION_CLASS SectionInformationClass,
OUT PVOID SectionInformation,
IN SIZE_T SectionInformationLength,
OUT PSIZE_T ReturnLength OPTIONAL
)
/*++
Routine Description:
This function provides the capability to determine the base address,
size, granted access, and allocation of an opened section object.
Arguments:
SectionHandle - Supplies an open handle to a section object.
SectionInformationClass - The section information class about
which to retrieve information.
SectionInformation - A pointer to a buffer that receives the
specified information. The format and content of the
buffer depend on the specified section class.
SectionInformation Format by Information Class:
SectionBasicInformation - Data type is PSECTION_BASIC_INFORMATION.
SECTION_BASIC_INFORMATION Structure
PVOID BaseAddress - The base virtual address of the
section if the section is based.
LARGE_INTEGER MaximumSize - The maximum size of the section in
bytes.
ULONG AllocationAttributes - The allocation attributes flags.
AllocationAttributes Flags
SEC_BASED - The section is a based section.
SEC_FILE - The section is backed by a data file.
SEC_RESERVE - All pages of the section were initially
set to the reserved state.
SEC_COMMIT - All pages of the section were initially
to the committed state.
SEC_IMAGE - The section was mapped as an executable image file.
SECTION_IMAGE_INFORMATION
SectionInformationLength - Specifies the length in bytes of the
section information buffer.
ReturnLength - An optional pointer which, if specified, receives the
number of bytes placed in the section information buffer.
Return Value:
NTSTATUS.
--*/
{
NTSTATUS Status;
PSECTION Section;
KPROCESSOR_MODE PreviousMode;
PAGED_CODE();
//
// Get previous processor mode and probe output argument if necessary.
//
PreviousMode = KeGetPreviousMode();
if (PreviousMode != KernelMode) {
//
// Check arguments.
//
try {
ProbeForWrite(SectionInformation,
SectionInformationLength,
sizeof(ULONG));
if (ARGUMENT_PRESENT (ReturnLength)) {
ProbeForWriteUlong_ptr (ReturnLength);
}
} except (EXCEPTION_EXECUTE_HANDLER) {
//
// If an exception occurs during the probe or capture
// of the initial values, then handle the exception and
// return the exception code as the status value.
//
return GetExceptionCode();
}
}
//
// Check argument validity.
//
if ((SectionInformationClass != SectionBasicInformation) &&
(SectionInformationClass != SectionImageInformation)) {
return STATUS_INVALID_INFO_CLASS;
}
if (SectionInformationClass == SectionBasicInformation) {
if (SectionInformationLength < (ULONG)sizeof(SECTION_BASIC_INFORMATION)) {
return STATUS_INFO_LENGTH_MISMATCH;
}
}
else {
if (SectionInformationLength < (ULONG)sizeof(SECTION_IMAGE_INFORMATION)) {
return STATUS_INFO_LENGTH_MISMATCH;
}
}
//
// Reference section object by handle for READ access, get the information
// from the section object, dereference the section
// object, fill in information structure, optionally return the length of
// the information structure, and return service status.
//
Status = ObReferenceObjectByHandle (SectionHandle,
SECTION_QUERY,
MmSectionObjectType,
PreviousMode,
(PVOID *)&Section,
NULL);
if (NT_SUCCESS(Status)) {
try {
if (SectionInformationClass == SectionBasicInformation) {
((PSECTION_BASIC_INFORMATION)SectionInformation)->BaseAddress =
(PVOID)Section->Address.StartingVpn;
((PSECTION_BASIC_INFORMATION)SectionInformation)->MaximumSize =
Section->SizeOfSection;
((PSECTION_BASIC_INFORMATION)SectionInformation)->AllocationAttributes =
0;
if (Section->u.Flags.Image) {
((PSECTION_BASIC_INFORMATION)SectionInformation)->AllocationAttributes =
SEC_IMAGE;
}
if (Section->u.Flags.Based) {
((PSECTION_BASIC_INFORMATION)SectionInformation)->AllocationAttributes |=
SEC_BASED;
}
if (Section->u.Flags.File) {
((PSECTION_BASIC_INFORMATION)SectionInformation)->AllocationAttributes |=
SEC_FILE;
}
if (Section->u.Flags.NoCache) {
((PSECTION_BASIC_INFORMATION)SectionInformation)->AllocationAttributes |=
SEC_NOCACHE;
}
if (Section->u.Flags.Reserve) {
((PSECTION_BASIC_INFORMATION)SectionInformation)->AllocationAttributes |=
SEC_RESERVE;
}
if (Section->u.Flags.Commit) {
((PSECTION_BASIC_INFORMATION)SectionInformation)->AllocationAttributes |=
SEC_COMMIT;
}
if (Section->Segment->ControlArea->u.Flags.GlobalMemory) {
((PSECTION_BASIC_INFORMATION)SectionInformation)->AllocationAttributes |=
SEC_GLOBAL;
}
if (ARGUMENT_PRESENT(ReturnLength)) {
*ReturnLength = sizeof(SECTION_BASIC_INFORMATION);
}
}
else {
if (Section->u.Flags.Image == 0) {
Status = STATUS_SECTION_NOT_IMAGE;
}
else {
*((PSECTION_IMAGE_INFORMATION)SectionInformation) =
*Section->Segment->u2.ImageInformation;
if (ARGUMENT_PRESENT(ReturnLength)) {
*ReturnLength = sizeof(SECTION_IMAGE_INFORMATION);
}
}
}
} except (EXCEPTION_EXECUTE_HANDLER) {
Status = GetExceptionCode ();
}
ObDereferenceObject ((PVOID)Section);
}
return Status;
}