899 lines
28 KiB
C
899 lines
28 KiB
C
/*
|
|
* Server-side handle management
|
|
*
|
|
* Copyright (C) 1998 Alexandre Julliard
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
|
|
*/
|
|
|
|
#include "config.h"
|
|
|
|
#include <assert.h>
|
|
#include <limits.h>
|
|
#include <string.h>
|
|
#include <stdarg.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <sys/types.h>
|
|
|
|
#include "ntstatus.h"
|
|
#define WIN32_NO_STATUS
|
|
#include "windef.h"
|
|
#include "winternl.h"
|
|
|
|
#include "handle.h"
|
|
#include "process.h"
|
|
#include "thread.h"
|
|
#include "security.h"
|
|
#include "request.h"
|
|
|
|
struct handle_entry
|
|
{
|
|
struct object *ptr; /* object */
|
|
unsigned int access; /* access rights */
|
|
};
|
|
|
|
struct handle_table
|
|
{
|
|
struct object obj; /* object header */
|
|
struct process *process; /* process owning this table */
|
|
int count; /* number of allocated entries */
|
|
int last; /* last used entry */
|
|
int free; /* first entry that may be free */
|
|
struct handle_entry *entries; /* handle entries */
|
|
};
|
|
|
|
static struct handle_table *global_table;
|
|
|
|
/* reserved handle access rights */
|
|
#define RESERVED_SHIFT 26
|
|
#define RESERVED_INHERIT (HANDLE_FLAG_INHERIT << RESERVED_SHIFT)
|
|
#define RESERVED_CLOSE_PROTECT (HANDLE_FLAG_PROTECT_FROM_CLOSE << RESERVED_SHIFT)
|
|
#define RESERVED_ALL (RESERVED_INHERIT | RESERVED_CLOSE_PROTECT)
|
|
|
|
#define MIN_HANDLE_ENTRIES 32
|
|
#define MAX_HANDLE_ENTRIES 0x00ffffff
|
|
|
|
|
|
/* handle to table index conversion */
|
|
|
|
/* handles are a multiple of 4 under NT; handle 0 is not used */
|
|
static inline obj_handle_t index_to_handle( int index )
|
|
{
|
|
return (obj_handle_t)((index + 1) << 2);
|
|
}
|
|
static inline int handle_to_index( obj_handle_t handle )
|
|
{
|
|
return (handle >> 2) - 1;
|
|
}
|
|
|
|
/* global handle conversion */
|
|
|
|
#define HANDLE_OBFUSCATOR 0x544a4def
|
|
|
|
static inline int handle_is_global( obj_handle_t handle)
|
|
{
|
|
return (handle ^ HANDLE_OBFUSCATOR) <= (MAX_HANDLE_ENTRIES << 2);
|
|
}
|
|
static inline obj_handle_t handle_local_to_global( obj_handle_t handle )
|
|
{
|
|
if (!handle) return 0;
|
|
return handle ^ HANDLE_OBFUSCATOR;
|
|
}
|
|
static inline obj_handle_t handle_global_to_local( obj_handle_t handle )
|
|
{
|
|
return handle ^ HANDLE_OBFUSCATOR;
|
|
}
|
|
|
|
/* grab an object and increment its handle count */
|
|
static struct object *grab_object_for_handle( struct object *obj )
|
|
{
|
|
obj->handle_count++;
|
|
obj->ops->type->handle_count++;
|
|
obj->ops->type->handle_max = max( obj->ops->type->handle_max, obj->ops->type->handle_count );
|
|
return grab_object( obj );
|
|
}
|
|
|
|
/* release an object and decrement its handle count */
|
|
static void release_object_from_handle( struct object *obj )
|
|
{
|
|
assert( obj->handle_count );
|
|
obj->ops->type->handle_count--;
|
|
obj->handle_count--;
|
|
release_object( obj );
|
|
}
|
|
|
|
static void handle_table_dump( struct object *obj, int verbose );
|
|
static void handle_table_destroy( struct object *obj );
|
|
|
|
static const struct object_ops handle_table_ops =
|
|
{
|
|
sizeof(struct handle_table), /* size */
|
|
&no_type, /* type */
|
|
handle_table_dump, /* dump */
|
|
no_add_queue, /* add_queue */
|
|
NULL, /* remove_queue */
|
|
NULL, /* signaled */
|
|
NULL, /* satisfied */
|
|
no_signal, /* signal */
|
|
no_get_fd, /* get_fd */
|
|
default_map_access, /* map_access */
|
|
default_get_sd, /* get_sd */
|
|
default_set_sd, /* set_sd */
|
|
no_get_full_name, /* get_full_name */
|
|
no_lookup_name, /* lookup_name */
|
|
no_link_name, /* link_name */
|
|
NULL, /* unlink_name */
|
|
no_open_file, /* open_file */
|
|
no_kernel_obj_list, /* get_kernel_obj_list */
|
|
no_close_handle, /* close_handle */
|
|
handle_table_destroy /* destroy */
|
|
};
|
|
|
|
/* dump a handle table */
|
|
static void handle_table_dump( struct object *obj, int verbose )
|
|
{
|
|
int i;
|
|
struct handle_table *table = (struct handle_table *)obj;
|
|
struct handle_entry *entry;
|
|
|
|
assert( obj->ops == &handle_table_ops );
|
|
|
|
fprintf( stderr, "Handle table last=%d count=%d process=%p\n",
|
|
table->last, table->count, table->process );
|
|
if (!verbose) return;
|
|
entry = table->entries;
|
|
for (i = 0; i <= table->last; i++, entry++)
|
|
{
|
|
if (!entry->ptr) continue;
|
|
fprintf( stderr, " %04x: %p %08x ",
|
|
index_to_handle(i), entry->ptr, entry->access );
|
|
dump_object_name( entry->ptr );
|
|
entry->ptr->ops->dump( entry->ptr, 0 );
|
|
}
|
|
}
|
|
|
|
/* destroy a handle table */
|
|
static void handle_table_destroy( struct object *obj )
|
|
{
|
|
int i;
|
|
struct handle_table *table = (struct handle_table *)obj;
|
|
struct handle_entry *entry;
|
|
|
|
assert( obj->ops == &handle_table_ops );
|
|
|
|
for (i = 0, entry = table->entries; i <= table->last; i++, entry++)
|
|
{
|
|
struct object *obj = entry->ptr;
|
|
entry->ptr = NULL;
|
|
if (obj)
|
|
{
|
|
if (table->process)
|
|
obj->ops->close_handle( obj, table->process, index_to_handle(i) );
|
|
release_object_from_handle( obj );
|
|
}
|
|
}
|
|
free( table->entries );
|
|
}
|
|
|
|
/* close all the process handles and free the handle table */
|
|
void close_process_handles( struct process *process )
|
|
{
|
|
struct handle_table *table = process->handles;
|
|
|
|
process->handles = NULL;
|
|
if (table) release_object( table );
|
|
}
|
|
|
|
/* allocate a new handle table */
|
|
struct handle_table *alloc_handle_table( struct process *process, int count )
|
|
{
|
|
struct handle_table *table;
|
|
|
|
if (count < MIN_HANDLE_ENTRIES) count = MIN_HANDLE_ENTRIES;
|
|
if (!(table = alloc_object( &handle_table_ops )))
|
|
return NULL;
|
|
table->process = process;
|
|
table->count = count;
|
|
table->last = -1;
|
|
table->free = 0;
|
|
if ((table->entries = mem_alloc( count * sizeof(*table->entries) ))) return table;
|
|
release_object( table );
|
|
return NULL;
|
|
}
|
|
|
|
/* grow a handle table */
|
|
static int grow_handle_table( struct handle_table *table )
|
|
{
|
|
struct handle_entry *new_entries;
|
|
int count = min( table->count * 2, MAX_HANDLE_ENTRIES );
|
|
|
|
if (count == table->count ||
|
|
!(new_entries = realloc( table->entries, count * sizeof(struct handle_entry) )))
|
|
{
|
|
set_error( STATUS_INSUFFICIENT_RESOURCES );
|
|
return 0;
|
|
}
|
|
table->entries = new_entries;
|
|
table->count = count;
|
|
return 1;
|
|
}
|
|
|
|
/* allocate the first free entry in the handle table */
|
|
static obj_handle_t alloc_entry( struct handle_table *table, void *obj, unsigned int access )
|
|
{
|
|
struct handle_entry *entry = table->entries + table->free;
|
|
int i;
|
|
|
|
for (i = table->free; i <= table->last; i++, entry++) if (!entry->ptr) goto found;
|
|
if (i >= table->count)
|
|
{
|
|
if (!grow_handle_table( table )) return 0;
|
|
entry = table->entries + i; /* the entries may have moved */
|
|
}
|
|
table->last = i;
|
|
found:
|
|
table->free = i + 1;
|
|
entry->ptr = grab_object_for_handle( obj );
|
|
entry->access = access;
|
|
return index_to_handle(i);
|
|
}
|
|
|
|
/* allocate a handle for an object, incrementing its refcount */
|
|
static obj_handle_t alloc_handle_entry( struct process *process, void *ptr,
|
|
unsigned int access, unsigned int attr )
|
|
{
|
|
struct object *obj = ptr;
|
|
|
|
assert( !(access & RESERVED_ALL) );
|
|
if (attr & OBJ_INHERIT) access |= RESERVED_INHERIT;
|
|
if (!process->handles)
|
|
{
|
|
set_error( STATUS_PROCESS_IS_TERMINATING );
|
|
return 0;
|
|
}
|
|
return alloc_entry( process->handles, obj, access );
|
|
}
|
|
|
|
/* allocate a handle for an object, incrementing its refcount */
|
|
/* return the handle, or 0 on error */
|
|
obj_handle_t alloc_handle_no_access_check( struct process *process, void *ptr, unsigned int access, unsigned int attr )
|
|
{
|
|
struct object *obj = ptr;
|
|
if (access & MAXIMUM_ALLOWED) access = GENERIC_ALL;
|
|
access = obj->ops->map_access( obj, access ) & ~RESERVED_ALL;
|
|
return alloc_handle_entry( process, ptr, access, attr );
|
|
}
|
|
|
|
/* allocate a handle for an object, checking the dacl allows the process to */
|
|
/* access it and incrementing its refcount */
|
|
/* return the handle, or 0 on error */
|
|
obj_handle_t alloc_handle( struct process *process, void *ptr, unsigned int access, unsigned int attr )
|
|
{
|
|
struct object *obj = ptr;
|
|
access = obj->ops->map_access( obj, access ) & ~RESERVED_ALL;
|
|
if (access && !check_object_access( NULL, obj, &access )) return 0;
|
|
return alloc_handle_entry( process, ptr, access, attr );
|
|
}
|
|
|
|
/* allocate a global handle for an object, incrementing its refcount */
|
|
/* return the handle, or 0 on error */
|
|
static obj_handle_t alloc_global_handle_no_access_check( void *obj, unsigned int access )
|
|
{
|
|
if (!global_table)
|
|
{
|
|
if (!(global_table = alloc_handle_table( NULL, 0 )))
|
|
return 0;
|
|
make_object_permanent( &global_table->obj );
|
|
}
|
|
return handle_local_to_global( alloc_entry( global_table, obj, access ));
|
|
}
|
|
|
|
/* allocate a global handle for an object, checking the dacl allows the */
|
|
/* process to access it and incrementing its refcount and incrementing its refcount */
|
|
/* return the handle, or 0 on error */
|
|
static obj_handle_t alloc_global_handle( void *obj, unsigned int access )
|
|
{
|
|
if (access && !check_object_access( NULL, obj, &access )) return 0;
|
|
return alloc_global_handle_no_access_check( obj, access );
|
|
}
|
|
|
|
/* return a handle entry, or NULL if the handle is invalid */
|
|
static struct handle_entry *get_handle( struct process *process, obj_handle_t handle )
|
|
{
|
|
struct handle_table *table = process->handles;
|
|
struct handle_entry *entry;
|
|
int index;
|
|
|
|
if (handle_is_global(handle))
|
|
{
|
|
handle = handle_global_to_local(handle);
|
|
table = global_table;
|
|
}
|
|
if (!table) return NULL;
|
|
index = handle_to_index( handle );
|
|
if (index < 0) return NULL;
|
|
if (index > table->last) return NULL;
|
|
entry = table->entries + index;
|
|
if (!entry->ptr) return NULL;
|
|
return entry;
|
|
}
|
|
|
|
/* attempt to shrink a table */
|
|
static void shrink_handle_table( struct handle_table *table )
|
|
{
|
|
struct handle_entry *entry = table->entries + table->last;
|
|
struct handle_entry *new_entries;
|
|
int count = table->count;
|
|
|
|
while (table->last >= 0)
|
|
{
|
|
if (entry->ptr) break;
|
|
table->last--;
|
|
entry--;
|
|
}
|
|
if (table->last >= count / 4) return; /* no need to shrink */
|
|
if (count < MIN_HANDLE_ENTRIES * 2) return; /* too small to shrink */
|
|
count /= 2;
|
|
if (!(new_entries = realloc( table->entries, count * sizeof(*new_entries) ))) return;
|
|
table->count = count;
|
|
table->entries = new_entries;
|
|
}
|
|
|
|
static void inherit_handle( struct process *parent, const obj_handle_t handle, struct handle_table *table )
|
|
{
|
|
struct handle_entry *dst, *src;
|
|
int index;
|
|
|
|
dst = table->entries;
|
|
|
|
src = get_handle( parent, handle );
|
|
if (!src || !(src->access & RESERVED_INHERIT)) return;
|
|
index = handle_to_index( handle );
|
|
if (dst[index].ptr) return;
|
|
grab_object_for_handle( src->ptr );
|
|
dst[index] = *src;
|
|
table->last = max( table->last, index );
|
|
}
|
|
|
|
/* copy the handle table of the parent process */
|
|
/* return 1 if OK, 0 on error */
|
|
struct handle_table *copy_handle_table( struct process *process, struct process *parent,
|
|
const obj_handle_t *handles, unsigned int handle_count,
|
|
const obj_handle_t *std_handles )
|
|
{
|
|
struct handle_table *parent_table = parent->handles;
|
|
struct handle_table *table;
|
|
int i;
|
|
|
|
assert( parent_table );
|
|
assert( parent_table->obj.ops == &handle_table_ops );
|
|
|
|
if (!(table = alloc_handle_table( process, parent_table->count )))
|
|
return NULL;
|
|
|
|
if (handles)
|
|
{
|
|
memset( table->entries, 0, parent_table->count * sizeof(*table->entries) );
|
|
|
|
for (i = 0; i < handle_count; i++)
|
|
{
|
|
inherit_handle( parent, handles[i], table );
|
|
}
|
|
|
|
for (i = 0; i < 3; i++)
|
|
{
|
|
inherit_handle( parent, std_handles[i], table );
|
|
}
|
|
}
|
|
else
|
|
{
|
|
if ((table->last = parent_table->last) >= 0)
|
|
{
|
|
struct handle_entry *ptr = table->entries;
|
|
memcpy( ptr, parent_table->entries, (table->last + 1) * sizeof(struct handle_entry) );
|
|
for (i = 0; i <= table->last; i++, ptr++)
|
|
{
|
|
if (!ptr->ptr) continue;
|
|
if (ptr->access & RESERVED_INHERIT) grab_object_for_handle( ptr->ptr );
|
|
else ptr->ptr = NULL; /* don't inherit this entry */
|
|
}
|
|
}
|
|
}
|
|
/* attempt to shrink the table */
|
|
shrink_handle_table( table );
|
|
return table;
|
|
}
|
|
|
|
/* close a handle and decrement the refcount of the associated object */
|
|
unsigned int close_handle( struct process *process, obj_handle_t handle )
|
|
{
|
|
struct handle_table *table;
|
|
struct handle_entry *entry;
|
|
struct object *obj;
|
|
|
|
if (!(entry = get_handle( process, handle ))) return STATUS_INVALID_HANDLE;
|
|
if (entry->access & RESERVED_CLOSE_PROTECT) return STATUS_HANDLE_NOT_CLOSABLE;
|
|
obj = entry->ptr;
|
|
if (!obj->ops->close_handle( obj, process, handle )) return STATUS_HANDLE_NOT_CLOSABLE;
|
|
entry->ptr = NULL;
|
|
table = handle_is_global(handle) ? global_table : process->handles;
|
|
if (entry < table->entries + table->free) table->free = entry - table->entries;
|
|
if (entry == table->entries + table->last) shrink_handle_table( table );
|
|
release_object_from_handle( obj );
|
|
return STATUS_SUCCESS;
|
|
}
|
|
|
|
/* retrieve the object corresponding to one of the magic pseudo-handles */
|
|
static inline struct object *get_magic_handle( obj_handle_t handle )
|
|
{
|
|
switch(handle)
|
|
{
|
|
case 0xfffffffa: /* current thread impersonation token pseudo-handle */
|
|
return (struct object *)thread_get_impersonation_token( current );
|
|
case 0xfffffffb: /* current thread token pseudo-handle */
|
|
return (struct object *)current->token;
|
|
case 0xfffffffc: /* current process token pseudo-handle */
|
|
return (struct object *)current->process->token;
|
|
case 0xfffffffe: /* current thread pseudo-handle */
|
|
return ¤t->obj;
|
|
case 0x7fffffff: /* current process pseudo-handle */
|
|
case 0xffffffff: /* current process pseudo-handle */
|
|
return (struct object *)current->process;
|
|
default:
|
|
return NULL;
|
|
}
|
|
}
|
|
|
|
/* retrieve the object corresponding to a handle, incrementing its refcount */
|
|
struct object *get_handle_obj( struct process *process, obj_handle_t handle,
|
|
unsigned int access, const struct object_ops *ops )
|
|
{
|
|
struct handle_entry *entry;
|
|
struct object *obj;
|
|
|
|
if (!(obj = get_magic_handle( handle )))
|
|
{
|
|
if (!(entry = get_handle( process, handle )))
|
|
{
|
|
set_error( STATUS_INVALID_HANDLE );
|
|
return NULL;
|
|
}
|
|
obj = entry->ptr;
|
|
if (ops && (obj->ops != ops))
|
|
{
|
|
set_error( STATUS_OBJECT_TYPE_MISMATCH ); /* not the right type */
|
|
return NULL;
|
|
}
|
|
if ((entry->access & access) != access)
|
|
{
|
|
set_error( STATUS_ACCESS_DENIED );
|
|
return NULL;
|
|
}
|
|
}
|
|
else if (ops && (obj->ops != ops))
|
|
{
|
|
set_error( STATUS_OBJECT_TYPE_MISMATCH ); /* not the right type */
|
|
return NULL;
|
|
}
|
|
return grab_object( obj );
|
|
}
|
|
|
|
/* retrieve the access rights of a given handle */
|
|
unsigned int get_handle_access( struct process *process, obj_handle_t handle )
|
|
{
|
|
struct handle_entry *entry;
|
|
|
|
if (get_magic_handle( handle )) return ~RESERVED_ALL; /* magic handles have all access rights */
|
|
if (!(entry = get_handle( process, handle ))) return 0;
|
|
return entry->access & ~RESERVED_ALL;
|
|
}
|
|
|
|
/* find the first inherited handle of the given type */
|
|
/* this is needed for window stations and desktops (don't ask...) */
|
|
obj_handle_t find_inherited_handle( struct process *process, const struct object_ops *ops )
|
|
{
|
|
struct handle_table *table = process->handles;
|
|
struct handle_entry *ptr;
|
|
int i;
|
|
|
|
if (!table) return 0;
|
|
|
|
for (i = 0, ptr = table->entries; i <= table->last; i++, ptr++)
|
|
{
|
|
if (!ptr->ptr) continue;
|
|
if (ptr->ptr->ops != ops) continue;
|
|
if (ptr->access & RESERVED_INHERIT) return index_to_handle(i);
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
/* get/set the handle reserved flags */
|
|
/* return the old flags (or -1 on error) */
|
|
static int set_handle_flags( struct process *process, obj_handle_t handle, int mask, int flags )
|
|
{
|
|
struct handle_entry *entry;
|
|
unsigned int old_access;
|
|
|
|
if (get_magic_handle( handle ))
|
|
{
|
|
/* we can retrieve but not set info for magic handles */
|
|
if (mask) set_error( STATUS_ACCESS_DENIED );
|
|
return 0;
|
|
}
|
|
if (!(entry = get_handle( process, handle )))
|
|
{
|
|
set_error( STATUS_INVALID_HANDLE );
|
|
return -1;
|
|
}
|
|
old_access = entry->access;
|
|
mask = (mask << RESERVED_SHIFT) & RESERVED_ALL;
|
|
flags = (flags << RESERVED_SHIFT) & mask;
|
|
entry->access = (entry->access & ~mask) | flags;
|
|
return (old_access & RESERVED_ALL) >> RESERVED_SHIFT;
|
|
}
|
|
|
|
/* duplicate a handle */
|
|
obj_handle_t duplicate_handle( struct process *src, obj_handle_t src_handle, struct process *dst,
|
|
unsigned int access, unsigned int attr, unsigned int options )
|
|
{
|
|
obj_handle_t res;
|
|
struct handle_entry *entry;
|
|
unsigned int src_access;
|
|
struct object *obj = get_handle_obj( src, src_handle, 0, NULL );
|
|
|
|
if (!obj) return 0;
|
|
if ((entry = get_handle( src, src_handle )))
|
|
src_access = entry->access;
|
|
else /* pseudo-handle, give it full access */
|
|
src_access = obj->ops->map_access( obj, GENERIC_ALL );
|
|
src_access &= ~RESERVED_ALL;
|
|
|
|
if (options & DUPLICATE_SAME_ACCESS)
|
|
access = src_access;
|
|
else
|
|
access = obj->ops->map_access( obj, access ) & ~RESERVED_ALL;
|
|
|
|
/* asking for the more access rights than src_access? */
|
|
if (access & ~src_access)
|
|
{
|
|
if ((current->token && !check_object_access( current->token, obj, &access )) ||
|
|
!check_object_access( dst->token, obj, &access ))
|
|
{
|
|
release_object( obj );
|
|
return 0;
|
|
}
|
|
|
|
if (options & DUPLICATE_MAKE_GLOBAL)
|
|
res = alloc_global_handle( obj, access );
|
|
else
|
|
res = alloc_handle_no_access_check( dst, obj, access, attr );
|
|
}
|
|
else
|
|
{
|
|
if (options & DUPLICATE_MAKE_GLOBAL)
|
|
res = alloc_global_handle_no_access_check( obj, access );
|
|
else if ((options & DUPLICATE_CLOSE_SOURCE) && src == dst &&
|
|
entry && !(entry->access & RESERVED_CLOSE_PROTECT))
|
|
{
|
|
if (attr & OBJ_INHERIT) access |= RESERVED_INHERIT;
|
|
entry->access = access;
|
|
res = src_handle;
|
|
}
|
|
else
|
|
res = alloc_handle_entry( dst, obj, access, attr );
|
|
}
|
|
|
|
release_object( obj );
|
|
return res;
|
|
}
|
|
|
|
/* open a new handle to an existing object */
|
|
obj_handle_t open_object( struct process *process, obj_handle_t parent, unsigned int access,
|
|
const struct object_ops *ops, const struct unicode_str *name,
|
|
unsigned int attributes )
|
|
{
|
|
obj_handle_t handle = 0;
|
|
struct object *obj, *root = NULL;
|
|
|
|
if (name->len >= 65534)
|
|
{
|
|
set_error( STATUS_OBJECT_NAME_INVALID );
|
|
return 0;
|
|
}
|
|
|
|
if (parent)
|
|
{
|
|
if (name->len)
|
|
root = get_directory_obj( process, parent );
|
|
else /* opening the object itself can work for non-directories too */
|
|
root = get_handle_obj( process, parent, 0, NULL );
|
|
if (!root) return 0;
|
|
}
|
|
|
|
if ((obj = open_named_object( root, ops, name, attributes )))
|
|
{
|
|
handle = alloc_handle( process, obj, access, attributes );
|
|
release_object( obj );
|
|
}
|
|
if (root) release_object( root );
|
|
return handle;
|
|
}
|
|
|
|
/* return the size of the handle table of a given process */
|
|
unsigned int get_handle_table_count( struct process *process )
|
|
{
|
|
if (!process->handles) return 0;
|
|
return process->handles->count;
|
|
}
|
|
|
|
/* close a handle */
|
|
DECL_HANDLER(close_handle)
|
|
{
|
|
unsigned int err = close_handle( current->process, req->handle );
|
|
set_error( err );
|
|
}
|
|
|
|
/* set a handle information */
|
|
DECL_HANDLER(set_handle_info)
|
|
{
|
|
reply->old_flags = set_handle_flags( current->process, req->handle, req->mask, req->flags );
|
|
}
|
|
|
|
/* duplicate a handle */
|
|
DECL_HANDLER(dup_handle)
|
|
{
|
|
struct process *src, *dst = NULL;
|
|
|
|
reply->handle = 0;
|
|
if ((src = get_process_from_handle( req->src_process, PROCESS_DUP_HANDLE )))
|
|
{
|
|
if (req->options & DUPLICATE_MAKE_GLOBAL)
|
|
{
|
|
reply->handle = duplicate_handle( src, req->src_handle, NULL,
|
|
req->access, req->attributes, req->options );
|
|
}
|
|
else if ((dst = get_process_from_handle( req->dst_process, PROCESS_DUP_HANDLE )))
|
|
{
|
|
reply->handle = duplicate_handle( src, req->src_handle, dst,
|
|
req->access, req->attributes, req->options );
|
|
release_object( dst );
|
|
}
|
|
/* close the handle no matter what happened */
|
|
if ((req->options & DUPLICATE_CLOSE_SOURCE) && (src != dst || req->src_handle != reply->handle))
|
|
close_handle( src, req->src_handle );
|
|
release_object( src );
|
|
}
|
|
}
|
|
|
|
DECL_HANDLER(get_object_info)
|
|
{
|
|
struct object *obj;
|
|
|
|
if (!(obj = get_handle_obj( current->process, req->handle, 0, NULL ))) return;
|
|
|
|
reply->access = get_handle_access( current->process, req->handle );
|
|
reply->ref_count = obj->refcount;
|
|
reply->handle_count = obj->handle_count;
|
|
release_object( obj );
|
|
}
|
|
|
|
DECL_HANDLER(get_object_name)
|
|
{
|
|
struct object *obj;
|
|
WCHAR *name;
|
|
|
|
if (!(obj = get_handle_obj( current->process, req->handle, 0, NULL ))) return;
|
|
|
|
if ((name = obj->ops->get_full_name( obj, &reply->total )))
|
|
set_reply_data_ptr( name, min( reply->total, get_reply_max_size() ));
|
|
release_object( obj );
|
|
}
|
|
|
|
DECL_HANDLER(set_security_object)
|
|
{
|
|
data_size_t sd_size = get_req_data_size();
|
|
const struct security_descriptor *sd = get_req_data();
|
|
struct object *obj;
|
|
unsigned int access = 0;
|
|
|
|
if (!sd_is_valid( sd, sd_size ))
|
|
{
|
|
set_error( STATUS_ACCESS_VIOLATION );
|
|
return;
|
|
}
|
|
|
|
if (req->security_info & OWNER_SECURITY_INFORMATION ||
|
|
req->security_info & GROUP_SECURITY_INFORMATION ||
|
|
req->security_info & LABEL_SECURITY_INFORMATION)
|
|
access |= WRITE_OWNER;
|
|
if (req->security_info & SACL_SECURITY_INFORMATION)
|
|
access |= ACCESS_SYSTEM_SECURITY;
|
|
if (req->security_info & DACL_SECURITY_INFORMATION)
|
|
access |= WRITE_DAC;
|
|
|
|
if (!(obj = get_handle_obj( current->process, req->handle, access, NULL ))) return;
|
|
|
|
obj->ops->set_sd( obj, sd, req->security_info );
|
|
release_object( obj );
|
|
}
|
|
|
|
DECL_HANDLER(get_security_object)
|
|
{
|
|
const struct security_descriptor *sd;
|
|
struct object *obj;
|
|
unsigned int access = READ_CONTROL;
|
|
struct security_descriptor req_sd;
|
|
int present;
|
|
const struct sid *owner, *group;
|
|
const struct acl *sacl, *dacl;
|
|
struct acl *label_acl = NULL;
|
|
|
|
if (req->security_info & SACL_SECURITY_INFORMATION)
|
|
access |= ACCESS_SYSTEM_SECURITY;
|
|
|
|
if (!(obj = get_handle_obj( current->process, req->handle, access, NULL ))) return;
|
|
|
|
sd = obj->ops->get_sd( obj );
|
|
if (sd)
|
|
{
|
|
req_sd.control = sd->control & ~SE_SELF_RELATIVE;
|
|
|
|
owner = sd_get_owner( sd );
|
|
if (req->security_info & OWNER_SECURITY_INFORMATION)
|
|
req_sd.owner_len = sd->owner_len;
|
|
else
|
|
req_sd.owner_len = 0;
|
|
|
|
group = sd_get_group( sd );
|
|
if (req->security_info & GROUP_SECURITY_INFORMATION)
|
|
req_sd.group_len = sd->group_len;
|
|
else
|
|
req_sd.group_len = 0;
|
|
|
|
sacl = sd_get_sacl( sd, &present );
|
|
if (req->security_info & SACL_SECURITY_INFORMATION && present)
|
|
req_sd.sacl_len = sd->sacl_len;
|
|
else if (req->security_info & LABEL_SECURITY_INFORMATION && present && sacl)
|
|
{
|
|
if (!(label_acl = extract_security_labels( sacl ))) goto done;
|
|
req_sd.sacl_len = label_acl->size;
|
|
sacl = label_acl;
|
|
}
|
|
else
|
|
req_sd.sacl_len = 0;
|
|
|
|
dacl = sd_get_dacl( sd, &present );
|
|
if (req->security_info & DACL_SECURITY_INFORMATION && present)
|
|
req_sd.dacl_len = sd->dacl_len;
|
|
else
|
|
req_sd.dacl_len = 0;
|
|
|
|
reply->sd_len = sizeof(req_sd) + req_sd.owner_len + req_sd.group_len +
|
|
req_sd.sacl_len + req_sd.dacl_len;
|
|
if (reply->sd_len <= get_reply_max_size())
|
|
{
|
|
char *ptr = set_reply_data_size(reply->sd_len);
|
|
|
|
memcpy( ptr, &req_sd, sizeof(req_sd) );
|
|
ptr += sizeof(req_sd);
|
|
memcpy( ptr, owner, req_sd.owner_len );
|
|
ptr += req_sd.owner_len;
|
|
memcpy( ptr, group, req_sd.group_len );
|
|
ptr += req_sd.group_len;
|
|
memcpy( ptr, sacl, req_sd.sacl_len );
|
|
ptr += req_sd.sacl_len;
|
|
memcpy( ptr, dacl, req_sd.dacl_len );
|
|
}
|
|
else
|
|
set_error(STATUS_BUFFER_TOO_SMALL);
|
|
}
|
|
|
|
done:
|
|
release_object( obj );
|
|
free( label_acl );
|
|
}
|
|
|
|
struct enum_handle_info
|
|
{
|
|
unsigned int count;
|
|
struct handle_info *handle;
|
|
};
|
|
|
|
static int enum_handles( struct process *process, void *user )
|
|
{
|
|
struct enum_handle_info *info = user;
|
|
struct handle_table *table = process->handles;
|
|
struct handle_entry *entry;
|
|
struct handle_info *handle;
|
|
unsigned int i;
|
|
|
|
if (!table)
|
|
return 0;
|
|
|
|
for (i = 0, entry = table->entries; i <= table->last; i++, entry++)
|
|
{
|
|
if (!entry->ptr) continue;
|
|
if (!info->handle)
|
|
{
|
|
info->count++;
|
|
continue;
|
|
}
|
|
assert( info->count );
|
|
handle = info->handle++;
|
|
handle->owner = process->id;
|
|
handle->handle = index_to_handle(i);
|
|
handle->access = entry->access & ~RESERVED_ALL;
|
|
handle->type = entry->ptr->ops->type->index;
|
|
handle->attributes = 0;
|
|
if (entry->access & RESERVED_INHERIT) handle->attributes |= OBJ_INHERIT;
|
|
if (entry->access & RESERVED_CLOSE_PROTECT) handle->attributes |= OBJ_PROTECT_CLOSE;
|
|
info->count--;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
DECL_HANDLER(get_system_handles)
|
|
{
|
|
struct enum_handle_info info;
|
|
struct handle_info *handle;
|
|
data_size_t max_handles = get_reply_max_size() / sizeof(*handle);
|
|
|
|
info.handle = NULL;
|
|
info.count = 0;
|
|
enum_processes( enum_handles, &info );
|
|
reply->count = info.count;
|
|
|
|
if (max_handles < info.count)
|
|
set_error( STATUS_BUFFER_TOO_SMALL );
|
|
else if ((handle = set_reply_data_size( info.count * sizeof(*handle) )))
|
|
{
|
|
info.handle = handle;
|
|
enum_processes( enum_handles, &info );
|
|
}
|
|
}
|
|
|
|
DECL_HANDLER(make_temporary)
|
|
{
|
|
struct object *obj;
|
|
|
|
if (!(obj = get_handle_obj( current->process, req->handle, 0, NULL ))) return;
|
|
|
|
if (obj->is_permanent)
|
|
{
|
|
make_object_temporary( obj );
|
|
release_object( obj );
|
|
}
|
|
release_object( obj );
|
|
}
|
|
|
|
DECL_HANDLER(compare_objects)
|
|
{
|
|
struct object *obj1, *obj2;
|
|
|
|
if (!(obj1 = get_handle_obj( current->process, req->first, 0, NULL ))) return;
|
|
if (!(obj2 = get_handle_obj( current->process, req->second, 0, NULL )))
|
|
{
|
|
release_object( obj1 );
|
|
return;
|
|
}
|
|
|
|
if (obj1 != obj2) set_error( STATUS_NOT_SAME_OBJECT );
|
|
|
|
release_object( obj2 );
|
|
release_object( obj1 );
|
|
}
|