[英]Opening named shared memory in windows kernel
我試圖通過共享內存將兩個地址從用戶模式程序傳遞給我的內核模式驅動程序。 我在網上找不到任何關於在內核中打開命名映射內存的資源,所以我想我可以使用 ZwOpenFile 和我在用戶模式程序中使用的名稱。 問題是驅動程序正在記錄“無法加載 shmem”,所以我不知道如何正確打開它。
用戶模式代碼:
#define BUF_SIZE 256
TCHAR szName[] = TEXT("Global\\MyFileMappingObject");
TCHAR szMsg[] = TEXT("0x0\n0x1");
int main() {
HANDLE hMapFile;
LPCTSTR pBuf;
hMapFile = CreateFileMapping(
INVALID_HANDLE_VALUE, // use paging file
NULL, // default security
PAGE_READWRITE, // read/write access
0, // maximum object size (high-order DWORD)
BUF_SIZE, // maximum object size (low-order DWORD)
szName); // name of mapping object
if (hMapFile == NULL)
{
_tprintf(TEXT("Could not create file mapping object (%d).\n"),
GetLastError());
return 1;
}
pBuf = (LPTSTR)MapViewOfFile(hMapFile, // handle to map object
FILE_MAP_ALL_ACCESS, // read/write permission
0,
0,
BUF_SIZE);
if (pBuf == NULL)
{
_tprintf(TEXT("Could not map view of file (%d).\n"),
GetLastError());
CloseHandle(hMapFile);
return 1;
}
CopyMemory((PVOID)pBuf, szMsg, (_tcslen(szMsg) * sizeof(TCHAR)));
Pause(); // I run the kernel driver when code is here, shmem is still mapped
UnmapViewOfFile(pBuf);
CloseHandle(hMapFile);
內核驅動代碼:
HANDLE shmem;
OBJECT_ATTRIBUTES attrs;
UNICODE_STRING uniName;
OBJECT_ATTRIBUTES objAttr;
IO_STATUS_BLOCK ioStatusBlock;
RtlInitUnicodeString(&uniName, L"Global\\MyFileMappingObject");
InitializeObjectAttributes(&attrs, &uniName, OBJ_CASE_INSENSITIVE, NULL, NULL);
if (!NT_SUCCESS(ZwOpenFile(&shmem, READ_CONTROL, &attrs, &ioStatusBlock, FILE_SHARE_READ, FILE_NON_DIRECTORY_FILE))) {
log("Could not load shmem");
}
else {
log("shmem loaded successfully");
ZwClose(shmem);
}
提前致謝
解決了,使用ZwOpenSection,路徑以\\\\BaseNamedObjects\\\\開頭
HANDLE shmem;
OBJECT_ATTRIBUTES attrs;
UNICODE_STRING uniName;
RtlInitUnicodeString(&uniName, L"\\BaseNamedObjects\\MyFileMappingObject");
InitializeObjectAttributes(&attrs, &uniName, OBJ_CASE_INSENSITIVE, NULL, NULL);
if (!NT_SUCCESS(ZwOpenSection(&shmem, FILE_SHARE_READ, &attrs))) {
log("Could not load shmem");
}
else {
log("shmem loaded successfully");
ZwClose(shmem);
}
聲明:本站的技術帖子網頁,遵循CC BY-SA 4.0協議,如果您需要轉載,請注明本站網址或者原文地址。任何問題請咨詢:yoyou2525@163.com.