Blob Blame History Raw
/********************************************************/
/*  ntapi: Native API core library                      */
/*  Copyright (C) 2013--2016  Z. Gilboa                 */
/*  Released under GPLv2 and GPLv3; see COPYING.NTAPI.  */
/********************************************************/

#include <ntapi/ntapi.h>
#include <ntapi/nt_file.h>
#include <ntapi/nt_fsctl.h>
#include <ntapi/nt_mount.h>
#include <ntapi/nt_istat.h>
#include "ntapi_impl.h"

int32_t __stdcall __ntapi_tt_istat(
	__in	void *			hfile,
	__in	void *			hroot	__optional,
	__in	nt_unicode_string *	path,
	__out	nt_istat *		istat,
	__out	uintptr_t *		buffer,
	__in	uint32_t		buffer_size,
	__in	uint32_t		open_options,
	__in	uint32_t		flags)
{
	int32_t			status;

	nt_oa			oa;
	nt_iosb			iosb;
	nt_unicode_string *	sdev;
	wchar16_t *		wch;
	wchar16_t *		wch_mark;

	/* validaton */
	if (!hfile && !path)
		return NT_STATUS_INVALID_HANDLE;

	/* hfile */
	if (!hfile) {
		/* oa */
		oa.len = sizeof(nt_oa);
		oa.root_dir = hroot;
		oa.obj_name = path;
		oa.obj_attr = 0;
		oa.sec_desc = 0;
		oa.sec_qos = 0;

		/* open file/folder */
		if ((status = __ntapi->zw_open_file(
				&hfile,
				NT_SEC_SYNCHRONIZE
					| NT_FILE_READ_ATTRIBUTES
					| NT_FILE_READ_ACCESS,
				&oa,
				&iosb,
				NT_FILE_SHARE_READ | NT_FILE_SHARE_WRITE,
				open_options | NT_FILE_SYNCHRONOUS_IO_ALERT)))
			return status;

		istat->flags_out = NT_STAT_NEW_HANDLE;
	}

	istat->hfile    = hfile;
	istat->flags_in = flags;

	/* file index number */
	if ((status = __ntapi->zw_query_information_file(
			hfile,
			&iosb,
			&istat->fii,
			sizeof(istat->fii),
			NT_FILE_INTERNAL_INFORMATION)))
		return status;

	/* attributes & reparse tag information */
	if ((status = __ntapi->zw_query_information_file(
			hfile,
			&iosb,
			&istat->ftagi,
			sizeof(istat->ftagi),
			NT_FILE_ATTRIBUTE_TAG_INFORMATION)))
		return status;

	/* system-unique device name */
	if ((status = __ntapi->zw_query_object(
			hfile,
			NT_OBJECT_NAME_INFORMATION,
			buffer,
			buffer_size,
			(uint32_t *)&iosb.info)))
		return status;

	sdev = (nt_unicode_string *)buffer;
	wch  = sdev->buffer;

	if (sdev->strlen < __DEVICE_PATH_PREFIX_LEN)
		return NT_STATUS_INVALID_HANDLE;

	if ((wch[0] != '\\')
			|| (wch[1] != 'D')
			|| (wch[2] != 'e')
			|| (wch[3] != 'v')
			|| (wch[4] != 'i')
			|| (wch[5] != 'c')
			|| (wch[6] != 'e')
			|| (wch[7] != '\\'))
		return NT_STATUS_INVALID_HANDLE;

	wch_mark = &wch[8];
	wch      = wch_mark;

	while (*wch != '\\')
		wch++;

	istat->dev_name_strlen = (uint16_t)((wch - sdev->buffer) * sizeof(uint16_t));
	istat->dev_name_hash   = __ntapi->tt_buffer_crc32(
		__DEVICE_PATH_PREFIX_HASH,
		wch_mark,
		(uintptr_t)wch - (uintptr_t)wch_mark);

	return status;
}


int32_t __stdcall __ntapi_tt_validate_fs_handle(
	__in	void *		hfile,
	__in	uint32_t	dev_name_hash,
	__in	nt_fii		fii,
	__out	uintptr_t *	buffer,
	__in	uint32_t	buffer_size)
{
	int32_t		status;
	nt_istat	istat;

	status = __ntapi->tt_istat(
		hfile,
		(void *)0,
		(nt_unicode_string *)0,
		&istat,
		buffer,
		buffer_size,
		0,
		NT_ISTAT_DEFAULT);

	if (status) return status;

	if (istat.fii.index_number.quad != fii.index_number.quad)
		return NT_STATUS_CONTEXT_MISMATCH;
	else if (istat.dev_name_hash != dev_name_hash)
		return NT_STATUS_CONTEXT_MISMATCH;

	return NT_STATUS_SUCCESS;
}