NTSTATUS INIT_FUNCTION NTAPI IopCreateArcNamesDisk(IN PLOADER_PARAMETER_BLOCK LoaderBlock, IN BOOLEAN SingleDisk, IN PBOOLEAN FoundBoot) { PIRP Irp; PVOID Data; KEVENT Event; NTSTATUS Status; PLIST_ENTRY NextEntry; PFILE_OBJECT FileObject; DISK_GEOMETRY DiskGeometry; PDEVICE_OBJECT DeviceObject; LARGE_INTEGER StartingOffset; PULONG PartitionBuffer = NULL; IO_STATUS_BLOCK IoStatusBlock; CHAR Buffer[128], ArcBuffer[128]; BOOLEAN NotEnabledPresent = FALSE; STORAGE_DEVICE_NUMBER DeviceNumber; PARC_DISK_SIGNATURE ArcDiskSignature; PWSTR SymbolicLinkList, lSymbolicLinkList; PDRIVE_LAYOUT_INFORMATION_EX DriveLayout = NULL; UNICODE_STRING DeviceStringW, ArcNameStringW, HalPathStringW; ULONG DiskNumber, DiskCount, CheckSum, i, Signature, EnabledDisks = 0; PARC_DISK_INFORMATION ArcDiskInformation = LoaderBlock->ArcDiskInformation; ANSI_STRING ArcBootString, ArcSystemString, DeviceStringA, ArcNameStringA, HalPathStringA; /* Initialise device number */ DeviceNumber.DeviceNumber = 0xFFFFFFFF; /* Get all the disks present in the system */ DiskCount = IoGetConfigurationInformation()->DiskCount; /* Get enabled disks and check if result matches */ Status = IopFetchConfigurationInformation(&SymbolicLinkList, GUID_DEVINTERFACE_DISK, DiskCount, &EnabledDisks); if (!NT_SUCCESS(Status)) { NotEnabledPresent = TRUE; } /* Save symbolic link list address in order to free it after */ lSymbolicLinkList = SymbolicLinkList; /* Build the boot strings */ RtlInitAnsiString(&ArcBootString, LoaderBlock->ArcBootDeviceName); RtlInitAnsiString(&ArcSystemString, LoaderBlock->ArcHalDeviceName); /* If we have more enabled disks, take that into account */ if (EnabledDisks > DiskCount) { DiskCount = EnabledDisks; } /* If we'll have to browse for none enabled disks, fix higher count */ if (NotEnabledPresent && !EnabledDisks) { DiskCount += 20; } /* Finally, if in spite of all that work, we still don't have disks, leave */ if (!DiskCount) { goto Cleanup; } /* Start browsing disks */ for (DiskNumber = 0; DiskNumber < DiskCount; DiskNumber++) { /* Check if we have an enabled disk */ if (lSymbolicLinkList && *lSymbolicLinkList != UNICODE_NULL) { /* Create its device name using first symbolic link */ RtlInitUnicodeString(&DeviceStringW, lSymbolicLinkList); /* Then, update symbolic links list */ lSymbolicLinkList += wcslen(lSymbolicLinkList) + (sizeof(UNICODE_NULL) / sizeof(WCHAR)); /* Get its associated device object and file object */ Status = IoGetDeviceObjectPointer(&DeviceStringW, FILE_READ_ATTRIBUTES, &FileObject, &DeviceObject); if (NT_SUCCESS(Status)) { /* Now, we'll ask the device its device number */ Irp = IoBuildDeviceIoControlRequest(IOCTL_STORAGE_GET_DEVICE_NUMBER, DeviceObject, NULL, 0, &DeviceNumber, sizeof(STORAGE_DEVICE_NUMBER), FALSE, &Event, &IoStatusBlock); /* Missing resources is a shame... No need to go farther */ if (!Irp) { ObDereferenceObject(FileObject); Status = STATUS_INSUFFICIENT_RESOURCES; goto Cleanup; } /* Call the driver, and wait for it if needed */ KeInitializeEvent(&Event, NotificationEvent, FALSE); Status = IoCallDriver(DeviceObject, Irp); if (Status == STATUS_PENDING) { KeWaitForSingleObject(&Event, Executive, KernelMode, FALSE, NULL); Status = IoStatusBlock.Status; } /* If we didn't get the appriopriate data, just skip that disk */ if (!NT_SUCCESS(Status)) { ObDereferenceObject(FileObject); continue; } } /* End of enabled disks enumeration */ if (NotEnabledPresent && *lSymbolicLinkList == UNICODE_NULL) { /* No enabled disk worked, reset field */ if (DeviceNumber.DeviceNumber == 0xFFFFFFFF) { DeviceNumber.DeviceNumber = 0; } /* Update disk number to enable the following not enabled disks */ if (DeviceNumber.DeviceNumber > DiskNumber) { DiskNumber = DeviceNumber.DeviceNumber; } /* Increase a bit more */ DiskCount = DiskNumber + 20; } } else { /* Create device name for the disk */ sprintf(Buffer, "\\Device\\Harddisk%lu\\Partition0", DiskNumber); RtlInitAnsiString(&DeviceStringA, Buffer); Status = RtlAnsiStringToUnicodeString(&DeviceStringW, &DeviceStringA, TRUE); if (!NT_SUCCESS(Status)) { goto Cleanup; } /* Get its device object */ Status = IoGetDeviceObjectPointer(&DeviceStringW, FILE_READ_ATTRIBUTES, &FileObject, &DeviceObject); RtlFreeUnicodeString(&DeviceStringW); /* This is a security measure, to ensure DiskNumber will be used */ DeviceNumber.DeviceNumber = 0xFFFFFFFF; } /* Something failed somewhere earlier, just skip the disk */ if (!NT_SUCCESS(Status)) { continue; } /* Let's ask the disk for its geometry */ Irp = IoBuildDeviceIoControlRequest(IOCTL_DISK_GET_DRIVE_GEOMETRY, DeviceObject, NULL, 0, &DiskGeometry, sizeof(DISK_GEOMETRY), FALSE, &Event, &IoStatusBlock); /* Missing resources is a shame... No need to go farther */ if (!Irp) { ObDereferenceObject(FileObject); Status = STATUS_INSUFFICIENT_RESOURCES; goto Cleanup; } /* Call the driver, and wait for it if needed */ KeInitializeEvent(&Event, NotificationEvent, FALSE); Status = IoCallDriver(DeviceObject, Irp); if (Status == STATUS_PENDING) { KeWaitForSingleObject(&Event, Executive, KernelMode, FALSE, NULL); Status = IoStatusBlock.Status; } /* Failure, skip disk */ if (!NT_SUCCESS(Status)) { ObDereferenceObject(FileObject); continue; } /* Read the partition table */ Status = IoReadPartitionTableEx(DeviceObject, &DriveLayout); if (!NT_SUCCESS(Status)) { ObDereferenceObject(FileObject); continue; } /* Ensure we have at least 512 bytes per sector */ if (DiskGeometry.BytesPerSector < 512) { DiskGeometry.BytesPerSector = 512; } /* Check MBR type against EZ Drive type */ StartingOffset.QuadPart = 0; HalExamineMBR(DeviceObject, DiskGeometry.BytesPerSector, 0x55, &Data); if (Data) { /* If MBR is of the EZ Drive type, we'll read after it */ StartingOffset.QuadPart = DiskGeometry.BytesPerSector; ExFreePool(Data); } /* Allocate for reading enough data for checksum */ PartitionBuffer = ExAllocatePoolWithTag(NonPagedPoolCacheAligned, DiskGeometry.BytesPerSector, TAG_IO); if (!PartitionBuffer) { ObDereferenceObject(FileObject); Status = STATUS_INSUFFICIENT_RESOURCES; goto Cleanup; } /* Read a sector for computing checksum */ Irp = IoBuildSynchronousFsdRequest(IRP_MJ_READ, DeviceObject, PartitionBuffer, DiskGeometry.BytesPerSector, &StartingOffset, &Event, &IoStatusBlock); if (!Irp) { ObDereferenceObject(FileObject); Status = STATUS_INSUFFICIENT_RESOURCES; goto Cleanup; } /* Call the driver to perform reading */ KeInitializeEvent(&Event, NotificationEvent, FALSE); Status = IoCallDriver(DeviceObject, Irp); if (Status == STATUS_PENDING) { KeWaitForSingleObject(&Event, Executive, KernelMode, FALSE, NULL); Status = IoStatusBlock.Status; } if (!NT_SUCCESS(Status)) { ExFreePool(DriveLayout); ExFreePoolWithTag(PartitionBuffer, TAG_IO); ObDereferenceObject(FileObject); continue; } ObDereferenceObject(FileObject); /* Calculate checksum, that's an easy computation, just adds read data */ for (i = 0, CheckSum = 0; i < 512 / sizeof(ULONG) ; i++) { CheckSum += PartitionBuffer[i]; } /* Browse each ARC disk */ for (NextEntry = ArcDiskInformation->DiskSignatureListHead.Flink; NextEntry != &ArcDiskInformation->DiskSignatureListHead; NextEntry = NextEntry->Flink) { ArcDiskSignature = CONTAINING_RECORD(NextEntry, ARC_DISK_SIGNATURE, ListEntry); /* If they matches, ie * - There's only one disk for both BIOS and detected/enabled * - Signatures are matching * - Checksums are matching * - This is MBR */ if (((SingleDisk && DiskCount == 1) || (IopVerifyDiskSignature(DriveLayout, ArcDiskSignature, &Signature) && (ArcDiskSignature->CheckSum + CheckSum == 0))) && (DriveLayout->PartitionStyle == PARTITION_STYLE_MBR)) { /* Create device name */ sprintf(Buffer, "\\Device\\Harddisk%lu\\Partition0", (DeviceNumber.DeviceNumber != 0xFFFFFFFF) ? DeviceNumber.DeviceNumber : DiskNumber); RtlInitAnsiString(&DeviceStringA, Buffer); Status = RtlAnsiStringToUnicodeString(&DeviceStringW, &DeviceStringA, TRUE); if (!NT_SUCCESS(Status)) { goto Cleanup; } /* Create ARC name */ sprintf(ArcBuffer, "\\ArcName\\%s", ArcDiskSignature->ArcName); RtlInitAnsiString(&ArcNameStringA, ArcBuffer); Status = RtlAnsiStringToUnicodeString(&ArcNameStringW, &ArcNameStringA, TRUE); if (!NT_SUCCESS(Status)) { RtlFreeUnicodeString(&DeviceStringW); goto Cleanup; } /* Link both */ IoCreateSymbolicLink(&ArcNameStringW, &DeviceStringW); /* And release resources */ RtlFreeUnicodeString(&ArcNameStringW); RtlFreeUnicodeString(&DeviceStringW); /* Now, browse for every partition */ for (i = 1; i <= DriveLayout->PartitionCount; i++) { /* Create device name */ sprintf(Buffer, "\\Device\\Harddisk%lu\\Partition%lu", (DeviceNumber.DeviceNumber != 0xFFFFFFFF) ? DeviceNumber.DeviceNumber : DiskNumber, i); RtlInitAnsiString(&DeviceStringA, Buffer); Status = RtlAnsiStringToUnicodeString(&DeviceStringW, &DeviceStringA, TRUE); if (!NT_SUCCESS(Status)) { goto Cleanup; } /* Create partial ARC name */ sprintf(ArcBuffer, "%spartition(%lu)", ArcDiskSignature->ArcName, i); RtlInitAnsiString(&ArcNameStringA, ArcBuffer); /* Is that boot device? */ if (RtlEqualString(&ArcNameStringA, &ArcBootString, TRUE)) { DPRINT("Found boot device\n"); *FoundBoot = TRUE; } /* Is that system partition? */ if (RtlEqualString(&ArcNameStringA, &ArcSystemString, TRUE)) { /* Create HAL path name */ RtlInitAnsiString(&HalPathStringA, LoaderBlock->NtHalPathName); Status = RtlAnsiStringToUnicodeString(&HalPathStringW, &HalPathStringA, TRUE); if (!NT_SUCCESS(Status)) { RtlFreeUnicodeString(&DeviceStringW); goto Cleanup; } /* Then store those information to registry */ IopStoreSystemPartitionInformation(&DeviceStringW, &HalPathStringW); RtlFreeUnicodeString(&HalPathStringW); } /* Create complete ARC name */ sprintf(ArcBuffer, "\\ArcName\\%spartition(%lu)", ArcDiskSignature->ArcName, i); RtlInitAnsiString(&ArcNameStringA, ArcBuffer); Status = RtlAnsiStringToUnicodeString(&ArcNameStringW, &ArcNameStringA, TRUE); if (!NT_SUCCESS(Status)) { RtlFreeUnicodeString(&DeviceStringW); goto Cleanup; } /* Link device name & ARC name */ IoCreateSymbolicLink(&ArcNameStringW, &DeviceStringW); /* Release strings */ RtlFreeUnicodeString(&ArcNameStringW); RtlFreeUnicodeString(&DeviceStringW); } } else { /* In case there's a valid partition, a matching signature, BUT a none matching checksum, or there's a duplicate signature, or even worse a virus played with partition table */ if (ArcDiskSignature->Signature == Signature && (ArcDiskSignature->CheckSum + CheckSum != 0) && ArcDiskSignature->ValidPartitionTable) { DPRINT("Be careful, or you have a duplicate disk signature, or a virus altered your MBR!\n"); } } } /* Release memory before jumping to next item */ ExFreePool(DriveLayout); DriveLayout = NULL; ExFreePoolWithTag(PartitionBuffer, TAG_IO); PartitionBuffer = NULL; } Status = STATUS_SUCCESS; Cleanup: if (SymbolicLinkList) { ExFreePool(SymbolicLinkList); } if (DriveLayout) { ExFreePool(DriveLayout); } if (PartitionBuffer) { ExFreePoolWithTag(PartitionBuffer, TAG_IO); } return Status; }
NTSTATUS INIT_FUNCTION NTAPI IopCreateArcNames(IN PLOADER_PARAMETER_BLOCK LoaderBlock) { SIZE_T Length; NTSTATUS Status; CHAR Buffer[128]; BOOLEAN SingleDisk; BOOLEAN FoundBoot = FALSE; UNICODE_STRING SystemDevice, LoaderPathNameW, BootDeviceName; PARC_DISK_INFORMATION ArcDiskInfo = LoaderBlock->ArcDiskInformation; ANSI_STRING ArcSystemString, ArcString, LanmanRedirector, LoaderPathNameA; /* Check if we only have one disk on the machine */ SingleDisk = ArcDiskInfo->DiskSignatureListHead.Flink->Flink == (&ArcDiskInfo->DiskSignatureListHead); /* Create the global HAL partition name */ sprintf(Buffer, "\\ArcName\\%s", LoaderBlock->ArcHalDeviceName); RtlInitAnsiString(&ArcString, Buffer); RtlAnsiStringToUnicodeString(&IoArcHalDeviceName, &ArcString, TRUE); /* Create the global system partition name */ sprintf(Buffer, "\\ArcName\\%s", LoaderBlock->ArcBootDeviceName); RtlInitAnsiString(&ArcString, Buffer); RtlAnsiStringToUnicodeString(&IoArcBootDeviceName, &ArcString, TRUE); /* Allocate memory for the string */ Length = strlen(LoaderBlock->ArcBootDeviceName) + sizeof(ANSI_NULL); IoLoaderArcBootDeviceName = ExAllocatePoolWithTag(PagedPool, Length, TAG_IO); if (IoLoaderArcBootDeviceName) { /* Copy the name */ RtlCopyMemory(IoLoaderArcBootDeviceName, LoaderBlock->ArcBootDeviceName, Length); } /* Check if we only found a disk, but we're booting from CD-ROM */ if ((SingleDisk) && strstr(LoaderBlock->ArcBootDeviceName, "cdrom")) { /* Then disable single-disk mode, since there's a CD drive out there */ SingleDisk = FALSE; } /* Build the boot strings */ RtlInitAnsiString(&ArcSystemString, LoaderBlock->ArcHalDeviceName); /* If we are doing remote booting */ if (IoRemoteBootClient) { /* Yes, we have found boot device */ FoundBoot = TRUE; /* Get NT device name */ RtlInitAnsiString(&LanmanRedirector, "\\Device\\LanmanRedirector"); Status = RtlAnsiStringToUnicodeString(&SystemDevice, &LanmanRedirector, TRUE); if (!NT_SUCCESS(Status)) { return Status; } /* Get ARC booting device name (in net(0) something) */ sprintf(Buffer, "\\ArcName\\%s", LoaderBlock->ArcBootDeviceName); RtlInitAnsiString(&ArcString, Buffer); Status = RtlAnsiStringToUnicodeString(&BootDeviceName, &ArcString, TRUE); if (NT_SUCCESS(Status)) { /* Map ARC to NT name */ IoAssignArcName(&BootDeviceName, &SystemDevice); RtlFreeUnicodeString(&BootDeviceName); /* Now, get loader path name */ RtlInitAnsiString(&LoaderPathNameA, LoaderBlock->NtHalPathName); Status = RtlAnsiStringToUnicodeString(&LoaderPathNameW, &LoaderPathNameA, TRUE); if (!NT_SUCCESS(Status)) { RtlFreeUnicodeString(&SystemDevice); return Status; } /* And set it has system partition */ IopStoreSystemPartitionInformation(&SystemDevice, &LoaderPathNameW); } RtlFreeUnicodeString(&SystemDevice); /* Don't quit here, even if everything went fine! * We need IopCreateArcNamesDisk to properly map * devices with symlinks. * It will return success if the mapping process went fine * even if it didn't find boot device. * It won't reset boot device finding status as well. */ } /* Loop every disk and try to find boot disk */ Status = IopCreateArcNamesDisk(LoaderBlock, SingleDisk, &FoundBoot); /* If it succeed but we didn't find boot device, try to browse Cds */ if (NT_SUCCESS(Status) && !FoundBoot) { Status = IopCreateArcNamesCd(LoaderBlock); } /* Return success */ return Status; }