/* * @implemented */ NTSTATUS NTAPI PsSetCreateThreadNotifyRoutine(IN PCREATE_THREAD_NOTIFY_ROUTINE NotifyRoutine) { ULONG i; PEX_CALLBACK_ROUTINE_BLOCK CallBack; PAGED_CODE(); /* Allocate a callback */ CallBack = ExAllocateCallBack((PVOID)NotifyRoutine, NULL); if (!CallBack) return STATUS_INSUFFICIENT_RESOURCES; /* Loop callbacks */ for (i = 0; i < PSP_MAX_CREATE_THREAD_NOTIFY; i++) { /* Add this entry if the slot is empty */ if (ExCompareExchangeCallBack(&PspThreadNotifyRoutine[i], CallBack, NULL)) { /* Return success */ InterlockedIncrement((PLONG)&PspThreadNotifyRoutineCount); return STATUS_SUCCESS; } } /* No free space found, fail */ ExFreeCallBack(CallBack); return STATUS_INSUFFICIENT_RESOURCES; }
static VOID TestPrivateFunctions(VOID) { UNICODE_STRING ExAllocateCallBackName = RTL_CONSTANT_STRING(L"ExAllocateCallBack"); UNICODE_STRING ExFreeCallBackName = RTL_CONSTANT_STRING(L"ExFreeCallBack"); PEX_CALLBACK_ROUTINE_BLOCK CallbackBlock; INT CallbackContext; if (!ExAllocateCallBack) ExAllocateCallBack = MmGetSystemRoutineAddress(&ExAllocateCallBackName); if (!ExFreeCallBack) ExFreeCallBack = MmGetSystemRoutineAddress(&ExFreeCallBackName); if (skip(ExAllocateCallBack && ExFreeCallBack, "ExAllocateCallBack and/or ExFreeCallBack unavailable\n")) return; CallbackBlock = ExAllocateCallBack(ExCallbackFunction, &CallbackContext); ok(CallbackBlock != NULL, "CallbackBlock = NULL\n"); if (skip(CallbackBlock != NULL, "Allocating callback failed\n")) return; ok_eq_pointer(CallbackBlock->Function, ExCallbackFunction); ok_eq_pointer(CallbackBlock->Context, &CallbackContext); ok_eq_hex(KmtGetPoolTag(CallbackBlock), 'brbC'); ExFreeCallBack(CallbackBlock); }
/* * @implemented */ NTSTATUS NTAPI PsRemoveCreateThreadNotifyRoutine(IN PCREATE_THREAD_NOTIFY_ROUTINE NotifyRoutine) { ULONG i; PEX_CALLBACK_ROUTINE_BLOCK CallBack; PAGED_CODE(); /* Loop all callbacks */ for (i = 0; i < PSP_MAX_CREATE_THREAD_NOTIFY; i++) { /* Reference this slot */ CallBack = ExReferenceCallBackBlock(&PspThreadNotifyRoutine[i]); if (CallBack) { /* Check for a match */ if (ExGetCallBackBlockRoutine(CallBack) == (PVOID)NotifyRoutine) { /* Try removing it if it matches */ if (ExCompareExchangeCallBack(&PspThreadNotifyRoutine[i], NULL, CallBack)) { /* We removed it, now dereference the block */ InterlockedDecrement((PLONG)&PspThreadNotifyRoutineCount); ExDereferenceCallBackBlock(&PspThreadNotifyRoutine[i], CallBack); /* Wait for active callbacks */ ExWaitForCallBacks(CallBack); /* Free the callback and return */ ExFreeCallBack(CallBack); return STATUS_SUCCESS; } } /* Dereference the callback */ ExDereferenceCallBackBlock(&PspThreadNotifyRoutine[i], CallBack); } } /* Nothing found to remove */ return STATUS_PROCEDURE_NOT_FOUND; }
/* * @implemented */ NTSTATUS NTAPI PsSetCreateProcessNotifyRoutine(IN PCREATE_PROCESS_NOTIFY_ROUTINE NotifyRoutine, IN BOOLEAN Remove) { ULONG i; PEX_CALLBACK_ROUTINE_BLOCK CallBack; PAGED_CODE(); /* Check if we're removing */ if (Remove) { /* Loop all the routines */ for (i = 0; i < PSP_MAX_CREATE_PROCESS_NOTIFY; i++) { /* Reference the callback block */ CallBack = ExReferenceCallBackBlock(&PspProcessNotifyRoutine[i]); if (!CallBack) continue; /* Check it this is a matching block */ if (ExGetCallBackBlockRoutine(CallBack) != (PVOID)NotifyRoutine) { /* It's not, try the next one */ continue; } /* It is, clear the current routine */ if (ExCompareExchangeCallBack(&PspProcessNotifyRoutine[i], NULL, CallBack)) { /* Decrement the number of routines */ InterlockedDecrement((PLONG)&PspProcessNotifyRoutineCount); /* Dereference the block */ ExDereferenceCallBackBlock(&PspProcessNotifyRoutine[i], CallBack); /* Wait for actice callbacks */ ExWaitForCallBacks(CallBack); /* Free the callback and exit */ ExFreeCallBack (CallBack); return STATUS_SUCCESS; } /* Dereference the block */ ExDereferenceCallBackBlock(&PspProcessNotifyRoutine[i], CallBack); } /* We didn't find any matching block */ return STATUS_PROCEDURE_NOT_FOUND; } else { /* Allocate a callback */ CallBack = ExAllocateCallBack((PVOID)NotifyRoutine, NULL); if (!CallBack) return STATUS_INSUFFICIENT_RESOURCES; /* Loop all callbacks */ for (i = 0; i < PSP_MAX_CREATE_PROCESS_NOTIFY; i++) { /* Add this routine if it's an empty slot */ if (ExCompareExchangeCallBack(&PspProcessNotifyRoutine[i], CallBack, NULL)) { /* Found and inserted into an empty slot, return */ InterlockedIncrement((PLONG)&PspProcessNotifyRoutineCount); return STATUS_SUCCESS; } } /* We didn't find a free slot, free the callback and fail */ ExFreeCallBack(CallBack); return STATUS_INVALID_PARAMETER; } }