Filip Navara wrote:
Hartmut Birr wrote:
I think that Alex's changes are correct. If Alex's changes are wrong, all other type object initialisations are also wrong. There is only one little bug, the EXPORTED/IMPORTED definition is missing.
Hmm, you might be right...
I have searched the net a bit and looked into my books.
Windows NT Filesystem Internals: "...at system initialization time, the NT I/O Manager registers all the different I/O Manager objects (including the file object structure) with the NT Object Manager. The ObCreateObjectType() Object Manager routine is used for this purpose. Although this routine is not exposed by the NT Executive, it serves to make the NT Object Manager aware of a new object type. When invoking this routine, the I/O Manager also supplies the functions that must be invoked by the Object Manager to manipulate the object being defined. For file object structures, the I/O Manager supplies an internal routine called IopCloseFile() to be invoked whenever any handle associated with the file object has been closed."
The ObCreateObjectType function has prototype similar to this:
NTSTATUS STDCALL ObCreateObjectType( IN PUNICODE_STRING ObjectTypeName, IN POBJECT_TYPE_INITIALIZER ObjectTypeInitializer, IN ULONG Reserved, OUT POBJECT_TYPE *ObjectType);
typedef struct _OBJECT_TYPE_INITIALIZER { WORD Length; UCHAR UseDefaultObject; UCHAR CaseInsensitive; ULONG InvalidAttributes; GENERIC_MAPPING GenericMapping; ULONG ValidAccessMask; UCHAR SecurityRequired; UCHAR MaintainHandleCount; UCHAR MaintainTypeList; POOL_TYPE PoolType; ULONG DefaultPagedPoolCharge; ULONG DefaultNonPagedPoolCharge; /* Prototypes for the functions below are in our headers... */ PVOID DumpProcedure; PVOID OpenProcedure; PVOID CloseProcedure; PVOID DeleteProcedure; PVOID ParseProcedure; PVOID SecurityProcedure; PVOID QueryNameProcedure; PVOID OkayToCloseProcedure; } OBJECT_TYPE_INITIALIZER, *POBJECT_TYPE_INITIALIZER;
and it's used like
RtlZeroMemory(&ObjectTypeInitializer, sizeof(OBJECT_TYPE_INITIALIZER)); ObjectTypeInitializer.Length = sizeof(OBJECT_TYPE_INITIALIZER); ... RtlInitUnicodeString(&ObjectTypeName, L"Port"); ObCreateObjectType(&ObjectTypeName, &ObjectTypeInitializer, 0, &LpcPortObjectType);
so yes, the exported *ObjectType variables are really of type POBJECT_TYPE.
My apologies to Alex.
Regards, Filip