Changeset 77816 in vbox for trunk/include/iprt/nt

Timestamp:

Mar 21, 2019 12:01:49 AM (6 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

129490

Message:

SupHardNt: Made RTNtPathExpand8dot3Path() work correctly in kernel context (needs IPRT_NT_MAP_TO_ZW) and expand 8.3 names when comparing the executable image we found in the memory map with what NT returns for the process.

File:

• trunk/include/iprt/nt/nt.h (modified) (2 diffs)

trunk/include/iprt/nt/nt.h

@@ -40 +40 @@
 
 #ifdef IPRT_NT_MAP_TO_ZW
+# define NtQueryDirectoryFile           ZwQueryDirectoryFile
 # define NtQueryInformationFile         ZwQueryInformationFile
 # define NtQueryInformationProcess      ZwQueryInformationProcess
@@ -388 +389 @@
  */
 RTDECL(int) RTNtPathExpand8dot3Path(struct _UNICODE_STRING *pUniStr, bool fPathOnly);
+
+/**
+ * Wrapper around RTNtPathExpand8dot3Path that allocates a buffer instead of
+ * working on the input buffer.
+ *
+ * @returns IPRT status code, see RTNtPathExpand8dot3Path().
+ * @param   pUniStrSrc  The path to fix up. MaximumLength is the max buffer
+ *                      length.
+ * @param   fPathOnly   Whether to only process the path and leave the filename
+ *                      as passed in.
+ * @param   pUniStrDst  Output string.  On success, the caller must use
+ *                      RTUtf16Free to free what the Buffer member points to.
+ *                      This is all zeros and NULL on failure.
+ */
+RTDECL(int) RTNtPathExpand8dot3PathA(struct _UNICODE_STRING const *pShort, bool fPathOnly, struct _UNICODE_STRING *pUniStrDst);