IoGetDeviceObjectPointer

最新推荐文章于 2022-06-21 21:12:03 发布

转载最新推荐文章于 2022-06-21 21:12:03 发布 · 1.3k 阅读

本文介绍如何使用IoGetDeviceObjectPointer函数通过设备名称获取设备对象及其相关文件对象，并提供了示例代码，强调了正确释放资源的重要性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

ZZ From：http://blog.youkuaiyun.com/zacklin/article/details/7466299

从名字获得设备对象

在知道一个设备名字的情况下，使用函数IoGetDeviceObjectPointer可以获得这个设备对象的指针。这个函数的原型如下：

<pre style="padding: 5px; margin-top: 0px; margin-bottom: 0px; overflow: auto; word-wrap: normal; font-size: 13.63636302947998px; line-height: 18.187271118164063px; font-family: Consolas, Courier, monospace !important;">NTSTATUS IoGetDeviceObjectPointer(
  _In_   PUNICODE_STRING ObjectName,
  _In_   ACCESS_MASK DesiredAccess,
  _Out_  PFILE_OBJECT *FileObject,
  _Out_  PDEVICE_OBJECT *DeviceObject
);

ParametersObjectName [in]Pointer to a buffer that contains a Unicode string that is the name of the device object.DesiredAccess [in]Specifies the ACCESS_MASK value that represents the desired access. Usually DesiredAccess is FILE_READ_DATA. Infrequently, the FILE_WRITE_DATA, or FILE_ALL_ACCESS access rights are specified.FileObject [out]Pointer to the file object that represents the corresponding device object to user-mode code if the call is successful.DeviceObject [out]Pointer to the device object that represents the named logical, virtual, or physical device if the call is successful.Return valueIoGetDeviceObjectPointer returns STATUS_SUCCESS if it is successful. Possible error return values include the following status codes:STATUS_OBJECT_TYPE_MISMATCHSTATUS_INVALID_PARAMETERSTATUS_PRIVILEGE_NOT_HELDSTATUS_INSUFFICIENT_RESOURCESSTATUS_OBJECT_NAME_INVALIDRemarksIoGetDeviceObjectPointer establishes a "connection" between the caller and the next-lower-level driver. A successful caller can use the returned device object pointer to initialize its own device objects. It can also be used as an argument to IoAttachDeviceToDeviceStack, IoCallDriver, and any routine that creates IRPs for lower drivers. The returned pointer is a required argument to IoCallDriver.This routine also returns a pointer to the corresponding file object. When unloading, a driver can dereference the file object as a means of indirectly dereferencing the device object. To do so, the driver calls ObDereferenceObject from its Unload routine, passing the file object pointer returned by IoGetDeviceObjectPointer. Failure to dereference the device object in a driver's Unload routine prevents the next-lower driver from being unloaded. However, drivers that close the file object before the unload process must take out an extra reference on the device object before dereferencing the file object. Otherwise, dereferencing the file object can lead to a premature deletion of the device object.To get a pointer to the highest-level driver in the file system driver stack, a driver must ensure that the file system is mounted; if it is not, this routine traverses the storage device stack. To ensure that the file system is mounted on the storage device, the driver must specify an appropriate access mask, such as FILE_READ_DATA or FILE_WRITE_ATTRIBUTES, in the DesiredAccess parameter. Specifying FILE_READ_ATTRIBUTES does not cause the file system to be mounted.After any higher-level driver has chained itself over another driver by successfully calling this routine, the higher-level driver must set the StackSize field in its device object to that of the next-lower-level driver's device object plus one.Callers of IoGetDeviceObjectPointer must be running at IRQL = PASSIVE_LEVEL.

其中的ObjectName就是设备名字。DesiredAccess是期望访问的权限。实际使用时可以不要顾忌那么多，直接填写FILE_ALL_ACCESS即可。FileObject是一个返回参数，即获得这个设备对象的同时会得到的一个文件对象（File Object）。就打开串口设备这件事而言，这个文件对象并没有什么用处。但是必须注意：在使用这个函数之后必须把这个文件对象“解除引用”，否则会引起内存泄漏（请注意后面的代码）。

要得到的设备对象就返回在参数DeviceObject中了。示例如下：

<pre name="code" class="cpp">#include <ntddk.h>
// 因为用到了RtlStringCchPrintfW，所以必须使用头文件ntstrsafe.h
// 这里定义NTSTRSAFE_LIB是为了使用静态的ntstrsafe静态库。这样才能
// 兼容Windows2000。
#define NTSTRSAFE_LIB
#include <ntstrsafe.h>
……
// 打开一个端口设备
PDEVICE_OBJECT ccpOpenCom(ULONG id,NTSTATUS *status)
{
// 外面输入的是串口的id，这里会改写成字符串的形式
UNICODE_STRING name_str;
static WCHAR name[32] = { 0 };
PFILE_OBJECT fileobj = NULL;
PDEVICE_OBJECT devobj = NULL;
 // 根据id转换成串口的名字
memset(name,0,sizeof(WCHAR)*32);
RtlStringCchPrintfW(
name,32,
L"\\Device\\Serial%d",id);
RtlInitUnicodeString(&name_str,name);
 // 打开设备对象
*status = IoGetDeviceObjectPointer(
&name_str, 
FILE_ALL_ACCESS, 
&fileobj, &devobj);

// 如果打开成功了，记得一定要把文件对象解除引用
// 总之，这一句不要忽视
if (*status == STATUS_SUCCESS)
ObDereferenceObject(fileobj);
 // 返回设备对象
return devobj;
}