dbgkport.c File Reference

#include "dbgkp.h"

Go to the source code of this file.

Functions
NTSTATUS	DbgkpSendApiMessage (IN OUT PDBGKM_APIMSG ApiMsg, IN PVOID Port, IN BOOLEAN SuspendProcess)
BOOLEAN	DbgkForwardException (IN PEXCEPTION_RECORD ExceptionRecord, IN BOOLEAN DebugException, IN BOOLEAN SecondChance)
Variables
LARGE_INTEGER	DbgkpCalibrationTime

---

Function Documentation

BOOLEAN DbgkForwardException (  IN PEXCEPTION_RECORD  ExceptionRecord, IN BOOLEAN  DebugException, IN BOOLEAN  SecondChance )

Definition at line 99 of file dbgkport.c. References DbgkpSendApiMessage(), _EPROCESS::DebugPort, _EPROCESS::ExceptionPort, FALSE, NT_SUCCESS, NTSTATUS(), NULL, PAGED_CODE, PsGetCurrentProcess, PsGetCurrentThread, and TRUE. Referenced by KiDispatchException(). 00107 : 00108 00109 This function is called forward an exception to the calling process's 00110 debug or subsystem exception port. 00111 00112 Arguments: 00113 00114 ExceptionRecord - Supplies a pointer to an exception record. 00115 00116 DebugException - Supplies a boolean variable that specifies whether 00117 this exception is to be forwarded to the process's 00118 DebugPort(TRUE), or to its ExceptionPort(FALSE). 00119 00120 Return Value: 00121 00122 TRUE - The process has a DebugPort or an ExceptionPort, and the reply 00123 received from the port indicated that the exception was handled. 00124 00125 FALSE - The process either does not have a DebugPort or 00126 ExceptionPort, or the process has a port, but the reply received 00127 from the port indicated that the exception was not handled. 00128 00129 --*/ 00130 00131 { 00132 PEPROCESS Process; 00133 PVOID Port; 00134 DBGKM_APIMSG m; 00135 PDBGKM_EXCEPTION args; 00136 NTSTATUS st; 00137 00138 PAGED_CODE(); 00139 00140 args = &m.u.Exception; 00141 00142 // 00143 // Initialize the debug LPC message with default infomaation. 00144 // 00145 00146 DBGKM_FORMAT_API_MSG(m,DbgKmExceptionApi,sizeof(*args)); 00147 00148 // 00149 // Get the address of the destination LPC port. 00150 // 00151 00152 Process = PsGetCurrentProcess(); 00153 if (DebugException) { 00154 Port = PsGetCurrentThread()->HideFromDebugger ? NULL : Process->DebugPort; 00155 00156 } else { 00157 Port = Process->ExceptionPort; 00158 m.h.u2.ZeroInit = LPC_EXCEPTION; 00159 } 00160 00161 // 00162 // If the destination LPC port address is NULL, then return FALSE. 00163 // 00164 00165 if (Port == NULL) { 00166 return FALSE; 00167 } 00168 00169 // 00170 // Fill in the remainder of the debug LPC message. 00171 // 00172 00173 args->ExceptionRecord = *ExceptionRecord; 00174 args->FirstChance = !SecondChance; 00175 00176 // 00177 // Send the debug message to the destination LPC port. 00178 // 00179 00180 st = DbgkpSendApiMessage(&m,Port,DebugException); 00181 00182 // 00183 // If the send was not successful, then return a FALSE indicating that 00184 // the port did not handle the exception. Otherwise, if the debug port 00185 // is specified, then look at the return status in the message. 00186 // 00187 00188 if (!NT_SUCCESS(st) || 00189 ((DebugException) && 00190 (m.ReturnedStatus == DBG_EXCEPTION_NOT_HANDLED || !NT_SUCCESS(m.ReturnedStatus)))) { 00191 return FALSE; 00192 00193 } else { 00194 return TRUE; 00195 } 00196 } }

NTSTATUS DbgkpSendApiMessage (  IN OUT PDBGKM_APIMSG  ApiMsg, IN PVOID  Port, IN BOOLEAN  SuspendProcess )

Definition at line 31 of file dbgkport.c. References DbgkpResumeProcess(), DbgkpSuspendProcess(), FALSE, LpcRequestWaitReplyPort(), NT_SUCCESS, NTSTATUS(), NULL, PAGED_CODE, PsGetCurrentProcess, and TRUE. Referenced by DbgkCreateThread(), DbgkExitProcess(), DbgkExitThread(), DbgkForwardException(), DbgkMapViewOfSection(), and DbgkUnMapViewOfSection(). : This function sends the specified API message over the specified port. It is the callers responsibility to format the API message prior to calling this function. If the SuspendProcess flag is supplied, then all threads in the calling process are first suspended. Upon receipt of the reply message, the threads are resumed. Arguments: ApiMsg - Supplies the API message to send. Port - Supplies the address of a port to send the api message. SuspendProcess - A flag that if set to true, causes all of the threads in the process to be suspended prior to the call, and resumed upon receipt of a reply. Return Value: TBD --*/ { NTSTATUS st; ULONG_PTR MessageBuffer[PORT_MAXIMUM_MESSAGE_LENGTH/sizeof(ULONG_PTR)]; PAGED_CODE(); if ( SuspendProcess ) { DbgkpSuspendProcess(FALSE); } ApiMsg->ReturnedStatus = STATUS_PENDING; PsGetCurrentProcess()->CreateProcessReported = TRUE; st = LpcRequestWaitReplyPort( Port, (PPORT_MESSAGE) ApiMsg, (PPORT_MESSAGE) &MessageBuffer[0] ); ZwFlushInstructionCache(NtCurrentProcess(), NULL, 0); if ( NT_SUCCESS(st) ) { RtlMoveMemory(ApiMsg,MessageBuffer,sizeof(*ApiMsg)); } if ( SuspendProcess ) { DbgkpResumeProcess(FALSE); } return st; }

---

Variable Documentation

LARGE_INTEGER DbgkpCalibrationTime

Definition at line 96 of file dbgkport.c.

---