Exemple #1
0
                public InternalEnumerator(IntPtr file_handle, IntPtr buffer, int buffer_size)
                {
                    file_h = file_handle;

                    if (buffer_size == 0)
                    {
                        buffer_size = STREAM_INFO_BUFFER_LEN;
                    }
                    if (buffer == IntPtr.Zero)
                    {
                        need_free_buffer_h = true;
                        buffer             = Marshal.AllocHGlobal(buffer_size);
                    }
                    buffer_h = buffer;

                    Marshal.WriteInt32(buffer, 4, 0);

                    IO_STATUS_BLOCK status = new IO_STATUS_BLOCK();

                    uint res = ntApiFS.NtQueryInformationFile
                                   (file_h,
                                   ref status,
                                   buffer_h,
                                   buffer_size,
                                   FILE_INFORMATION_CLASS.FileStreamInformation);

                    //check result
                    NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);
                }
Exemple #2
0
        public static NT_FILE_STANDARD_INFORMATION GetFileInfo_standard(IntPtr file_handle)
        {
            IntPtr ret_ptr = IntPtr.Zero;

            try
            {
                IO_STATUS_BLOCK status_block = new IO_STATUS_BLOCK();
                int             ret_len      = Marshal.SizeOf(typeof(NT_FILE_STANDARD_INFORMATION));
                ret_ptr = Marshal.AllocHGlobal(ret_len);
                uint res = ntApiFS.NtQueryInformationFile
                               (file_handle,
                               ref status_block,
                               ret_ptr,
                               ret_len,
                               FILE_INFORMATION_CLASS.FileStandardInformation);
                NTSTATUS_helper.ThrowOnError(res, status_block, NTSTATUS_severity.Warning);
                NT_FILE_STANDARD_INFORMATION ret = (NT_FILE_STANDARD_INFORMATION)Marshal.PtrToStructure
                                                       (ret_ptr,
                                                       typeof(NT_FILE_STANDARD_INFORMATION));
                return(ret);
            }
            finally
            {
                if (ret_ptr != IntPtr.Zero)
                {
                    Marshal.FreeHGlobal(ret_ptr);
                }
            }
        }
Exemple #3
0
        public static FILE_FS_DEVICE_INFORMATION GetFileVolumeDeviceInfo(IntPtr file_handle)
        {
            IO_STATUS_BLOCK status     = new IO_STATUS_BLOCK();
            IntPtr          ret_buffer = IntPtr.Zero;

            try
            {
                int ret_buffer_len = Marshal.SizeOf(typeof(FILE_FS_DEVICE_INFORMATION));
                ret_buffer = Marshal.AllocHGlobal(ret_buffer_len);
                uint res = ntApiFS.NtQueryVolumeInformationFile
                               (file_handle,
                               ref status,
                               ret_buffer,
                               ret_buffer_len,
                               FS_INFORMATION_CLASS.FileFsDeviceInformation);
                NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);
                FILE_FS_DEVICE_INFORMATION ret = (FILE_FS_DEVICE_INFORMATION)Marshal.PtrToStructure
                                                     (ret_buffer,
                                                     typeof(FILE_FS_DEVICE_INFORMATION));
                return(ret);
            }
            finally
            {
                if (ret_buffer != IntPtr.Zero)
                {
                    Marshal.FreeHGlobal(ret_buffer);
                }
            }
        }
Exemple #4
0
        public static FILE_FS_VOLUME_INFORMATION GetFileVolumeInfo(IntPtr file_handle)
        {
            IO_STATUS_BLOCK status     = new IO_STATUS_BLOCK();
            IntPtr          ret_buffer = IntPtr.Zero;

            try
            {
                int ret_buffer_len = VOLUME_INFO_BUFFER_LEN;
                ret_buffer = Marshal.AllocHGlobal(ret_buffer_len);
                uint res = ntApiFS.NtQueryVolumeInformationFile
                               (file_handle,
                               ref status,
                               ret_buffer,
                               ret_buffer_len,
                               FS_INFORMATION_CLASS.FileFsVolumeInformation);
                NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);
                FILE_FS_VOLUME_INFORMATION ret = FILE_FS_VOLUME_INFORMATION.FromBuffer(ret_buffer);
                return(ret);
            }
            finally
            {
                if (ret_buffer != IntPtr.Zero)
                {
                    Marshal.FreeHGlobal(ret_buffer);
                }
            }
        }
Exemple #5
0
        /// <summary>
        /// currently BUGGY - not use, use CreateFile instead
        /// </summary>
        /// <param name="file_name"></param>
        /// <param name="file_access"></param>
        /// <param name="file_share"></param>
        /// <param name="options"></param>
        /// <returns></returns>
        public static IntPtr CreateFileHandle
            (string file_name,
            Win32FileAccess file_access,
            FileShare file_share,
            CreateFileOptions options)
        {
            IntPtr            ret                  = IntPtr.Zero;
            IntPtr            obj_attr_ptr         = IntPtr.Zero;
            IntPtr            file_name_struct_ptr = IntPtr.Zero;
            OBJECT_ATTRIBUTES obj_attr             = new OBJECT_ATTRIBUTES();

            try
            {
                //выделяем память под OBJECT_ATTRIBUTES
                int obj_attr_len = Marshal.SizeOf(typeof(OBJECT_ATTRIBUTES));
                obj_attr_ptr = Marshal.AllocHGlobal(obj_attr_len);

                //инициализируем OBJECT_ATTRIBUTES
                obj_attr = new OBJECT_ATTRIBUTES(IOhelper.GetKernelFileName(file_name), (uint)ntApiFS.OBJ_CASE_INSENSITIVE);
                Marshal.StructureToPtr(obj_attr, obj_attr_ptr, true);

                //инициализируем IO_STATUS_BLOCK
                IO_STATUS_BLOCK status_block = new IO_STATUS_BLOCK();

                //открываем...
                uint res = ntApiFS.NtOpenFile
                               (ref ret,
                               file_access,
                               obj_attr_ptr,
                               ref status_block,
                               (ulong)file_share,
                               (ulong)options);

                NTSTATUS_helper.ThrowOnError(res, status_block, NTSTATUS_severity.Warning);
                return(ret);
            }
            finally
            {
                obj_attr.Dispose();
            }
        }
Exemple #6
0
        public static NT_FILE_BASIC_INFO GetFileInfo_basic(IntPtr file_handle)
        {
            IntPtr ret_ptr = IntPtr.Zero;

            try
            {
                //нинциализируем IO_STATUS
                IO_STATUS_BLOCK status_block = new IO_STATUS_BLOCK();

                //инициализируем NT_FILE_BASIC_INFO
                int ret_len = Marshal.SizeOf(typeof(NT_FILE_BASIC_INFO));
                ret_ptr = Marshal.AllocHGlobal(ret_len);

                //вызываем - по некторым сведениям вызов может в некоторых случаях блокироваться до
                //бесконечности!
                uint res = ntApiFS.NtQueryInformationFile
                               (file_handle,
                               ref status_block,
                               ret_ptr,
                               ret_len,
                               FILE_INFORMATION_CLASS.FileBasicInformation);

                //обрабатываем исключения
                NTSTATUS_helper.ThrowOnError(res, status_block, NTSTATUS_severity.Warning);

                //получаем управляемую структуру из указателя
                NT_FILE_BASIC_INFO ret = (NT_FILE_BASIC_INFO)Marshal.PtrToStructure
                                             (ret_ptr,
                                             typeof(NT_FILE_BASIC_INFO));

                return(ret);
            }
            finally
            {
                if (ret_ptr != IntPtr.Zero)
                {
                    Marshal.FreeHGlobal(ret_ptr);
                }
            }
        }
Exemple #7
0
                public InternalEnumerator(string file_name)
                {
                    file_h = WinApiFS.CreateFile_intptr
                                 (file_name,
                                 Win32FileAccess.GENERIC_READ,
                                 FileShare.ReadWrite,
                                 IntPtr.Zero,
                                 FileMode.Open,
                                 CreateFileOptions.BACKUP_SEMANTICS, //need for retrieve info about directory
                                 IntPtr.Zero);
                    if (file_h.ToInt32() == WinApiFS.INVALID_HANDLE_VALUE)
                    {
                        int       win_err = Marshal.GetLastWin32Error();
                        Exception ex      = new Win32Exception(win_err);
                        throw ex;
                    }
                    need_free_file_h = true;

                    int buffer_size = STREAM_INFO_BUFFER_LEN;

                    need_free_buffer_h = true;
                    buffer_h           = Marshal.AllocHGlobal(buffer_size);

                    Marshal.WriteInt32(buffer_h, 4, 0);

                    IO_STATUS_BLOCK status = new IO_STATUS_BLOCK();

                    uint res = ntApiFS.NtQueryInformationFile
                                   (file_h,
                                   ref status,
                                   buffer_h,
                                   buffer_size,
                                   FILE_INFORMATION_CLASS.FileStreamInformation);

                    //check result
                    NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);
                }
Exemple #8
0
        public static FILE_FS_ATTRIBUTE_INFORMATION GetFileVolumeAttributeInfo(IntPtr file_handle, IntPtr buffer, int buffer_len)
        {
            IO_STATUS_BLOCK status           = new IO_STATUS_BLOCK();
            bool            need_free_buffer = false;
            IntPtr          ret_buffer       = buffer;
            int             ret_buffer_len   = buffer_len;

            try
            {
                if (buffer_len == 0)
                {
                    need_free_buffer = true;
                    ret_buffer_len   = VOLUME_INFO_BUFFER_LEN;
                    ret_buffer       = Marshal.AllocHGlobal(VOLUME_INFO_BUFFER_LEN);
                }

                uint res = ntApiFS.NtQueryVolumeInformationFile
                               (file_handle,
                               ref status,
                               ret_buffer,
                               ret_buffer_len,
                               FS_INFORMATION_CLASS.FileFsAttributeInformation);

                //check res
                NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);

                FILE_FS_ATTRIBUTE_INFORMATION ret = FILE_FS_ATTRIBUTE_INFORMATION.FromBuffer(ret_buffer);
                return(ret);
            }
            finally
            {
                if (need_free_buffer)
                {
                    Marshal.FreeHGlobal(ret_buffer);
                }
            }
        }
Exemple #9
0
        public static NT_FILE_STREAM_INFORMATION[] GetFileInfo_stream(IntPtr file_handle, IntPtr buffer, int buffer_size)
        {
            //init IO_STATUS_BLOCK
            IO_STATUS_BLOCK status           = new IO_STATUS_BLOCK();
            bool            need_free_buffer = false;

            try
            {
                if (buffer_size == 0)
                {
                    buffer_size = STREAM_INFO_BUFFER_LEN;
                }
                if (buffer == IntPtr.Zero)
                {
                    need_free_buffer = true;
                    buffer           = Marshal.AllocHGlobal(buffer_size);
                }

                //trick
                //how to determine, if buffer unchanged?
                //write 0 to StreamNameLength member
                Marshal.WriteInt32(buffer, 4, 0);

                uint res = ntApiFS.NtQueryInformationFile
                               (file_handle,
                               ref status,
                               buffer,
                               buffer_size,
                               FILE_INFORMATION_CLASS.FileStreamInformation);

                //check res
                NTSTATUS_helper.ThrowOnError(res, status, NTSTATUS_severity.Warning);

                //if success, continue
                List <NT_FILE_STREAM_INFORMATION> ret_list = new List <NT_FILE_STREAM_INFORMATION>();
                int current_offset = 0;
                while (true)
                {
                    NT_FILE_STREAM_INFORMATION current_info = new NT_FILE_STREAM_INFORMATION();

                    //first 4 bytes - offset to next entry
                    current_info.NextEntryOffset = Marshal.ReadInt32(buffer, current_offset);

                    //next 4 bytes - stream name len (in bytes)
                    current_info.StreamNameLength = Marshal.ReadInt32(buffer, current_offset + 4);

                    if ((current_info.StreamNameLength == 0) && (ret_list.Count == 0))
                    {
                        //that is no streams at all (as directory without AFS)
                        break;
                    }

                    //next 8 bytes - stream size
                    current_info.StreamSize = Marshal.ReadInt64(buffer, current_offset + 8);

                    //next 8 bytes - stream allocastion size
                    current_info.StreamAllocationSize = Marshal.ReadInt64(buffer, current_offset + 16);

                    //next StreamNameLength bytes - unicode stream name
                    current_info.StreamName = Marshal.PtrToStringUni
                                                  (new IntPtr(buffer.ToInt64() + (long)current_offset + 24L), (int)current_info.StreamNameLength / 2);

                    //add to result
                    ret_list.Add(current_info);

                    if (current_info.NextEntryOffset == 0)
                    {
                        //that is last member
                        break;
                    }
                    else
                    {
                        current_offset += (int)current_info.NextEntryOffset;
                    }
                }
                return(ret_list.ToArray());
            }
            finally
            {
                if (need_free_buffer)
                {
                    if (buffer != IntPtr.Zero)
                    {
                        Marshal.FreeHGlobal(buffer);
                    }
                }
            }
        }