internal T AddAttribute <T>(SafeAlpcMessageAttributesBuffer buffer,
NtAlpc port, AlpcMessage message) where T : AlpcMessageAttribute, new()
{
T attribute = new T();
attribute.FromSafeBuffer(buffer, port, message);
_attributes.Add(attribute.AttributeFlag, attribute);
ValidAttributes |= attribute.AttributeFlag;
return(attribute);
}
internal override void FromSafeBuffer(SafeAlpcMessageAttributesBuffer buffer, NtAlpc port, AlpcMessage message)
{
buffer.GetWorkOnBehalfAttribute(this);
}
internal override void FromSafeBuffer(SafeAlpcMessageAttributesBuffer buffer, NtAlpc port, AlpcMessage message)
{
throw new NotImplementedException();
}
internal override void FromSafeBuffer(SafeAlpcMessageAttributesBuffer buffer, NtAlpc port, AlpcMessage message)
{
buffer.GetHandleAttribute(this, port, message);
}
internal override void FromSafeBuffer(SafeAlpcMessageAttributesBuffer buffer, NtAlpc port, AlpcMessage message)
{
buffer.GetSecurityAttribute(this);
}
internal abstract void FromSafeBuffer(SafeAlpcMessageAttributesBuffer buffer, NtAlpc port, AlpcMessage message);
internal void FromSafeBuffer(SafeAlpcMessageAttributesBuffer buffer, NtAlpc port, AlpcMessage message)
{
var result = buffer.Result;
var valid_attrs = result.ValidAttributes;
if (valid_attrs.HasFlag(AlpcMessageAttributeFlags.Token))
{
AddAttribute <AlpcTokenMessageAttribute>(buffer, port, message);
}
if (valid_attrs.HasFlag(AlpcMessageAttributeFlags.Context))
{
AddAttribute <AlpcContextMessageAttribute>(buffer, port, message);
}
if (valid_attrs.HasFlag(AlpcMessageAttributeFlags.Handle))
{
var attribute = AddAttribute <AlpcHandleMessageAttribute>(buffer, port, message);
_handles.AddRange(attribute.Handles.Select(h => NtObjectUtils.FromHandle(h.Handle, true)));
}
if (valid_attrs.HasFlag(AlpcMessageAttributeFlags.Security))
{
var attr = AddAttribute <AlpcSecurityMessageAttribute>(buffer, port, message);
SecurityContext = new SafeAlpcSecurityContextHandle(attr.ContextHandle, true, port, attr.Flags, attr.SecurityQoS);
}
if (valid_attrs.HasFlag(AlpcMessageAttributeFlags.View))
{
var attr = AddAttribute <AlpcDataViewMessageAttribute>(buffer, port, message);
DataView = new SafeAlpcDataViewBuffer(new IntPtr(attr.ViewBase), attr.ViewSize,
new SafeAlpcPortSectionHandle(attr.SectionHandle, true, port), attr.Flags, true);
}
if (valid_attrs.HasFlag(AlpcMessageAttributeFlags.WorkOnBehalfOf))
{
AddAttribute <AlpcWorkOnBehalfMessageAttribute>(buffer, port, message);
}
}
internal void GetHandleAttribute(AlpcHandleMessageAttribute attribute, NtAlpc port, AlpcMessage message)
{
var attr = GetAttribute <AlpcHandleAttr>(AlpcMessageAttributeFlags.Handle).Result;
if ((attr.Flags & AlpcHandleAttrFlags.Indirect) == AlpcHandleAttrFlags.Indirect)
{
if (port == null || message == null)
{
throw new ArgumentException("Can't rebuild indirect handle attribute without port and message");
}
GetIndirectHandleAttribute(attribute, port, message);
}
else if (attr.Handle != IntPtr.Zero)
{
attribute.SetHandles(new AlpcHandleMessageAttributeEntry[] { new AlpcHandleMessageAttributeEntry(attr) });
}
else
{
attribute.SetHandles(new AlpcHandleMessageAttributeEntry[0]);
}
}
internal void GetIndirectHandleAttribute(AlpcHandleMessageAttribute attribute, NtAlpc port, AlpcMessage message)
{
// Indirect handle attributes need to be queried from the port.
var attr = GetAttribute <AlpcHandleAttrIndirect>(AlpcMessageAttributeFlags.Handle).Result;
attribute.SetHandles(Enumerable.Range(0, attr.HandleCount).Select(i => port.GetHandleInformation(message, i)));
}
