-
-
[求助]驱动中如何调用RtlDosPathNameToNtPathName_U等ntdll的未公开函数
-
发表于: 2012-2-10 13:52
-
驱动中如何调用RtlDosPathNameToNtPathName_U等ntdll的未公开函数？
直接蓝了
typedef struct _PRELATIVE_NAME{
UNICODE_STRING Name;
HANDLE CurrentDir;
} PRELATIVE_NAME, *PPRELATIVE_NAME;
typedef NTSTATUS (*DOSPATH_TO_NTPATH)(
IN PCWSTR DosPathName,
OUT PUNICODE_STRING NtPathName,
OUT PWSTR* FilePathInNtPathName OPTIONAL,
OUT PRELATIVE_NAME* RelativeName OPTIONAL
);
DOSPATH_TO_NTPATH RtlDosPathNameToNtPathName_U;
UNICODE_STRING ustrNtName = {0};
WCHAR szDosName[MAX_PATH] = L"C:\\test\\hello.exe";
if (RtlDosPathNameToNtPathName_U(szDosName,&ustrNtName,NULL,NULL))
{
KdPrint(("%s: [%s] RtlDosPathNameToNtPathName_U Success \n",__MYNAME__,__FUNCTION__));
}
else
{
KdPrint(("%s: [%s] RtlDosPathNameToNtPathName_U Failed \n",__MYNAME__,__FUNCTION__));
}
直接蓝了
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
|
|
|---|---|
|
|
|
|
|
UNICODE_STRING ustrNtName = {0};
WCHAR szNtNameBuf[260] = {0};
WCHAR szDosName[MAX_PATH] = L"C:\\test\\hello.exe";
RtlInitEmptyUnicodeString(&ustrNtName,szNtNameBuf,260 * sizeof(WCHAR));
//ustrNtName = (UNICODE_STRING)ExAllocatePoolWithTag(PagedPool,MAX_PATH,'DTON');
if (RtlDosPathNameToNtPathName_U(szDosName,&ustrNtName,NULL,NULL))
{
KdPrint(("%s: [%s] RtlDosPathNameToNtPathName_U Success \n",__MYNAME__,__FUNCTION__));
}
else
{
KdPrint(("%s: [%s] RtlDosPathNameToNtPathName_U Failed \n",__MYNAME__,__FUNCTION__));
}
照样蓝屏 
|
|
|
|
|
|
其实我想加的是\\Device\\HarddiskVolumeXXX
|
|
|
|
|
|
|
|
|
那用哪个？
|
|
|
|
|
|
|
|
|
这两个 原因和解决方案都出来了
|
