2 * Server-side handle management
4 * Copyright (C) 1998 Alexandre Julliard
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
22 #include "wine/port.h"
32 #define WIN32_NO_STATUS
44 struct object
*ptr
; /* object */
45 unsigned int access
; /* access rights */
50 struct object obj
; /* object header */
51 struct process
*process
; /* process owning this table */
52 int count
; /* number of allocated entries */
53 int last
; /* last used entry */
54 int free
; /* first entry that may be free */
55 struct handle_entry
*entries
; /* handle entries */
58 static struct handle_table
*global_table
;
60 /* reserved handle access rights */
61 #define RESERVED_SHIFT 26
62 #define RESERVED_INHERIT (HANDLE_FLAG_INHERIT << RESERVED_SHIFT)
63 #define RESERVED_CLOSE_PROTECT (HANDLE_FLAG_PROTECT_FROM_CLOSE << RESERVED_SHIFT)
64 #define RESERVED_ALL (RESERVED_INHERIT | RESERVED_CLOSE_PROTECT)
66 #define MIN_HANDLE_ENTRIES 32
67 #define MAX_HANDLE_ENTRIES 0x00ffffff
70 /* handle to table index conversion */
72 /* handles are a multiple of 4 under NT; handle 0 is not used */
73 static inline obj_handle_t
index_to_handle( int index
)
75 return (obj_handle_t
)((index
+ 1) << 2);
77 static inline int handle_to_index( obj_handle_t handle
)
79 return (handle
>> 2) - 1;
82 /* global handle conversion */
84 #define HANDLE_OBFUSCATOR 0x544a4def
86 static inline int handle_is_global( obj_handle_t handle
)
88 return (handle
^ HANDLE_OBFUSCATOR
) <= (MAX_HANDLE_ENTRIES
<< 2);
90 static inline obj_handle_t
handle_local_to_global( obj_handle_t handle
)
92 if (!handle
) return 0;
93 return handle
^ HANDLE_OBFUSCATOR
;
95 static inline obj_handle_t
handle_global_to_local( obj_handle_t handle
)
97 return handle
^ HANDLE_OBFUSCATOR
;
101 static void handle_table_dump( struct object
*obj
, int verbose
);
102 static void handle_table_destroy( struct object
*obj
);
104 static const struct object_ops handle_table_ops
=
106 sizeof(struct handle_table
), /* size */
107 handle_table_dump
, /* dump */
108 no_get_type
, /* get_type */
109 no_add_queue
, /* add_queue */
110 NULL
, /* remove_queue */
112 NULL
, /* satisfied */
113 no_signal
, /* signal */
114 no_get_fd
, /* get_fd */
115 no_map_access
, /* map_access */
116 default_get_sd
, /* get_sd */
117 default_set_sd
, /* set_sd */
118 no_lookup_name
, /* lookup_name */
119 no_open_file
, /* open_file */
120 no_close_handle
, /* close_handle */
121 handle_table_destroy
/* destroy */
124 /* dump a handle table */
125 static void handle_table_dump( struct object
*obj
, int verbose
)
128 struct handle_table
*table
= (struct handle_table
*)obj
;
129 struct handle_entry
*entry
;
131 assert( obj
->ops
== &handle_table_ops
);
133 fprintf( stderr
, "Handle table last=%d count=%d process=%p\n",
134 table
->last
, table
->count
, table
->process
);
135 if (!verbose
) return;
136 entry
= table
->entries
;
137 for (i
= 0; i
<= table
->last
; i
++, entry
++)
139 if (!entry
->ptr
) continue;
140 fprintf( stderr
, " %04x: %p %08x ",
141 index_to_handle(i
), entry
->ptr
, entry
->access
);
142 entry
->ptr
->ops
->dump( entry
->ptr
, 0 );
146 /* destroy a handle table */
147 static void handle_table_destroy( struct object
*obj
)
150 struct handle_table
*table
= (struct handle_table
*)obj
;
151 struct handle_entry
*entry
;
153 assert( obj
->ops
== &handle_table_ops
);
155 /* first notify all objects that handles are being closed */
158 for (i
= 0, entry
= table
->entries
; i
<= table
->last
; i
++, entry
++)
160 struct object
*obj
= entry
->ptr
;
161 if (obj
) obj
->ops
->close_handle( obj
, table
->process
, index_to_handle(i
) );
165 for (i
= 0, entry
= table
->entries
; i
<= table
->last
; i
++, entry
++)
167 struct object
*obj
= entry
->ptr
;
169 if (obj
) release_object( obj
);
171 free( table
->entries
);
174 /* close all the process handles and free the handle table */
175 void close_process_handles( struct process
*process
)
177 struct handle_table
*table
= process
->handles
;
179 process
->handles
= NULL
;
180 if (table
) release_object( table
);
183 /* allocate a new handle table */
184 struct handle_table
*alloc_handle_table( struct process
*process
, int count
)
186 struct handle_table
*table
;
188 if (count
< MIN_HANDLE_ENTRIES
) count
= MIN_HANDLE_ENTRIES
;
189 if (!(table
= alloc_object( &handle_table_ops
)))
191 table
->process
= process
;
192 table
->count
= count
;
195 if ((table
->entries
= mem_alloc( count
* sizeof(*table
->entries
) ))) return table
;
196 release_object( table
);
200 /* grow a handle table */
201 static int grow_handle_table( struct handle_table
*table
)
203 struct handle_entry
*new_entries
;
204 int count
= min( table
->count
* 2, MAX_HANDLE_ENTRIES
);
206 if (count
== table
->count
||
207 !(new_entries
= realloc( table
->entries
, count
* sizeof(struct handle_entry
) )))
209 set_error( STATUS_INSUFFICIENT_RESOURCES
);
212 table
->entries
= new_entries
;
213 table
->count
= count
;
217 /* allocate the first free entry in the handle table */
218 static obj_handle_t
alloc_entry( struct handle_table
*table
, void *obj
, unsigned int access
)
220 struct handle_entry
*entry
= table
->entries
+ table
->free
;
223 for (i
= table
->free
; i
<= table
->last
; i
++, entry
++) if (!entry
->ptr
) goto found
;
224 if (i
>= table
->count
)
226 if (!grow_handle_table( table
)) return 0;
227 entry
= table
->entries
+ i
; /* the entries may have moved */
232 entry
->ptr
= grab_object( obj
);
233 entry
->access
= access
;
234 return index_to_handle(i
);
237 /* allocate a handle for an object, incrementing its refcount */
238 /* return the handle, or 0 on error */
239 obj_handle_t
alloc_handle_no_access_check( struct process
*process
, void *ptr
, unsigned int access
, unsigned int attr
)
241 struct object
*obj
= ptr
;
243 access
&= ~RESERVED_ALL
;
244 if (attr
& OBJ_INHERIT
) access
|= RESERVED_INHERIT
;
245 if (!process
->handles
)
247 set_error( STATUS_NO_MEMORY
);
250 return alloc_entry( process
->handles
, obj
, access
);
253 /* allocate a handle for an object, checking the dacl allows the process to */
254 /* access it and incrementing its refcount */
255 /* return the handle, or 0 on error */
256 obj_handle_t
alloc_handle( struct process
*process
, void *ptr
, unsigned int access
, unsigned int attr
)
258 struct object
*obj
= ptr
;
259 access
= obj
->ops
->map_access( obj
, access
);
260 if (access
&& !check_object_access( obj
, &access
)) return 0;
261 return alloc_handle_no_access_check( process
, ptr
, access
, attr
);
264 /* allocate a global handle for an object, incrementing its refcount */
265 /* return the handle, or 0 on error */
266 static obj_handle_t
alloc_global_handle_no_access_check( void *obj
, unsigned int access
)
270 if (!(global_table
= alloc_handle_table( NULL
, 0 )))
272 make_object_static( &global_table
->obj
);
274 return handle_local_to_global( alloc_entry( global_table
, obj
, access
));
277 /* allocate a global handle for an object, checking the dacl allows the */
278 /* process to access it and incrementing its refcount and incrementing its refcount */
279 /* return the handle, or 0 on error */
280 static obj_handle_t
alloc_global_handle( void *obj
, unsigned int access
)
282 if (access
&& !check_object_access( obj
, &access
)) return 0;
283 return alloc_global_handle_no_access_check( obj
, access
);
286 /* return a handle entry, or NULL if the handle is invalid */
287 static struct handle_entry
*get_handle( struct process
*process
, obj_handle_t handle
)
289 struct handle_table
*table
= process
->handles
;
290 struct handle_entry
*entry
;
293 if (handle_is_global(handle
))
295 handle
= handle_global_to_local(handle
);
296 table
= global_table
;
298 if (!table
) return NULL
;
299 index
= handle_to_index( handle
);
300 if (index
< 0) return NULL
;
301 if (index
> table
->last
) return NULL
;
302 entry
= table
->entries
+ index
;
303 if (!entry
->ptr
) return NULL
;
307 /* attempt to shrink a table */
308 static void shrink_handle_table( struct handle_table
*table
)
310 struct handle_entry
*entry
= table
->entries
+ table
->last
;
311 struct handle_entry
*new_entries
;
312 int count
= table
->count
;
314 while (table
->last
>= 0)
316 if (entry
->ptr
) break;
320 if (table
->last
>= count
/ 4) return; /* no need to shrink */
321 if (count
< MIN_HANDLE_ENTRIES
* 2) return; /* too small to shrink */
323 if (!(new_entries
= realloc( table
->entries
, count
* sizeof(*new_entries
) ))) return;
324 table
->count
= count
;
325 table
->entries
= new_entries
;
328 /* copy the handle table of the parent process */
329 /* return 1 if OK, 0 on error */
330 struct handle_table
*copy_handle_table( struct process
*process
, struct process
*parent
)
332 struct handle_table
*parent_table
= parent
->handles
;
333 struct handle_table
*table
;
336 assert( parent_table
);
337 assert( parent_table
->obj
.ops
== &handle_table_ops
);
339 if (!(table
= alloc_handle_table( process
, parent_table
->count
)))
342 if ((table
->last
= parent_table
->last
) >= 0)
344 struct handle_entry
*ptr
= table
->entries
;
345 memcpy( ptr
, parent_table
->entries
, (table
->last
+ 1) * sizeof(struct handle_entry
) );
346 for (i
= 0; i
<= table
->last
; i
++, ptr
++)
348 if (!ptr
->ptr
) continue;
349 if (ptr
->access
& RESERVED_INHERIT
) grab_object( ptr
->ptr
);
350 else ptr
->ptr
= NULL
; /* don't inherit this entry */
353 /* attempt to shrink the table */
354 shrink_handle_table( table
);
358 /* close a handle and decrement the refcount of the associated object */
359 unsigned int close_handle( struct process
*process
, obj_handle_t handle
)
361 struct handle_table
*table
;
362 struct handle_entry
*entry
;
365 if (!(entry
= get_handle( process
, handle
))) return STATUS_INVALID_HANDLE
;
366 if (entry
->access
& RESERVED_CLOSE_PROTECT
) return STATUS_HANDLE_NOT_CLOSABLE
;
368 if (!obj
->ops
->close_handle( obj
, process
, handle
)) return STATUS_HANDLE_NOT_CLOSABLE
;
370 table
= handle_is_global(handle
) ? global_table
: process
->handles
;
371 if (entry
< table
->entries
+ table
->free
) table
->free
= entry
- table
->entries
;
372 if (entry
== table
->entries
+ table
->last
) shrink_handle_table( table
);
373 release_object( obj
);
374 return STATUS_SUCCESS
;
377 /* retrieve the object corresponding to one of the magic pseudo-handles */
378 static inline struct object
*get_magic_handle( obj_handle_t handle
)
382 case 0xfffffffe: /* current thread pseudo-handle */
383 return ¤t
->obj
;
384 case 0x7fffffff: /* current process pseudo-handle */
385 case 0xffffffff: /* current process pseudo-handle */
386 return (struct object
*)current
->process
;
392 /* retrieve the object corresponding to a handle, incrementing its refcount */
393 struct object
*get_handle_obj( struct process
*process
, obj_handle_t handle
,
394 unsigned int access
, const struct object_ops
*ops
)
396 struct handle_entry
*entry
;
399 if (!(obj
= get_magic_handle( handle
)))
401 if (!(entry
= get_handle( process
, handle
)))
403 set_error( STATUS_INVALID_HANDLE
);
407 if (ops
&& (obj
->ops
!= ops
))
409 set_error( STATUS_OBJECT_TYPE_MISMATCH
); /* not the right type */
412 if ((entry
->access
& access
) != access
)
414 set_error( STATUS_ACCESS_DENIED
);
418 else if (ops
&& (obj
->ops
!= ops
))
420 set_error( STATUS_OBJECT_TYPE_MISMATCH
); /* not the right type */
423 return grab_object( obj
);
426 /* retrieve the access rights of a given handle */
427 unsigned int get_handle_access( struct process
*process
, obj_handle_t handle
)
429 struct handle_entry
*entry
;
431 if (get_magic_handle( handle
)) return ~RESERVED_ALL
; /* magic handles have all access rights */
432 if (!(entry
= get_handle( process
, handle
))) return 0;
433 return entry
->access
& ~RESERVED_ALL
;
436 /* find the first inherited handle of the given type */
437 /* this is needed for window stations and desktops (don't ask...) */
438 obj_handle_t
find_inherited_handle( struct process
*process
, const struct object_ops
*ops
)
440 struct handle_table
*table
= process
->handles
;
441 struct handle_entry
*ptr
;
444 if (!table
) return 0;
446 for (i
= 0, ptr
= table
->entries
; i
<= table
->last
; i
++, ptr
++)
448 if (!ptr
->ptr
) continue;
449 if (ptr
->ptr
->ops
!= ops
) continue;
450 if (ptr
->access
& RESERVED_INHERIT
) return index_to_handle(i
);
455 /* enumerate handles of a given type */
456 /* this is needed for window stations and desktops */
457 obj_handle_t
enumerate_handles( struct process
*process
, const struct object_ops
*ops
,
458 unsigned int *index
)
460 struct handle_table
*table
= process
->handles
;
462 struct handle_entry
*entry
;
464 if (!table
) return 0;
466 for (i
= *index
, entry
= &table
->entries
[i
]; i
<= table
->last
; i
++, entry
++)
468 if (!entry
->ptr
) continue;
469 if (entry
->ptr
->ops
!= ops
) continue;
471 return index_to_handle(i
);
476 /* get/set the handle reserved flags */
477 /* return the old flags (or -1 on error) */
478 static int set_handle_flags( struct process
*process
, obj_handle_t handle
, int mask
, int flags
)
480 struct handle_entry
*entry
;
481 unsigned int old_access
;
483 if (get_magic_handle( handle
))
485 /* we can retrieve but not set info for magic handles */
486 if (mask
) set_error( STATUS_ACCESS_DENIED
);
489 if (!(entry
= get_handle( process
, handle
)))
491 set_error( STATUS_INVALID_HANDLE
);
494 old_access
= entry
->access
;
495 mask
= (mask
<< RESERVED_SHIFT
) & RESERVED_ALL
;
496 flags
= (flags
<< RESERVED_SHIFT
) & mask
;
497 entry
->access
= (entry
->access
& ~mask
) | flags
;
498 return (old_access
& RESERVED_ALL
) >> RESERVED_SHIFT
;
501 /* duplicate a handle */
502 obj_handle_t
duplicate_handle( struct process
*src
, obj_handle_t src_handle
, struct process
*dst
,
503 unsigned int access
, unsigned int attr
, unsigned int options
)
506 struct handle_entry
*entry
;
507 unsigned int src_access
;
508 struct object
*obj
= get_handle_obj( src
, src_handle
, 0, NULL
);
511 if ((entry
= get_handle( src
, src_handle
)))
512 src_access
= entry
->access
;
513 else /* pseudo-handle, give it full access */
514 src_access
= obj
->ops
->map_access( obj
, GENERIC_ALL
);
515 src_access
&= ~RESERVED_ALL
;
517 if (options
& DUP_HANDLE_SAME_ACCESS
)
520 access
= obj
->ops
->map_access( obj
, access
) & ~RESERVED_ALL
;
522 /* asking for the more access rights than src_access? */
523 if (access
& ~src_access
)
525 if (options
& DUP_HANDLE_MAKE_GLOBAL
)
526 res
= alloc_global_handle( obj
, access
);
528 res
= alloc_handle( dst
, obj
, access
, attr
);
532 if (options
& DUP_HANDLE_MAKE_GLOBAL
)
533 res
= alloc_global_handle_no_access_check( obj
, access
);
535 res
= alloc_handle_no_access_check( dst
, obj
, access
, attr
);
538 release_object( obj
);
542 /* open a new handle to an existing object */
543 obj_handle_t
open_object( const struct namespace *namespace, const struct unicode_str
*name
,
544 const struct object_ops
*ops
, unsigned int access
, unsigned int attr
)
546 obj_handle_t handle
= 0;
547 struct object
*obj
= find_object( namespace, name
, attr
);
550 if (ops
&& obj
->ops
!= ops
)
551 set_error( STATUS_OBJECT_TYPE_MISMATCH
);
553 handle
= alloc_handle( current
->process
, obj
, access
, attr
);
554 release_object( obj
);
557 set_error( STATUS_OBJECT_NAME_NOT_FOUND
);
561 /* return the size of the handle table of a given process */
562 unsigned int get_handle_table_count( struct process
*process
)
564 if (!process
->handles
) return 0;
565 return process
->handles
->count
;
569 DECL_HANDLER(close_handle
)
571 unsigned int err
= close_handle( current
->process
, req
->handle
);
575 /* set a handle information */
576 DECL_HANDLER(set_handle_info
)
578 reply
->old_flags
= set_handle_flags( current
->process
, req
->handle
, req
->mask
, req
->flags
);
581 /* duplicate a handle */
582 DECL_HANDLER(dup_handle
)
584 struct process
*src
, *dst
;
587 if ((src
= get_process_from_handle( req
->src_process
, PROCESS_DUP_HANDLE
)))
589 if (req
->options
& DUP_HANDLE_MAKE_GLOBAL
)
591 reply
->handle
= duplicate_handle( src
, req
->src_handle
, NULL
,
592 req
->access
, req
->attributes
, req
->options
);
594 else if ((dst
= get_process_from_handle( req
->dst_process
, PROCESS_DUP_HANDLE
)))
596 reply
->handle
= duplicate_handle( src
, req
->src_handle
, dst
,
597 req
->access
, req
->attributes
, req
->options
);
598 release_object( dst
);
600 /* close the handle no matter what happened */
601 if (req
->options
& DUP_HANDLE_CLOSE_SOURCE
) reply
->closed
= !close_handle( src
, req
->src_handle
);
602 reply
->self
= (src
== current
->process
);
603 release_object( src
);
607 DECL_HANDLER(get_object_info
)
612 if (!(obj
= get_handle_obj( current
->process
, req
->handle
, 0, NULL
))) return;
614 reply
->access
= get_handle_access( current
->process
, req
->handle
);
615 reply
->ref_count
= obj
->refcount
;
616 if ((name
= get_object_full_name( obj
, &reply
->total
)))
617 set_reply_data_ptr( name
, min( reply
->total
, get_reply_max_size() ));
618 release_object( obj
);
621 DECL_HANDLER(set_security_object
)
623 data_size_t sd_size
= get_req_data_size();
624 const struct security_descriptor
*sd
= get_req_data();
626 unsigned int access
= 0;
628 if (!sd_is_valid( sd
, sd_size
))
630 set_error( STATUS_ACCESS_VIOLATION
);
634 if (req
->security_info
& OWNER_SECURITY_INFORMATION
||
635 req
->security_info
& GROUP_SECURITY_INFORMATION
)
636 access
|= WRITE_OWNER
;
637 if (req
->security_info
& SACL_SECURITY_INFORMATION
)
638 access
|= ACCESS_SYSTEM_SECURITY
;
639 if (req
->security_info
& DACL_SECURITY_INFORMATION
)
642 if (!(obj
= get_handle_obj( current
->process
, req
->handle
, access
, NULL
))) return;
644 obj
->ops
->set_sd( obj
, sd
, req
->security_info
);
645 release_object( obj
);
648 DECL_HANDLER(get_security_object
)
650 const struct security_descriptor
*sd
;
652 unsigned int access
= READ_CONTROL
;
653 struct security_descriptor req_sd
;
655 const SID
*owner
, *group
;
656 const ACL
*sacl
, *dacl
;
658 if (req
->security_info
& SACL_SECURITY_INFORMATION
)
659 access
|= ACCESS_SYSTEM_SECURITY
;
661 if (!(obj
= get_handle_obj( current
->process
, req
->handle
, access
, NULL
))) return;
663 sd
= obj
->ops
->get_sd( obj
);
666 req_sd
.control
= sd
->control
& ~SE_SELF_RELATIVE
;
668 owner
= sd_get_owner( sd
);
669 if (req
->security_info
& OWNER_SECURITY_INFORMATION
)
670 req_sd
.owner_len
= sd
->owner_len
;
672 req_sd
.owner_len
= 0;
674 group
= sd_get_group( sd
);
675 if (req
->security_info
& GROUP_SECURITY_INFORMATION
)
676 req_sd
.group_len
= sd
->group_len
;
678 req_sd
.group_len
= 0;
680 req_sd
.control
|= SE_SACL_PRESENT
;
681 sacl
= sd_get_sacl( sd
, &present
);
682 if (req
->security_info
& SACL_SECURITY_INFORMATION
&& present
)
683 req_sd
.sacl_len
= sd
->sacl_len
;
687 req_sd
.control
|= SE_DACL_PRESENT
;
688 dacl
= sd_get_dacl( sd
, &present
);
689 if (req
->security_info
& DACL_SECURITY_INFORMATION
&& present
)
690 req_sd
.dacl_len
= sd
->dacl_len
;
694 reply
->sd_len
= sizeof(req_sd
) + req_sd
.owner_len
+ req_sd
.group_len
+
695 req_sd
.sacl_len
+ req_sd
.dacl_len
;
696 if (reply
->sd_len
<= get_reply_max_size())
698 char *ptr
= set_reply_data_size(reply
->sd_len
);
700 memcpy( ptr
, &req_sd
, sizeof(req_sd
) );
701 ptr
+= sizeof(req_sd
);
702 memcpy( ptr
, owner
, req_sd
.owner_len
);
703 ptr
+= req_sd
.owner_len
;
704 memcpy( ptr
, group
, req_sd
.group_len
);
705 ptr
+= req_sd
.group_len
;
706 memcpy( ptr
, sacl
, req_sd
.sacl_len
);
707 ptr
+= req_sd
.sacl_len
;
708 memcpy( ptr
, dacl
, req_sd
.dacl_len
);
711 set_error(STATUS_BUFFER_TOO_SMALL
);
714 release_object( obj
);