不同的方式处理 IRP 速查表

检查方案之前，必须了解一个驱动程序创建同步输入/输出请求数据包 (IRP) 和异步请求之间差异。 收起该表格 展开该表格 同步 （线程的 IRP 异步的 （非线程） IRP 使用 IoBuildSynchronousFsdRequest 或 IoBuildDeviceIoControlRequest 创建。 使用 IoBuildAsynchronousFsdRequest 或 IoAllocateIrp 创建。 这意味着驱动程序到驱动程序通信。 线程必须等待完成 IRP。 线程没有等待完成 IRP。 与创建它的线程关联，因此，名称线程 IRP。 因此，如果线程退出，I / O 管理器将取消 IRP。 与创建它的线程不关联。 不能在一个任意的线程上下文中创建。 可以创建任意的线程上下文中由于该线程不会等待完成 IRP。 I / O 管理器会在发布完成释放与 IRP 的缓冲区。 I / O 管理器无法进行清除。 驱动程序必须提供一个完成例程，并释放与 IRP 相关联的缓冲区。 必须在 IRQL 级别等于 PASSIVE_LEVEL 发送。 可以在 IRQL 发送小于或等于为 DISPATCH_LEVEL 如果目标驱动程序的调度例程可以处理在 DISPATCH_LEVEL 请求。   情况 6： 通过 IoBuildDeviceIoControlRequest 发送同步设备的控件请求 (IRP_MJ_INTERNAL_DEVICE_CONTR... <script type="text/javascript"></script> 情况 6： 通过 IoBuildDeviceIoControlRequest 发送同步设备的控件请求 (IRP_MJ_INTERNAL_DEVICE_CONTROL / IRP_MJ_DEVICE_CONTROL) <script type="text/javascript"></script> 下面的代码显示如何将同步的 IOCTL 请求中使用 IoBuildDeviceIoControlRequest 请求。 NTSTATUS MakeSynchronousIoctl( IN PDEVICE_OBJECT TopOfDeviceStack, IN ULONG IoctlControlCode, PVOID InputBuffer, ULONG InputBufferLength, PVOID OutputBuffer, ULONG OutputBufferLength ) /*++ Arguments: TopOfDeviceStack- IoctlControlCode - Value of the IOCTL request InputBuffer - Buffer to be sent to the TopOfDeviceStack InputBufferLength - Size of buffer to be sent to the TopOfDeviceStack OutputBuffer - Buffer for received data from the TopOfDeviceStack OutputBufferLength - Size of receive buffer from the TopOfDeviceStack Return Value: NT status code --*/ { KEVENT event; PIRP irp; IO_STATUS_BLOCK ioStatus; NTSTATUS status; // // Creating Device control IRP and send it to the another // driver without setting a completion routine. // KeInitializeEvent(&event, NotificationEvent, FALSE); irp = IoBuildDeviceIoControlRequest ( IoctlControlCode, TopOfDeviceStack, InputBuffer, InputBufferLength, OutputBuffer, OutputBufferLength, FALSE, // External &event, &ioStatus); if (NULL == irp) { return STATUS_INSUFFICIENT_RESOURCES; } status = IoCallDriver(TopOfDeviceStack, irp); if (status == STATUS_PENDING) { // // You must wait here for the IRP to be completed because: // 1) The IoBuildDeviceIoControlRequest associates the IRP with the // thread and if the thread exits for any reason, it would cause the IRP // to be canceled. // 2) The Event and IoStatus block memory is from the stack and we // cannot go out of scope. // This event will be signaled by the I/O manager when the // IRP is completed. // status = KeWaitForSingleObject( &event, Executive, // wait reason KernelMode, // To prevent stack from being paged out. FALSE, // You are not alertable NULL); // No time out !!!! status = ioStatus.Status; } return status; } 方案 7： 发送同步设备的控件 (IOCTL) 请求和取消它，如果在特定时间段内没有完成 <script type="text/javascript"></script> 这种情况下类似于前一方案在于而不是无限期地等待请求完成，它等待一些用户指定时间并且安全地取消 IOCTL 请求，如果等待超时。 typedef enum { IRPLOCK_CANCELABLE, IRPLOCK_CANCEL_STARTED, IRPLOCK_CANCEL_COMPLETE, IRPLOCK_COMPLETED } IRPLOCK; // // An IRPLOCK allows for safe cancellation. The idea is to protect the IRP // while the canceller is calling IoCancelIrp. This is done by wrapping the // call in InterlockedExchange(s). The roles are as follows: // // Initiator/completion: Cancelable --> IoCallDriver() --> Completed // Canceller: CancelStarted --> IoCancelIrp() --> CancelCompleted // // No cancellation: // Cancelable-->Completed // // Cancellation, IoCancelIrp returns before completion: // Cancelable --> CancelStarted --> CancelCompleted --> Completed // // Canceled after completion: // Cancelable --> Completed -> CancelStarted // // Cancellation, IRP completed during call to IoCancelIrp(): // Cancelable --> CancelStarted -> Completed --> CancelCompleted // // The transition from CancelStarted to Completed tells the completer to block // postprocessing (IRP ownership is transferred to the canceller). Similarly, // the canceller learns it owns IRP postprocessing (free, completion, etc) // during a Completed->CancelCompleted transition. // NTSTATUS MakeSynchronousIoctlWithTimeOut( IN PDEVICE_OBJECT TopOfDeviceStack, IN ULONG IoctlControlCode, PVOID InputBuffer, ULONG InputBufferLength, PVOID OutputBuffer, ULONG OutputBufferLength, IN ULONG Milliseconds ) /*++ Arguments: TopOfDeviceStack - IoctlControlCode - Value of the IOCTL request. InputBuffer - Buffer to be sent to the TopOfDeviceStack. InputBufferLength - Size of buffer to be sent to the TopOfDeviceStack. OutputBuffer - Buffer for received data from the TopOfDeviceStack. OutputBufferLength - Size of receive buffer from the TopOfDeviceStack. Milliseconds - Timeout value in Milliseconds Return Value: NT status code --*/ { NTSTATUS status; PIRP irp; KEVENT event; IO_STATUS_BLOCK ioStatus; LARGE_INTEGER dueTime; IRPLOCK lock; KeInitializeEvent(&event, NotificationEvent, FALSE); irp = IoBuildDeviceIoControlRequest ( IoctlControlCode, TopOfDeviceStack, InputBuffer, InputBufferLength, OutputBuffer, OutputBufferLength, FALSE, // External ioctl &event, &ioStatus); if (irp == NULL) { return STATUS_INSUFFICIENT_RESOURCES; } lock = IRPLOCK_CANCELABLE; IoSetCompletionRoutine( irp, MakeSynchronousIoctlWithTimeOutCompletion, &lock, TRUE, TRUE, TRUE ); status = IoCallDriver(TopOfDeviceStack, irp); if (status == STATUS_PENDING) { dueTime.QuadPart = -10000 * Milliseconds; status = KeWaitForSingleObject( &event, Executive, KernelMode, FALSE, &dueTime ); if (status == STATUS_TIMEOUT) { if (InterlockedExchange((PVOID)&lock, IRPLOCK_CANCEL_STARTED) == IRPLOCK_CANCELABLE) { // // You got it to the IRP before it was completed. You can cancel // the IRP without fear of losing it, because the completion routine // does not let go of the IRP until you allow it. // IoCancelIrp(irp); // // Release the completion routine. If it already got there, // then you need to complete it yourself. Otherwise, you got // through IoCancelIrp before the IRP completed entirely. // if (InterlockedExchange(&lock, IRPLOCK_CANCEL_COMPLETE) == IRPLOCK_COMPLETED) { IoCompleteRequest(irp, IO_NO_INCREMENT); } } KeWaitForSingleObject(&event, Executive, KernelMode, FALSE, NULL); ioStatus.Status = status; // Return STATUS_TIMEOUT } else { status = ioStatus.Status; } } return status; } NTSTATUS MakeSynchronousIoctlWithTimeOutCompletion( IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp, IN PVOID Context ) { PLONG lock; lock = (PLONG) Context; if (InterlockedExchange((PVOID)&lock, IRPLOCK_COMPLETED) == IRPLOCK_CANCEL_STARTED) { // // Main line code has got the control of the IRP. It will // now take the responsibility of completing the IRP. // Therefore... return STATUS_MORE_PROCESSING_REQUIRED; } return STATUS_CONTINUE_COMPLETION ; } 方案 8： 发送同步非 IOCTL 请求通过 IoBuildSynchronousFsdRequest-完成例程将返回 STATUS_CONTINUE_COMPLETION <script type="text/javascript"></script> 下面的代码演示如何使用 IoBuildSynchronousFsdRequest 进行同步不 IOCTL 请求。 此处显示的方法与方案 6 相似。 NTSTATUS MakeSynchronousNonIoctlRequest ( PDEVICE_OBJECT TopOfDeviceStack, PVOID WriteBuffer, ULONG NumBytes ) /*++ Arguments: TopOfDeviceStack - WriteBuffer - Buffer to be sent to the TopOfDeviceStack. NumBytes - Size of buffer to be sent to the TopOfDeviceStack. Return Value: NT status code --*/ { NTSTATUS status; PIRP irp; LARGE_INTEGER startingOffset; KEVENT event; IO_STATUS_BLOCK ioStatus; PVOID context; startingOffset.QuadPart = (LONGLONG) 0; // // Allocate memory for any context information to be passed // to the completion routine. // context = ExAllocatePoolWithTag(NonPagedPool, sizeof(ULONG), 'ITag'); if(!context) { return STATUS_INSUFFICIENT_RESOURCES; } KeInitializeEvent(&event, NotificationEvent, FALSE); irp = IoBuildSynchronousFsdRequest( IRP_MJ_WRITE, TopOfDeviceStack, WriteBuffer, NumBytes, &startingOffset, // Optional &event, &ioStatus ); if (NULL == irp) { ExFreePool(context); return STATUS_INSUFFICIENT_RESOURCES; } IoSetCompletionRoutine(irp, MakeSynchronousNonIoctlRequestCompletion, context, TRUE, TRUE, TRUE); status = IoCallDriver(TopOfDeviceStack, irp); if (status == STATUS_PENDING) { status = KeWaitForSingleObject( &event, Executive, KernelMode, FALSE, // Not alertable NULL); status = ioStatus.Status; } return status; } NTSTATUS MakeSynchronousNonIoctlRequestCompletion( IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp, IN PVOID Context ) { if (Context) { ExFreePool(Context); } return STATUS_CONTINUE_COMPLETION ; } 情况 9： 发送同步非 IOCTL 请求通过 IoBuildSynchronousFsdRequest-完成例程将返回 STATUS_MORE_PROCESSING_REQUIRED <script type="text/javascript"></script> 这种情况下和方案 8 之间唯一的区别是完成例程将返回 STATUS_MORE_PROCESSING_REQUIRED。 NTSTATUS MakeSynchronousNonIoctlRequest2( PDEVICE_OBJECT TopOfDeviceStack, PVOID WriteBuffer, ULONG NumBytes ) /*++ Arguments: TopOfDeviceStack WriteBuffer - Buffer to be sent to the TopOfDeviceStack. NumBytes - Size of buffer to be sent to the TopOfDeviceStack. Return Value: NT status code --*/ { NTSTATUS status; PIRP irp; LARGE_INTEGER startingOffset; KEVENT event; IO_STATUS_BLOCK ioStatus; BOOLEAN isSynchronous = TRUE; startingOffset.QuadPart = (LONGLONG) 0; KeInitializeEvent(&event, NotificationEvent, FALSE); irp = IoBuildSynchronousFsdRequest( IRP_MJ_WRITE, TopOfDeviceStack, WriteBuffer, NumBytes, &startingOffset, // Optional &event, &ioStatus ); if (NULL == irp) { return STATUS_INSUFFICIENT_RESOURCES; } IoSetCompletionRoutine(irp, MakeSynchronousNonIoctlRequestCompletion2, (PVOID)&event, TRUE, TRUE, TRUE); status = IoCallDriver(TopOfDeviceStack, irp); if (status == STATUS_PENDING) { KeWaitForSingleObject(&event, Executive, KernelMode, FALSE, // Not alertable NULL); status = irp->IoStatus.Status; isSynchronous = FALSE; } // // Because you have stopped the completion of the IRP, you must // complete here and wait for it to be completed by waiting // on the same event again, which will be signaled by the I/O // manager. // NOTE: you cannot queue the IRP for // reuse by calling IoReuseIrp because it does not break the // association of this IRP with the current thread. // KeClearEvent(&event); IoCompleteRequest(irp, IO_NO_INCREMENT); // // We must wait here to prevent the event from going out of scope. // I/O manager will signal the event and copy the status to our // IoStatus block for synchronous IRPs only if the return status is not // an error. For asynchronous IRPs, the above mentioned copy operation // takes place regardless of the status value. // if (!(NT_ERROR(status) && isSynchronous)) { KeWaitForSingleObject(&event, Executive, KernelMode, FALSE, // Not alertable NULL); } return status; } NTSTATUS MakeSynchronousNonIoctlRequestCompletion2( IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp, IN PVOID Context ) { if (Irp->PendingReturned) { KeSetEvent ((PKEVENT) Context, IO_NO_INCREMENT, FALSE); } return STATUS_MORE_PROCESSING_REQUIRED; } 情况 10： 使用 IoBuildAsynchronousFsdRequest 发送异步请求 <script type="text/javascript"></script> 这种情况下显示如何使用 IoBuildAsynchronousFsdRequest 函数发出异步请求。 在一个异步的请求发出请求的线程没有等待完成 IRP。 可以在任意的线程上下文中创建 IRP，因为 IRP 不与线程关联。 您必须提供一个完成例程，并如果要重复使用 IRP 完成例程中释放缓冲区和 IRP。 这是因为 I / O 管理器不能执行 post-completion 清理驱动程序创建异步 IRP （使用 IoBuildAsynchronousFsdRequest 和 IoAllocateIrp 创建的）。 NTSTATUS MakeAsynchronousRequest ( PDEVICE_OBJECT TopOfDeviceStack, PVOID WriteBuffer, ULONG NumBytes ) /*++ Arguments: TopOfDeviceStack - WriteBuffer - Buffer to be sent to the TopOfDeviceStack. NumBytes - Size of buffer to be sent to the TopOfDeviceStack. --*/ { NTSTATUS status; PIRP irp; LARGE_INTEGER startingOffset; PIO_STACK_LOCATION nextStack; PVOID context; startingOffset.QuadPart = (LONGLONG) 0; irp = IoBuildAsynchronousFsdRequest( IRP_MJ_WRITE, TopOfDeviceStack, WriteBuffer, NumBytes, &startingOffset, // Optional NULL ); if (NULL == irp) { return STATUS_INSUFFICIENT_RESOURCES; } // // Allocate memory for context structure to be passed to the completion routine. // context = ExAllocatePoolWithTag(NonPagedPool, sizeof(ULONG_PTR), 'ITag'); if (NULL == context) { IoFreeIrp(irp); return STATUS_INSUFFICIENT_RESOURCES; } IoSetCompletionRoutine(irp, MakeAsynchronousRequestCompletion, context, TRUE, TRUE, TRUE); // // If you want to change any value in the IRP stack, you must // first obtain the stack location by calling IoGetNextIrpStackLocation. // This is the location that is initialized by the IoBuildxxx requests and // is the one that the target device driver is going to view. // nextStack = IoGetNextIrpStackLocation(irp); // // Change the MajorFunction code to something appropriate. // nextStack->MajorFunction = IRP_MJ_SCSI; (void) IoCallDriver(TopOfDeviceStack, irp); return STATUS_SUCCESS; } NTSTATUS MakeAsynchronousRequestCompletion( IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp, IN PVOID Context ) { PMDL mdl, nextMdl; // // If the target device object is set up to do buffered i/o // (TopOfDeviceStack->Flags and DO_BUFFERED_IO), then // IoBuildAsynchronousFsdRequest request allocates a system buffer // for read and write operation. If you stop the completion of the IRP // here, you must free that buffer. // if(Irp->AssociatedIrp.SystemBuffer && (Irp->Flags & IRP_DEALLOCATE_BUFFER) ) { ExFreePool(Irp->AssociatedIrp.SystemBuffer); } // // If the target device object is set up do direct i/o (DO_DIRECT_IO), then // IoBuildAsynchronousFsdRequest creates an MDL to describe the buffer // and locks the pages. If you stop the completion of the IRP, you must unlock // the pages and free the MDL. // else if (Irp->MdlAddress != NULL) { for (mdl = Irp->MdlAddress; mdl != NULL; mdl = nextMdl) { nextMdl = mdl->Next; MmUnlockPages( mdl ); IoFreeMdl( mdl ); // This function will also unmap pages. } Irp->MdlAddress = NULL; } if(Context) { ExFreePool(Context); } // // If you intend to queue the IRP and reuse it for another request, // make sure you call IoReuseIrp(Irp, STATUS_SUCCESS) before you reuse. // IoFreeIrp(Irp); // // NOTE: this is the only status that you can return for driver-created asynchronous IRPs. // return STATUS_MORE_PROCESSING_REQUIRED; } 通过 IoAllocateIrp 的方案 11： 发送异步请求 <script type="text/javascript"></script> 这种情况下与以前的服务行业应用方案类似之处在于而不是使用 IoBuildAsynchronousFsdRequest ，这种情况下使用 IoAllocateIrp 函数来创建 IRP。 NTSTATUS MakeAsynchronousRequest2( PDEVICE_OBJECT TopOfDeviceStack, PVOID WriteBuffer, ULONG NumBytes ) /*++ Arguments: TopOfDeviceStack - WriteBuffer - Buffer to be sent to the TopOfDeviceStack. NumBytes - Size of buffer to be sent to the TopOfDeviceStack. --*/ { NTSTATUS status; PIRP irp; LARGE_INTEGER startingOffset; KEVENT event; PIO_STACK_LOCATION nextStack; startingOffset.QuadPart = (LONGLONG) 0; // // Start by allocating the IRP for this request. Do not charge quota // to the current process for this IRP. // irp = IoAllocateIrp( TopOfDeviceStack->StackSize, FALSE ); if (NULL == irp) { return STATUS_INSUFFICIENT_RESOURCES; } // // Obtain a pointer to the stack location of the first driver that will be // invoked. This is where the function codes and the parameters are set. // nextStack = IoGetNextIrpStackLocation( irp ); nextStack->MajorFunction = IRP_MJ_WRITE; nextStack->Parameters.Write.Length = NumBytes; nextStack->Parameters.Write.ByteOffset= startingOffset; if(TopOfDeviceStack->Flags & DO_BUFFERED_IO) { irp->AssociatedIrp.SystemBuffer = WriteBuffer; irp->MdlAddress = NULL; } else if (TopOfDeviceStack->Flags & DO_DIRECT_IO) { // // The target device supports direct I/O operations. Allocate // an MDL large enough to map the buffer and lock the pages into // memory. // irp->MdlAddress = IoAllocateMdl( WriteBuffer, NumBytes, FALSE, FALSE, (PIRP) NULL ); if (irp->MdlAddress == NULL) { IoFreeIrp( irp ); return STATUS_INSUFFICIENT_RESOURCES; } try { MmProbeAndLockPages( irp->MdlAddress, KernelMode, (LOCK_OPERATION) (nextStack->MajorFunction == IRP_MJ_WRITE ? IoReadAccess : IoWriteAccess) ); } except(EXCEPTION_EXECUTE_HANDLER) { if (irp->MdlAddress != NULL) { IoFreeMdl( irp->MdlAddress ); } IoFreeIrp( irp ); return GetExceptionCode(); } } IoSetCompletionRoutine(irp, MakeAsynchronousRequestCompletion2, NULL, TRUE, TRUE, TRUE); (void) IoCallDriver(TargetDeviceObject, irp); return STATUS_SUCCESS; } NTSTATUS MakeAsynchronousRequestCompletion2( IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp, IN PVOID Context ) { PMDL mdl, nextMdl; // // Free any associated MDL. // if (Irp->MdlAddress != NULL) { for (mdl = Irp->MdlAddress; mdl != NULL; mdl = nextMdl) { nextMdl = mdl->Next; MmUnlockPages( mdl ); IoFreeMdl( mdl ); // This function will also unmap pages. } Irp->MdlAddress = NULL; } // // If you intend to queue the IRP and reuse it for another request, // make sure you call IoReuseIrp(Irp, STATUS_SUCCESS) before you reuse. // IoFreeIrp(Irp); return STATUS_MORE_PROCESSING_REQUIRED; } 方案 12： 发送异步请求并取消其在不同的线程中 <script type="text/javascript"></script> 这种情况下显示方式您可以请求每次发送较低的驱动程序而无需等待请求完成，并也可以在从另一个线程的任何时候通过取消该请求。 您可以记住 IRP 和其他变量执行此操作在一个设备扩展或全局设备，如下所示的上下文结构中。 与设备扩展中 IRPLOCK 变量跟踪 IRP 的状态。 在 IrpEvent 用于确保 IRP 是完全完成 （或释放） 在下一个请求之前。 处理 IRP_MN_REMOVE_DEVICE 和 IRP_MN_STOP_DEVICE PNP 请求，您必须确保没有任何挂起的 IRP 完成这些请求之前时，此事件还是很有用。 初始化为同步事件在 AddDevice 或某些其他的初始化例程时，则此事件是非常方法。 typedef struct _DEVICE_EXTENSION{ .. PDEVICE_OBJECT TopOfDeviceStack; PIRP PendingIrp; IRPLOCK IrpLock; // You need this to track the state of the IRP. KEVENT IrpEvent; // You need this to synchronize various threads. .. } DEVICE_EXTENSION, *PDEVICE_EXTENSION; } DEVICE_EXTENSION，* PDEVICE_EXTENSION ； InitializeDeviceExtension( PDEVICE_EXTENSION DeviceExtension) { KeInitializeEvent(&DeviceExtension->IrpEvent, SynchronizationEvent, TRUE); } NTSTATUS MakeASynchronousRequest3( PDEVICE_EXTENSION DeviceExtension, PVOID WriteBuffer, ULONG NumBytes ) /*++ Arguments: DeviceExtension - WriteBuffer - Buffer to be sent to the TargetDeviceObject. NumBytes - Size of buffer to be sent to the TargetDeviceObject. --*/ { NTSTATUS status; PIRP irp; LARGE_INTEGER startingOffset; PIO_STACK_LOCATION nextStack; // // Wait on the event to make sure that PendingIrp // field is free to be used for the next request. If you do // call this function in the context of the user thread, // make sure to call KeEnterCriticialRegion before the wait to protect // the thread from getting suspended while holding a lock. // KeWaitForSingleObject( &DeviceExtension->IrpEvent, Executive, KernelMode, FALSE, NULL ); startingOffset.QuadPart = (LONGLONG) 0; // // If the IRP is used for the same purpose every time, you can just create the IRP in the // Initialization routine one time and reuse it by calling IoReuseIrp. // The only thing that you have to do in the routines in this article // is remove the lines that call IoFreeIrp and set the PendingIrp // field to NULL. If you do so, make sure that you free the IRP // in the PNP remove handler. // irp = IoBuildAsynchronousFsdRequest( IRP_MJ_WRITE, DeviceExtension->TopOfDeviceStack, WriteBuffer, NumBytes, &startingOffset, // Optional NULL ); if (NULL == irp) { return STATUS_INSUFFICIENT_RESOURCES; } // // Initialize the fields relevant fields in the DeviceExtension // DeviceExtension->PendingIrp = irp; DeviceExtension->IrpLock = IRPLOCK_CANCELABLE; IoSetCompletionRoutine(irp, MakeASynchronousRequestCompletion3, DeviceExtension, TRUE, TRUE, TRUE); // // If you want to change any value in the IRP stack, you must // first obtain the stack location by calling IoGetNextIrpStackLocation. // This is the location that is initialized by the IoBuildxxx requests and // is the one that the target device driver is going to view. // nextStack = IoGetNextIrpStackLocation(irp); // // You could change the MajorFunction code to something appropriate. // nextStack->MajorFunction = IRP_MJ_SCSI; (void) IoCallDriver(DeviceExtension->TopOfDeviceStack, irp); return STATUS_SUCCESS; } NTSTATUS MakeASynchronousRequestCompletion3( IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp, IN PVOID Context ) { PMDL mdl, nextMdl; PDEVICE_EXTENSION deviceExtension = Context; // // If the target device object is set up to do buffered i/o // (TargetDeviceObject->Flags & DO_BUFFERED_IO), then // IoBuildAsynchronousFsdRequest request allocates a system buffer // for read and write operation. If you stop the completion of the IRP // here, you must free that buffer. // if(Irp->AssociatedIrp.SystemBuffer && (Irp->Flags & IRP_DEALLOCATE_BUFFER) ) { ExFreePool(Irp->AssociatedIrp.SystemBuffer); } // // If the target device object is set up to do direct i/o (DO_DIRECT_IO), then // IoBuildAsynchronousFsdRequest creates an MDL to describe the buffer // and locks the pages. If you stop the completion of the IRP, you must unlock // the pages and free the MDL. // if (Irp->MdlAddress != NULL) { for (mdl = Irp->MdlAddress; mdl != NULL; mdl = nextMdl) { nextMdl = mdl->Next; MmUnlockPages( mdl ); IoFreeMdl( mdl ); // This function will also unmap pages. } Irp->MdlAddress = NULL; } if (InterlockedExchange((PVOID)&deviceExtension->IrpLock, IRPLOCK_COMPLETED) == IRPLOCK_CANCEL_STARTED) { // // Main line code has got the control of the IRP. It will // now take the responsibility of freeing the IRP. // Therefore... return STATUS_MORE_PROCESSING_REQUIRED; } // // If you intend to queue the IRP and reuse it for another request, make // sure you call IoReuseIrp(Irp, STATUS_SUCCESS) before you reuse. // IoFreeIrp(Irp); deviceExtension->PendingIrp = NULL; // if freed // // Signal the event so that the next thread in the waiting list // can send the next request. // KeSetEvent (&deviceExtension->IrpEvent, IO_NO_INCREMENT, FALSE); return STATUS_MORE_PROCESSING_REQUIRED; } VOID CancelPendingIrp( PDEVICE_EXTENSION DeviceExtension ) /*++ This function tries to cancel the PendingIrp if it is not already completed. Note that the IRP may not be completed and freed when the function returns. Therefore, if you are calling this from your PNP Remove device handle, you must wait on the IrpEvent to make sure the IRP is indeed completed before successfully completing the remove request and allowing the driver to unload. --*/ { if (InterlockedExchange((PVOID)&DeviceExtension->IrpLock, IRPLOCK_CANCEL_STARTED) == IRPLOCK_CANCELABLE) { // // You got it to the IRP before it was completed. You can cancel // the IRP without fear of losing it, as the completion routine // will not let go of the IRP until you say so. // IoCancelIrp(DeviceExtension->PendingIrp); // // Release the completion routine. If it already got there, // then you need to free it yourself. Otherwise, you got // through IoCancelIrp before the IRP completed entirely. // if (InterlockedExchange((PVOID)&DeviceExtension->IrpLock, IRPLOCK_CANCEL_COMPLETE) == IRPLOCK_COMPLETED) { IoFreeIrp(DeviceExtension->PendingIrp); DeviceExtension->PendingIrp = NULL; KeSetEvent(&DeviceExtension->IrpEvent, IO_NO_INCREMENT, FALSE); } } return ; }

需要更多帮助? 请通过电子邮件、联机或电话与支持工程师联系 文章翻译 阿拉伯语德语法语繁体中文韩国语葡萄牙语葡萄牙语(巴西)日语西班牙语意大利语英语 (US)   页面工具 打印此页 通过电子邮件发送此页