Chapter 3: Kernel Objects

 

 

Overview

We begin our understanding of the Microsoft Windows application programming interface (API) by examining kernel objects and their handles. This chapter covers relatively abstract concepts— I'm not going to discuss the particulars of any specific kernel object. Instead, I'm going to discuss features that apply to all kernel objects.

     本章讨论所有内核对象的共有结构。

I would have preferred to start off with a more concrete topic, but a solid understanding of kernel objects is critical to becoming a proficient Windows software developer.

    我更喜欢从更具体的主题开始，但是对于一个专业的Window开发人员，结结实实的理解内核对象是十分重要的。

   Kernel objects are used by the system and by the applications we write to manage numerous resources such as processes, threads, and files (to name just a few). The concepts presented in this chapter will appear throughout most of the remaining chapters in this book. However, I do realize that some of the material covered in this chapter won't sink in until you start manipulating kernel objects using actual functions. So, as you read various other chapters in this book, you'll probably want to refer back to this chapter from time to time.

   当系统和我们开发的应用去管理，进程，线程，文件等等资源时，内核对象将会被使用。要想彻底掌握和理解内核对象，你必须实践。请时时刻刻记住返回这一章查看。

 

Kernel objects are owned by the kernel, not by a process

系统核心拥有核心对象，而不是进程。