windows 下驱动NT和WDM 基本例子（一）

迷南。 2022-08-02 13:39 182阅读 0赞

**NT**

/************************************************************************
    * 文件名称:Driver.h                                                 
    * 作    者:张帆
    * 完成日期:2007-11-1
    *************************************************************************/
    #pragma once
    
    #ifdef __cplusplus
    extern "C"
    {
    	#endif
    	#include <NTDDK.h>
    	#ifdef __cplusplus
    }
    #endif 
    
    #define PAGEDCODE code_seg("PAGE")	 //作用是将此部分代码放入分页内存中运行
    #define LOCKEDCODE code_seg()	     //将代码段设置为默认的代码段
    #define INITCODE code_seg("INIT")    //加载到INIT内存区域中，成功加载后，可以退出内存
    
    #define PAGEDDATA data_seg("PAGE")
    #define LOCKEDDATA data_seg()
    #define INITDATA data_seg("INIT")
    
    #define arraysize(p) (sizeof(p)/sizeof((p)[0]))
    
    typedef struct _DEVICE_EXTENSION {
    	PDEVICE_OBJECT pDevice;
    	UNICODE_STRING ustrDeviceName;	//设备名称
    	UNICODE_STRING ustrSymLinkName;	//符号链接名
    } DEVICE_EXTENSION, *PDEVICE_EXTENSION;
    
    // 函数声明
    
    NTSTATUS CreateDevice (IN PDRIVER_OBJECT pDriverObject);
    VOID HelloDDKUnload (IN PDRIVER_OBJECT pDriverObject);
    NTSTATUS HelloDDKDispatchRoutine(IN PDEVICE_OBJECT pDevObj, IN PIRP pIrp);
    
    
    /************************************************************************
    * 文件名称:Driver.cpp                                                 
    * 作    者:张帆
    * 完成日期:2007-11-1
    *************************************************************************/
    
    //#include "Driver.h"
    
    /************************************************************************
    * 函数名称:DriverEntry
    * 功能描述:初始化驱动程序，定位和申请硬件资源，创建内核对象
    * 参数列表:
          pDriverObject:从I/O管理器中传进来的驱动对象
          pRegistryPath:驱动程序在注册表的中的路径
    * 返回 值:返回初始化驱动状态
    *************************************************************************/
    
    #pragma INITCODE  //说明此函数是加载到INIT内核区域的，即成功卸载后，可以退出内存
    extern "C" NTSTATUS DriverEntry (
    			IN PDRIVER_OBJECT pDriverObject,
    			IN PUNICODE_STRING pRegistryPath	) 
    {
    	NTSTATUS status;
    	KdPrint(("Enter DriverEntry\n"));
    
    	//注册其他驱动 调用函数入口
    	pDriverObject->DriverUnload = HelloDDKUnload;
    	pDriverObject->MajorFunction[IRP_MJ_CREATE] = HelloDDKDispatchRoutine; //创建 关闭 读 写
    	pDriverObject->MajorFunction[IRP_MJ_CLOSE] = HelloDDKDispatchRoutine;
    	pDriverObject->MajorFunction[IRP_MJ_WRITE] = HelloDDKDispatchRoutine;
    	pDriverObject->MajorFunction[IRP_MJ_READ] = HelloDDKDispatchRoutine;
    	
    	//创建驱动设备对象
    	status = CreateDevice(pDriverObject);
    
    	KdPrint(("DriverEntry end\n"));
    	return status;
    }
    
    /************************************************************************
    * 函数名称:CreateDevice
    * 功能描述:初始化设备对象
    * 参数列表:
          pDriverObject:从I/O管理器中传进来的驱动对象
    * 返回 值:返回初始化状态
    *************************************************************************/
    #pragma INITCODE
    NTSTATUS CreateDevice (
    		IN PDRIVER_OBJECT	pDriverObject) 
    {
    	NTSTATUS status;
    	PDEVICE_OBJECT pDevObj;
    	PDEVICE_EXTENSION pDevExt;
    	
    	//创建设备名称
    	UNICODE_STRING devName;
    	RtlInitUnicodeString(&devName,L"\\Device\\MyDDKDevice");
    	
    	//创建设备
    	status = IoCreateDevice( pDriverObject,
    						sizeof(DEVICE_EXTENSION),
    						&(UNICODE_STRING)devName,
    						FILE_DEVICE_UNKNOWN,
    						0, TRUE,
    						&pDevObj );
    	if (!NT_SUCCESS(status))
    		return status;
    
    	pDevObj->Flags |= DO_BUFFERED_IO;
    
    	pDevExt = (PDEVICE_EXTENSION)pDevObj->DeviceExtension;
    	pDevExt->pDevice = pDevObj;
    	pDevExt->ustrDeviceName = devName;
    	//创建符号链接
    	UNICODE_STRING symLinkName;
    	RtlInitUnicodeString(&symLinkName,L"\\??\\HelloDDK");
    	pDevExt->ustrSymLinkName = symLinkName;
    	status = IoCreateSymbolicLink( &symLinkName,&devName );
    
    	if (!NT_SUCCESS(status)) 
    	{
    		IoDeleteDevice( pDevObj );
    		return status;
    	}
    	return STATUS_SUCCESS;
    }
    
    /************************************************************************
    * 函数名称:HelloDDKUnload
    * 功能描述:负责驱动程序的卸载操作
    * 参数列表:
          pDriverObject:驱动对象
    * 返回 值:返回状态
    *************************************************************************/
    #pragma PAGEDCODE
    VOID HelloDDKUnload (IN PDRIVER_OBJECT pDriverObject) 
    {
    	PDEVICE_OBJECT	pNextObj;
    	KdPrint(("Enter DriverUnload\n"));
    	pNextObj = pDriverObject->DeviceObject;
    	while (pNextObj != NULL) 
    	{
    		PDEVICE_EXTENSION pDevExt = (PDEVICE_EXTENSION)
    			pNextObj->DeviceExtension;
    
    		//删除符号链接
    		UNICODE_STRING pLinkName = pDevExt->ustrSymLinkName;
    		IoDeleteSymbolicLink(&pLinkName);
    
    		pNextObj = pNextObj->NextDevice; //遍历设备对象，并删除
    		IoDeleteDevice( pDevExt->pDevice );
    	}
    }
    
    /************************************************************************
    * 函数名称:HelloDDKDispatchRoutine
    * 功能描述:对读IRP进行处理
    * 参数列表:
          pDevObj:功能设备对象
          pIrp:从IO请求包
    * 返回 值:返回状态
    *************************************************************************/
    #pragma PAGEDCODE
    NTSTATUS HelloDDKDispatchRoutine(IN PDEVICE_OBJECT pDevObj,
    								 IN PIRP pIrp) 
    {
    	KdPrint(("Enter HelloDDKDispatchRoutine\n"));
    	NTSTATUS status = STATUS_SUCCESS;
    	// 完成IRP
    	pIrp->IoStatus.Status = status; //设置IRP状态为 成功
    	pIrp->IoStatus.Information = 0;	// bytes xfered 无实际意义
    	IoCompleteRequest( pIrp, IO_NO_INCREMENT );  //请示完成IRP 
    	KdPrint(("Leave HelloDDKDispatchRoutine\n"));
    	return status;
    }

**WDM 即插即用驱动**

/************************************************************************
    * 文件名称:HelloWDM.h                                                 
    * 作    者:张帆
    * 完成日期:2007-11-1
    *************************************************************************/
    
    #ifdef __cplusplus
    extern "C"
    {
    #endif
    #include <wdm.h>
    #ifdef __cplusplus
    }
    #endif 
    
    typedef struct _DEVICE_EXTENSION
    {
        PDEVICE_OBJECT fdo;
        PDEVICE_OBJECT NextStackDevice;
    	UNICODE_STRING ustrDeviceName;	// 设备名
    	UNICODE_STRING ustrSymLinkName;	// 符号链接名
    } DEVICE_EXTENSION, *PDEVICE_EXTENSION;
    
    #define PAGEDCODE code_seg("PAGE")
    #define LOCKEDCODE code_seg()
    #define INITCODE code_seg("INIT")
    
    #define PAGEDDATA data_seg("PAGE")
    #define LOCKEDDATA data_seg()
    #define INITDATA data_seg("INIT")
    
    #define arraysize(p) (sizeof(p)/sizeof((p)[0]))
    
    NTSTATUS HelloWDMAddDevice(IN PDRIVER_OBJECT DriverObject,
                               IN PDEVICE_OBJECT PhysicalDeviceObject);
    NTSTATUS HelloWDMPnp(IN PDEVICE_OBJECT fdo,
                            IN PIRP Irp);
    NTSTATUS HelloWDMDispatchRoutine(IN PDEVICE_OBJECT fdo,
    								 IN PIRP Irp);
    void HelloWDMUnload(IN PDRIVER_OBJECT DriverObject);
    
    extern "C"
    NTSTATUS DriverEntry(IN PDRIVER_OBJECT DriverObject,
                         IN PUNICODE_STRING RegistryPath);
    
    
    /************************************************************************
    * 文件名称:HelloWDM.cpp                                                 
    * 作    者:张帆
    * 完成日期:2007-11-1
    *************************************************************************/
    //#include "HelloWDM.h"
    
    /************************************************************************
    * 函数名称:DriverEntry
    * 功能描述:初始化驱动程序，定位和申请硬件资源，创建内核对象
    * 参数列表:
          pDriverObject:从I/O管理器中传进来的 驱动对象
          pRegistryPath:驱动程序在 注册表的中的路径
    * 返回 值:返回初始化驱动状态
    *************************************************************************/
    #pragma INITCODE	//将此函数放在init段中，当驱动加载结束，此函数从内存中卸载掉
    extern "C" NTSTATUS DriverEntry(IN PDRIVER_OBJECT pDriverObject,
    								IN PUNICODE_STRING pRegistryPath)
    {
    	KdPrint(("Enter DriverEntry\n"));
    
    	pDriverObject->DriverExtension->AddDevice = HelloWDMAddDevice;  //设置adddevice的回调函数，作用是创建设备对象并由PNP管理器使用	
    	pDriverObject->MajorFunction[IRP_MJ_PNP] = HelloWDMPnp;   //设置对IRP_MJ_PNP的IRP的回调函数
    
    	pDriverObject->MajorFunction[IRP_MJ_DEVICE_CONTROL] = 
    	pDriverObject->MajorFunction[IRP_MJ_CREATE] = 
    	pDriverObject->MajorFunction[IRP_MJ_READ] = 
    	pDriverObject->MajorFunction[IRP_MJ_WRITE] = HelloWDMDispatchRoutine;
    
    	pDriverObject->DriverUnload = HelloWDMUnload;//卸载
    
    	KdPrint(("Leave DriverEntry\n"));
    	return STATUS_SUCCESS;
    }
    
    
    
    /************************************************************************
    * 函数名称:HelloWDMAddDevice
    * 功能描述:添加新设备
    * 参数列表:
          DriverObject:从I/O管理器中传进来的驱动对象
          PhysicalDeviceObject:从I/O管理器中传进来的物理设备对象
    * 返回 值:返回添加新设备状态
    *************************************************************************/
    #pragma PAGEDCODE //程序在分页
    NTSTATUS HelloWDMAddDevice(IN PDRIVER_OBJECT DriverObject,
                               IN PDEVICE_OBJECT PhysicalDeviceObject)
    { 
    	PAGED_CODE(); //DDK提供的宏，只在check版有效 (作用：中断请求越级，产生断言)
    	KdPrint(("Enter HelloWDMAddDevice\n"));
    
    	//创建设备对象，和NT下一样
    	NTSTATUS status;
    	PDEVICE_OBJECT fdo;
    	UNICODE_STRING devName;
    	RtlInitUnicodeString(&devName,L"\\Device\\MyWDMDevice");
    	status = IoCreateDevice(
    		DriverObject,
    		sizeof(DEVICE_EXTENSION),
    		&(UNICODE_STRING)devName,
    		FILE_DEVICE_UNKNOWN,
    		0,
    		FALSE,
    		&fdo);
    
    	if( !NT_SUCCESS(status))
    		return status;
    
    
    	PDEVICE_EXTENSION pdx = (PDEVICE_EXTENSION)fdo->DeviceExtension; //得到设备对象扩展数据结构
    	pdx->fdo = fdo; //记录设备扩展中的功能设备对象为刚才创建的设备
    	pdx->NextStackDevice = IoAttachDeviceToDeviceStack(fdo, PhysicalDeviceObject);//将fdo挂在设备堆栈上
    	UNICODE_STRING symLinkName;
    	RtlInitUnicodeString(&symLinkName,L"\\DosDevices\\HelloWDM");
    
    	pdx->ustrDeviceName = devName;
    
    	pdx->ustrSymLinkName = symLinkName; //创建设备的符号链接
    	status = IoCreateSymbolicLink(&(UNICODE_STRING)symLinkName,&(UNICODE_STRING)devName);
    
    
    	if( !NT_SUCCESS(status))
    	{
    		IoDeleteSymbolicLink(&pdx->ustrSymLinkName);
    		status = IoCreateSymbolicLink(&symLinkName,&devName);
    		if( !NT_SUCCESS(status))
    		{
    			return status;
    		}
    	}
    
    	fdo->Flags |= DO_BUFFERED_IO | DO_POWER_PAGABLE; //设置设备为BUFFERED_IO设置，并初始化
    	fdo->Flags &= ~DO_DEVICE_INITIALIZING;
    
    	KdPrint(("Leave HelloWDMAddDevice\n"));
    	return STATUS_SUCCESS;
    }
    
    /************************************************************************
    * 函数名称:DefaultPnpHandler
    * 功能描述:对PNP IRP进行缺省处理
    * 参数列表:
          pdx:设备对象的扩展
          Irp:从IO请求包
    * 返回 值:返回状态
    *************************************************************************/ 
    #pragma PAGEDCODE
    NTSTATUS DefaultPnpHandler(PDEVICE_EXTENSION pdx, PIRP Irp)
    {
    	PAGED_CODE();
    	KdPrint(("Enter DefaultPnpHandler\n"));
    	IoSkipCurrentIrpStackLocation(Irp);
    	KdPrint(("Leave DefaultPnpHandler\n"));
    	return IoCallDriver(pdx->NextStackDevice, Irp);  //下层堆栈的驱动设备对象处理此IRP
    }
    
    /************************************************************************
    * 函数名称:HandleRemoveDevice
    * 功能描述:对IRP_MN_REMOVE_DEVICE IRP进行处理
    * 参数列表:
          fdo:功能设备对象
          Irp:从IO请求包
    * 返回 值:返回状态
    *************************************************************************/
    #pragma PAGEDCODE
    NTSTATUS HandleRemoveDevice(PDEVICE_EXTENSION pdx, PIRP Irp)
    {
    	PAGED_CODE();
    	KdPrint(("Enter HandleRemoveDevice\n"));
    
    	Irp->IoStatus.Status = STATUS_SUCCESS;
    	NTSTATUS status = DefaultPnpHandler(pdx, Irp);
    	IoDeleteSymbolicLink(&(UNICODE_STRING)pdx->ustrSymLinkName);
    
        //调用IoDetachDevice()把fdo从设备栈中脱开：
        if (pdx->NextStackDevice)
            IoDetachDevice(pdx->NextStackDevice);
    	
        //删除fdo：
        IoDeleteDevice(pdx->fdo);
    	KdPrint(("Leave HandleRemoveDevice\n"));
    	return status;
    }
    
    /************************************************************************
    * 函数名称:HelloWDMPnp
    * 功能描述:对即插即用IRP进行处理
    * 参数列表:
          fdo:功能设备对象
          Irp:从IO请求包
    * 返回 值:返回状态
    *************************************************************************/
    #pragma PAGEDCODE
    NTSTATUS HelloWDMPnp(IN PDEVICE_OBJECT fdo,
                            IN PIRP Irp)
    {
    	PAGED_CODE(); //确保该例程运行在低于APC_LEVEl的中断优先级的级别上		
    
    	KdPrint(("Enter HelloWDMPnp\n"));
    	NTSTATUS status = STATUS_SUCCESS;
    	PDEVICE_EXTENSION pdx = (PDEVICE_EXTENSION) fdo->DeviceExtension; //得到设备扩展
    	PIO_STACK_LOCATION stack = IoGetCurrentIrpStackLocation(Irp);     //得到IRP的堆栈
    	static NTSTATUS (*fcntab[])(PDEVICE_EXTENSION pdx, PIRP Irp) = 
    	{
    		DefaultPnpHandler,		// IRP_MN_START_DEVICE
    		DefaultPnpHandler,		// IRP_MN_QUERY_REMOVE_DEVICE
    		HandleRemoveDevice,		  // IRP_MN_REMOVE_DEVICE
    		DefaultPnpHandler,		// IRP_MN_CANCEL_REMOVE_DEVICE
    		DefaultPnpHandler,		// IRP_MN_STOP_DEVICE
    		DefaultPnpHandler,		// IRP_MN_QUERY_STOP_DEVICE
    		DefaultPnpHandler,		// IRP_MN_CANCEL_STOP_DEVICE
    		DefaultPnpHandler,		// IRP_MN_QUERY_DEVICE_RELATIONS
    		DefaultPnpHandler,		// IRP_MN_QUERY_INTERFACE
    		DefaultPnpHandler,		// IRP_MN_QUERY_CAPABILITIES
    		DefaultPnpHandler,		// IRP_MN_QUERY_RESOURCES
    		DefaultPnpHandler,		// IRP_MN_QUERY_RESOURCE_REQUIREMENTS
    		DefaultPnpHandler,		// IRP_MN_QUERY_DEVICE_TEXT
    		DefaultPnpHandler,		// IRP_MN_FILTER_RESOURCE_REQUIREMENTS
    		DefaultPnpHandler,		// 
    		DefaultPnpHandler,		// IRP_MN_READ_CONFIG
    		DefaultPnpHandler,		// IRP_MN_WRITE_CONFIG
    		DefaultPnpHandler,		// IRP_MN_EJECT
    		DefaultPnpHandler,		// IRP_MN_SET_LOCK
    		DefaultPnpHandler,		// IRP_MN_QUERY_ID
    		DefaultPnpHandler,		// IRP_MN_QUERY_PNP_DEVICE_STATE
    		DefaultPnpHandler,		// IRP_MN_QUERY_BUS_INFORMATION
    		DefaultPnpHandler,		// IRP_MN_DEVICE_USAGE_NOTIFICATION
    		DefaultPnpHandler,		// IRP_MN_SURPRISE_REMOVAL
    	};
    
    	ULONG fcn = stack->MinorFunction;
    	if (fcn >= arraysize(fcntab))
    	{						// unknown function
    		status = DefaultPnpHandler(pdx, Irp); // some function we don't know about
    		return status;
    	}						// unknown function
    
    #if DBG
    	static char* fcnname[] = 
    	{
    		"IRP_MN_START_DEVICE",
    		"IRP_MN_QUERY_REMOVE_DEVICE",
    		"IRP_MN_REMOVE_DEVICE",
    		"IRP_MN_CANCEL_REMOVE_DEVICE",
    		"IRP_MN_STOP_DEVICE",
    		"IRP_MN_QUERY_STOP_DEVICE",
    		"IRP_MN_CANCEL_STOP_DEVICE",
    		"IRP_MN_QUERY_DEVICE_RELATIONS",
    		"IRP_MN_QUERY_INTERFACE",
    		"IRP_MN_QUERY_CAPABILITIES",
    		"IRP_MN_QUERY_RESOURCES",
    		"IRP_MN_QUERY_RESOURCE_REQUIREMENTS",
    		"IRP_MN_QUERY_DEVICE_TEXT",
    		"IRP_MN_FILTER_RESOURCE_REQUIREMENTS",
    		"",
    		"IRP_MN_READ_CONFIG",
    		"IRP_MN_WRITE_CONFIG",
    		"IRP_MN_EJECT",
    		"IRP_MN_SET_LOCK",
    		"IRP_MN_QUERY_ID",
    		"IRP_MN_QUERY_PNP_DEVICE_STATE",
    		"IRP_MN_QUERY_BUS_INFORMATION",
    		"IRP_MN_DEVICE_USAGE_NOTIFICATION",
    		"IRP_MN_SURPRISE_REMOVAL",
    	};
    
    	KdPrint(("PNP Request (%s)\n", fcnname[fcn]));
    #endif // DBG
    
    	status = (*fcntab[fcn])(pdx, Irp);
    	KdPrint(("Leave HelloWDMPnp\n"));
    	return status;
    }
    
    /************************************************************************
    * 函数名称:HelloWDMDispatchRoutine
    * 功能描述:对缺省IRP进行处理
    * 参数列表:
          fdo:功能设备对象
          Irp:从IO请求包
    * 返回 值:返回状态
    *************************************************************************/
    #pragma PAGEDCODE
    NTSTATUS HelloWDMDispatchRoutine(IN PDEVICE_OBJECT fdo,
    								 IN PIRP Irp)
    {
    	PAGED_CODE();
    	KdPrint(("Enter HelloWDMDispatchRoutine\n"));
    	Irp->IoStatus.Status = STATUS_SUCCESS;
    	Irp->IoStatus.Information = 0;	// no bytes xfered
    	IoCompleteRequest( Irp, IO_NO_INCREMENT );
    	KdPrint(("Leave HelloWDMDispatchRoutine\n"));
    	return STATUS_SUCCESS;
    }
    
    /************************************************************************
    * 函数名称:HelloWDMUnload
    * 功能描述:负责驱动程序的卸载操作
    * 参数列表:
          DriverObject:驱动对象
    * 返回 值:返回状态
    *************************************************************************/
    #pragma PAGEDCODE
    void HelloWDMUnload(IN PDRIVER_OBJECT DriverObject)
    {
    	PAGED_CODE();
    	KdPrint(("Enter HelloWDMUnload\n"));
    	KdPrint(("Leave HelloWDMUnload\n"));
    }