CreateFile 打开符号链接返回0；

fangchao918628 2009-08-14 04:37:17

通过winObj 查看有这个符号链接，但是打开的时候就是返回错误！！GetLastError 为1;

...全文

362 12 打赏收藏转发到动态举报

写回复

用AI写文章

12 条回复

切换为时间正序

请发表友善的回复…

发表回复

phantompeng 2012-08-24

打赏
举报

你好，我也遇到跟你差不多情况，请问你是怎么解决的

fangchao918628 2009-08-14

打赏
举报

效率结贴了！！

zyq5945 2009-08-14

打赏
举报

	HANDLE hDevice = CreateFile("\\\\.\\HookSSDT",

		GENERIC_WRITE | GENERIC_READ,

		0,

		NULL,

		OPEN_EXISTING,

		0,

		NULL);

试试把FILE_ATTRIBUTE_NORMAL该为0看看，我的0是可以打开的。

MoXiaoRab 2009-08-14

打赏
举报





typedef struct _DEVICE_EXTENSION{

	PDEVICE_OBJECT pDevice;

	UNICODE_STRING ustrDeviceName;

	UNICODE_STRING ustrSymLinkName;

}DEVICE_EXTENSION,*PDEVICE_EXTENSION;

调用方法



NTSTATUS DriverEntry(

					 IN PDRIVER_OBJECT pDriverObject,

					 IN PUNICODE_STRING pRegistryPath)

{

	

	pDriverObject->DriverUnload=DriverUnload;

	DbgPrint("DriverEntry Started!\n");



	pDriverObject->MajorFunction[IRP_MJ_CREATE]=DDKDispatchRoutine;

	pDriverObject->MajorFunction[IRP_MJ_CLOSE]=DDKDispatchRoutine;

	pDriverObject->MajorFunction[IRP_MJ_READ]=DDKDispatchRoutine;

	pDriverObject->MajorFunction[IRP_MJ_WRITE]=DDKDispatchRoutine;

	pDriverObject->MajorFunction[IRP_MJ_CLEANUP]=DDKDispatchRoutine;

	pDriverObject->MajorFunction[IRP_MJ_DEVICE_CONTROL]=DDKDispatchRoutine;

	pDriverObject->MajorFunction[IRP_MJ_SET_INFORMATION]=DDKDispatchRoutine;

	pDriverObject->MajorFunction[IRP_MJ_SHUTDOWN]=DDKDispatchRoutine;

	pDriverObject->MajorFunction[IRP_MJ_SYSTEM_CONTROL]=DDKDispatchRoutine;



	NTSTATUS status=CreateDevice(pDriverObject);



	DbgPrint("DriverEntry Ended!\n");

	return STATUS_SUCCESS;

}

fangchao918628 2009-08-14

打赏
举报

[Quote=引用 5 楼 tr0j4n 的回复:]
函数错误，呵呵
[/Quote]
？？？
CreateFile错误？？

MoXiaoRab 2009-08-14

打赏
举报

给你看看我的实例，用过无数次了



NTSTATUS CreateDevice(

					  IN PDRIVER_OBJECT pDriverObject)

{

	NTSTATUS status;

	PDEVICE_OBJECT pDevObj;

	PDEVICE_EXTENSION pDevExt;



	UNICODE_STRING szDevName;

	RtlInitUnicodeString(&szDevName,L"\\Device\\MyWDKDevice");

	status=IoCreateDevice(pDriverObject,

		sizeof(DEVICE_EXTENSION),

		&(UNICODE_STRING)szDevName,

		FILE_DEVICE_UNKNOWN,

		FILE_DEVICE_SECURE_OPEN,

		TRUE,

		&pDevObj);



	if(!NT_SUCCESS(status))

	{

		DbgPrint("IoCreateDevice UnOK!\n");

		return status;

	}

	else

		DbgPrint("IoCreateDevice OK!\n");



	pDevObj->Flags|=DO_BUFFERED_IO;

	pDevExt=(PDEVICE_EXTENSION)pDevObj->DeviceExtension;

	pDevExt->pDevice=pDevObj;

	pDevExt->ustrDeviceName=szDevName;



	UNICODE_STRING symLinkName;

	RtlInitUnicodeString(&symLinkName,L"\\??\\HelloWDK");

	pDevExt->ustrSymLinkName=symLinkName;



	status=IoCreateSymbolicLink(&symLinkName,&szDevName);

	if(!NT_SUCCESS(status))

	{

		DbgPrint("IoCreateSymbolicLink UnOK");

		IoDeleteDevice(pDevObj);

		return status;

	}

	else

		DbgPrint("IoCreateSymbolicLink OK");



	return STATUS_SUCCESS;

}

bohut 2009-08-14

打赏
举报

在Sfcreate里要对cdo的Irp做个处理如:
Irp->IoStatus.Information = 0;
Irp->IoStatus.Status = STATUS_SUCCESS;
IoCompleteRequest(Irp, IO_NO_INCREMENT);
return STATUS_SUCCESS;

MoXiaoRab 2009-08-14

打赏
举报

函数错误，呵呵

fangchao918628 2009-08-14

打赏
举报



	RtlInitUnicodeString(&devName,L"\\Device\\MySSDTHook");

	

	//创建设备

	status = IoCreateDevice(DriverObject,

													sizeof(DEVICE_EXTENSION),

													&devName,

													FILE_DEVICE_UNKNOWN,

													0,

													FALSE,

													&pDevObj);

	if(!NT_SUCCESS(status))

		return status;

		

	

	RtlInitUnicodeString(&symLinkName,L"\\??\\HookSSDT");

	

	status = IoCreateSymbolicLink(&symLinkName,&devName);

	

	if(!NT_SUCCESS(status))

	{

		IoDeleteDevice(pDevObj);

		return status;

	}

HANDLE hDevice = ::CreateFile("\\\\.\\HookSSDT",
GENERIC_READ|GENERIC_WRITE,
0,
NULL,
OPEN_EXISTING,
FILE_ATTRIBUTE_NORMAL,
NULL);

bohut 2009-08-14

打赏
举报

符号链接是如何创建的，贴一下代码！

zyq5945 2009-08-14

打赏
举报

Consoles
Communications resources
Directories (open only)
Disk devices (Windows NT/2000 only)
Files
Mailslots
Pipes
CreateFile只可以打开这些资源，你返回的错误是“函数不正确。 ”