微过滤器驱动开发指南 之四（Micro filter driver development guide four）.docVIP

微过滤器驱动开发指南 之四（Micro filter driver development guide four） Micro filter driver development guide four 10. communication with user mode 10.1 filter communication port object In order to implement secure and support many different types of communication methods, a new object is introduced: the micro filter communication port (hereinafter referred to as the communication port or port). Designed specifically for nuclear mind user communications or vice versa. Core core communications are out of support now. A port is a NT object with a name. And there is a safe descriptive symbol. The filter manager generates a new object type, FilterConnectionPort, to implement this. The filter manager generates this new object type in its DriverEntry, before any micro filter load. Only the driver of the core mode can generate a communication port using the following call: NTSTATUS FltCreateCommunicationPort ( IN PFLT_FILTER Filter, OUT PHANDLE PortHandle, IN POBJECT_ATTRIBUTES ObjectAttributes, IN PVOID ServerPortCookie OPTIONAL, IN PFLT_CONNECT_NOTIFY ConnectNotifyCallback, IN PFLT_DISCONNECT_NOTIFY DisconnectNotifyCallback, IN PFLT_MESSAGE_NOTIFY MessageNotifyCallback, IN ULONG MaxConnections ); Filter is the filter handle of the micro filter. After the success is generated, the handle of the port is returned in the PortHandle parameter. As with other NT objects, the ObjectAttributes parameter defines the OBJECT_ATTRIBUTES structure to initialize the name of the port object to be generated, object properties, and security descriptors. Notice that the OBJ_KERNEL_HANDLE tag in the property must be set. Because the communication port can only be the core object. ServerPortCookie is a context. The micro filter can be connected by this and the port. This context is not transparent to the filter manager. All connections, interrupt notifications, are passed together in this context to pass to the micro filter. Some filters may generate a set of communication ports and want to function with