8 #define CACHEPAGESIZE(pDeviceExt) \
9 ((pDeviceExt)->NtfsInfo.UCHARsPerCluster > PAGE_SIZE ? \
10 (pDeviceExt)->NtfsInfo.UCHARsPerCluster : PAGE_SIZE)
12 #define TAG_NTFS 'SFTN'
14 #define ROUND_UP(N, S) ((((N) + (S) - 1) / (S)) * (S))
16 #define DEVICE_NAME L"\\Ntfs"
19 typedef struct _BIOS_PARAMETERS_BLOCK
21 USHORT BytesPerSector
; // 0x0B
22 UCHAR SectorsPerCluster
; // 0x0D
23 UCHAR Unused0
[7]; // 0x0E, checked when volume is mounted
24 UCHAR MediaId
; // 0x15
25 UCHAR Unused1
[2]; // 0x16
26 USHORT SectorsPerTrack
; // 0x18
28 UCHAR Unused2
[4]; // 0x1C
29 UCHAR Unused3
[4]; // 0x20, checked when volume is mounted
30 } BIOS_PARAMETERS_BLOCK
, *PBIOS_PARAMETERS_BLOCK
;
32 typedef struct _EXTENDED_BIOS_PARAMETERS_BLOCK
34 USHORT Unknown
[2]; // 0x24, always 80 00 80 00
35 ULONGLONG SectorCount
; // 0x28
36 ULONGLONG MftLocation
; // 0x30
37 ULONGLONG MftMirrLocation
; // 0x38
38 CHAR ClustersPerMftRecord
; // 0x40
39 UCHAR Unused4
[3]; // 0x41
40 CHAR ClustersPerIndexRecord
; // 0x44
41 UCHAR Unused5
[3]; // 0x45
42 ULONGLONG SerialNumber
; // 0x48
43 UCHAR Checksum
[4]; // 0x50
44 } EXTENDED_BIOS_PARAMETERS_BLOCK
, *PEXTENDED_BIOS_PARAMETERS_BLOCK
;
46 typedef struct _BOOT_SECTOR
48 UCHAR Jump
[3]; // 0x00
49 UCHAR OEMID
[8]; // 0x03
50 BIOS_PARAMETERS_BLOCK BPB
;
51 EXTENDED_BIOS_PARAMETERS_BLOCK EBPB
;
52 UCHAR BootStrap
[426]; // 0x54
53 USHORT EndSector
; // 0x1FE
54 } BOOT_SECTOR
, *PBOOT_SECTOR
;
57 //typedef struct _BootSector BootSector;
63 typedef struct _NTFS_INFO
66 ULONG SectorsPerCluster
;
67 ULONG BytesPerCluster
;
68 ULONGLONG SectorCount
;
69 ULARGE_INTEGER MftStart
;
70 ULARGE_INTEGER MftMirrStart
;
71 ULONG BytesPerFileRecord
;
73 ULONGLONG SerialNumber
;
74 USHORT VolumeLabelLength
;
75 WCHAR VolumeLabel
[MAXIMUM_VOLUME_LABEL_LENGTH
];
80 } NTFS_INFO
, *PNTFS_INFO
;
82 #define NTFS_TYPE_CCB '20SF'
83 #define NTFS_TYPE_FCB '30SF'
84 #define NTFS_TYPE_VCB '50SF'
85 #define NTFS_TYPE_IRP_CONTEST '60SF'
86 #define NTFS_TYPE_GLOBAL_DATA '70SF'
92 } NTFSIDENTIFIER
, *PNTFSIDENTIFIER
;
97 NTFSIDENTIFIER Identifier
;
99 ERESOURCE DirResource
;
100 // ERESOURCE FatResource;
102 KSPIN_LOCK FcbListLock
;
103 LIST_ENTRY FcbListHead
;
106 PDEVICE_OBJECT StorageDevice
;
107 PFILE_OBJECT StreamFileObject
;
112 } DEVICE_EXTENSION
, *PDEVICE_EXTENSION
, NTFS_VCB
, *PNTFS_VCB
;
115 #define FCB_CACHE_INITIALIZED 0x0001
116 #define FCB_IS_VOLUME_STREAM 0x0002
117 #define FCB_IS_VOLUME 0x0004
122 NTFSIDENTIFIER Identifier
;
124 FSRTL_COMMON_FCB_HEADER RFCB
;
125 SECTION_OBJECT_POINTERS SectionObjectPointers
;
127 PFILE_OBJECT FileObject
;
130 WCHAR
*ObjectName
; /* point on filename (250 chars max) in PathName */
131 WCHAR PathName
[MAX_PATH
]; /* path+filename 260 max */
133 ERESOURCE PagingIoResource
;
134 ERESOURCE MainResource
;
136 LIST_ENTRY FcbListEntry
;
137 struct _FCB
* ParentFcb
;
147 } NTFS_FCB
, *PNTFS_FCB
;
152 NTFSIDENTIFIER Identifier
;
154 PFILE_OBJECT PtrFileObject
;
155 LARGE_INTEGER CurrentByteOffset
;
156 /* for DirectoryControl */
158 /* for DirectoryControl */
159 PWCHAR DirectorySearchPattern
;
162 } NTFS_CCB
, *PNTFS_CCB
;
164 #define TAG_CCB 'BCCI'
168 NTFSIDENTIFIER Identifier
;
170 PDRIVER_OBJECT DriverObject
;
171 PDEVICE_OBJECT DeviceObject
;
172 CACHE_MANAGER_CALLBACKS CacheMgrCallbacks
;
174 } NTFS_GLOBAL_DATA
, *PNTFS_GLOBAL_DATA
;
179 AttributeStandardInformation
= 0x10,
180 AttributeAttributeList
= 0x20,
181 AttributeFileName
= 0x30,
182 AttributeObjectId
= 0x40,
183 AttributeSecurityDescriptor
= 0x50,
184 AttributeVolumeName
= 0x60,
185 AttributeVolumeInformation
= 0x70,
186 AttributeData
= 0x80,
187 AttributeIndexRoot
= 0x90,
188 AttributeIndexAllocation
= 0xA0,
189 AttributeBitmap
= 0xB0,
190 AttributeReparsePoint
= 0xC0,
191 AttributeEAInformation
= 0xD0,
193 AttributePropertySet
= 0xF0,
194 AttributeLoggedUtilityStream
= 0x100
195 } ATTRIBUTE_TYPE
, *PATTRIBUTE_TYPE
;
200 ULONG Type
; /* Magic number 'FILE' */
201 USHORT UsaOffset
; /* Offset to the update sequence */
202 USHORT UsaCount
; /* Size in words of Update Sequence Number & Array (S) */
203 ULONGLONG Lsn
; /* $LogFile Sequence Number (LSN) */
204 } NTFS_RECORD_HEADER
, *PNTFS_RECORD_HEADER
;
206 /* NTFS_RECORD_HEADER.Type */
207 #define NRH_FILE_TYPE 0x454C4946 /* 'FILE' */
212 NTFS_RECORD_HEADER Ntfs
;
213 USHORT SequenceNumber
; /* Sequence number */
214 USHORT LinkCount
; /* Hard link count */
215 USHORT AttributeOffset
; /* Offset to the first Attribute */
216 USHORT Flags
; /* Flags */
217 ULONG BytesInUse
; /* Real size of the FILE record */
218 ULONG BytesAllocated
; /* Allocated size of the FILE record */
219 ULONGLONG BaseFileRecord
; /* File reference to the base FILE record */
220 USHORT NextAttributeNumber
; /* Next Attribute Id */
221 USHORT Pading
; /* Align to 4 UCHAR boundary (XP) */
222 ULONG MFTRecordNumber
; /* Number of this MFT Record (XP) */
223 } FILE_RECORD_HEADER
, *PFILE_RECORD_HEADER
;
225 /* Flags in FILE_RECORD_HEADER */
227 #define FRH_IN_USE 0x0001 /* Record is in use */
228 #define FRH_DIRECTORY 0x0002 /* Record is a directory */
229 #define FRH_UNKNOWN1 0x0004 /* Don't know */
230 #define FRH_UNKNOWN2 0x0008 /* Don't know */
234 ATTRIBUTE_TYPE AttributeType
;
240 USHORT AttributeNumber
;
241 } ATTRIBUTE
, *PATTRIBUTE
;
250 } RESIDENT_ATTRIBUTE
, *PRESIDENT_ATTRIBUTE
;
255 ULONGLONG StartVcn
; // LowVcn
256 ULONGLONG LastVcn
; // HighVcn
257 USHORT RunArrayOffset
;
258 USHORT CompressionUnit
;
261 ULONGLONG AllocatedSize
;
263 ULONGLONG InitializedSize
;
264 ULONGLONG CompressedSize
;
265 } NONRESIDENT_ATTRIBUTE
, *PNONRESIDENT_ATTRIBUTE
;
270 ULONGLONG CreationTime
;
271 ULONGLONG ChangeTime
;
272 ULONGLONG LastWriteTime
;
273 ULONGLONG LastAccessTime
;
275 ULONG AlignmentOrReserved
[3];
279 ULONGLONG QuotaCharge
;
282 } STANDARD_INFORMATION
, *PSTANDARD_INFORMATION
;
287 ATTRIBUTE_TYPE AttributeType
;
291 ULONGLONG StartVcn
; // LowVcn
292 ULONGLONG FileReferenceNumber
;
293 USHORT AttributeNumber
;
294 USHORT AlignmentOrReserved
[3];
295 } ATTRIBUTE_LIST
, *PATTRIBUTE_LIST
;
300 ULONGLONG DirectoryFileReferenceNumber
;
301 ULONGLONG CreationTime
;
302 ULONGLONG ChangeTime
;
303 ULONGLONG LastWriteTime
;
304 ULONGLONG LastAccessTime
;
305 ULONGLONG AllocatedSize
;
307 ULONG FileAttributes
;
308 ULONG AlignmentOrReserved
;
312 } FILENAME_ATTRIBUTE
, *PFILENAME_ATTRIBUTE
;
321 } VOLINFO_ATTRIBUTE
, *PVOLINFO_ATTRIBUTE
;
325 NTFSIDENTIFIER Identifier
;
329 WORK_QUEUE_ITEM WorkQueueItem
;
332 PDEVICE_OBJECT DeviceObject
;
333 NTSTATUS SavedExceptionCode
;
334 } NTFS_IRP_CONTEXT
, *PNTFS_IRP_CONTEXT
;
337 extern PNTFS_GLOBAL_DATA NtfsGlobalData
;
339 //int CdfsStrcmpi( wchar_t *str1, wchar_t *str2 );
340 //void CdfsWstrcpy( wchar_t *str1, wchar_t *str2, int max );
346 //NtfsDumpAttribute(PATTRIBUTE Attribute);
348 //LONGLONG RunLCN(PUCHAR run);
350 //ULONG RunLength(PUCHAR run);
353 FindRun (PNONRESIDENT_ATTRIBUTE NresAttr
,
359 NtfsDumpFileAttributes (PFILE_RECORD_HEADER FileRecord
);
364 NtfsReadSectors(IN PDEVICE_OBJECT DeviceObject
,
366 IN ULONG SectorCount
,
368 IN OUT PUCHAR Buffer
,
369 IN BOOLEAN Override
);
372 NtfsDeviceIoControl(IN PDEVICE_OBJECT DeviceObject
,
373 IN ULONG ControlCode
,
374 IN PVOID InputBuffer
,
375 IN ULONG InputBufferSize
,
376 IN OUT PVOID OutputBuffer
,
377 IN OUT PULONG OutputBufferSize
,
378 IN BOOLEAN Override
);
382 DRIVER_DISPATCH NtfsFsdClose
;
384 NtfsFsdClose(PDEVICE_OBJECT DeviceObject
,
389 DRIVER_DISPATCH NtfsFsdCreate
;
391 NtfsFsdCreate(PDEVICE_OBJECT DeviceObject
,
397 DRIVER_DISPATCH NtfsFsdDirectoryControl
;
399 NtfsFsdDirectoryControl(PDEVICE_OBJECT DeviceObject
,
403 DRIVER_DISPATCH NtfsFsdDispatch
;
405 NtfsFsdDispatch(PDEVICE_OBJECT DeviceObject
,
410 NtfsAcqLazyWrite(PVOID Context
,
414 NtfsRelLazyWrite(PVOID Context
);
417 NtfsAcqReadAhead(PVOID Context
,
421 NtfsRelReadAhead(PVOID Context
);
426 NtfsCreateFCB(PCWSTR FileName
, PNTFS_VCB Vcb
);
429 NtfsDestroyFCB(PNTFS_FCB Fcb
);
432 NtfsFCBIsDirectory(PNTFS_FCB Fcb
);
435 NtfsFCBIsRoot(PNTFS_FCB Fcb
);
438 NtfsGrabFCB(PNTFS_VCB Vcb
,
442 NtfsReleaseFCB(PNTFS_VCB Vcb
,
446 NtfsAddFCBToTable(PNTFS_VCB Vcb
,
450 NtfsGrabFCBFromTable(PNTFS_VCB Vcb
,
454 NtfsFCBInitializeCache(PNTFS_VCB Vcb
,
458 NtfsMakeRootFCB(PNTFS_VCB Vcb
);
461 NtfsOpenRootFCB(PNTFS_VCB Vcb
);
464 NtfsAttachFCBToFileObject(PNTFS_VCB Vcb
,
466 PFILE_OBJECT FileObject
);
469 NtfsGetFCBForFile(PNTFS_VCB Vcb
,
470 PNTFS_FCB
*pParentFCB
,
472 const PWSTR pFileName
);
477 DRIVER_DISPATCH NtfsFsdQueryInformation
;
479 NtfsFsdQueryInformation(PDEVICE_OBJECT DeviceObject
,
485 DRIVER_DISPATCH NtfsFsdFileSystemControl
;
487 NtfsFsdFileSystemControl(PDEVICE_OBJECT DeviceObject
,
493 NtfsOpenMft (PDEVICE_EXTENSION Vcb
);
497 ReadAttribute(PATTRIBUTE attr
, PVOID buffer
, PDEVICE_EXTENSION Vcb
,
498 PDEVICE_OBJECT DeviceObject
);
501 AttributeDataLength(PATTRIBUTE attr
);
504 AttributeAllocatedLength (PATTRIBUTE Attribute
);
507 ReadFileRecord (PDEVICE_EXTENSION Vcb
,
509 PFILE_RECORD_HEADER file
,
510 PFILE_RECORD_HEADER Mft
);
513 FindAttribute(PFILE_RECORD_HEADER file
,
518 AttributeLengthAllocated(PATTRIBUTE attr
);
521 ReadVCN (PDEVICE_EXTENSION Vcb
,
522 PFILE_RECORD_HEADER file
,
529 VOID
FixupUpdateSequenceArray(PFILE_RECORD_HEADER file
);
532 ReadExternalAttribute (PDEVICE_EXTENSION Vcb
,
533 PNONRESIDENT_ATTRIBUTE NresAttr
,
539 ReadLCN (PDEVICE_EXTENSION Vcb
,
546 EnumerAttribute(PFILE_RECORD_HEADER file
,
547 PDEVICE_EXTENSION Vcb
,
548 PDEVICE_OBJECT DeviceObject
);
552 NtfsIsIrpTopLevel(PIRP Irp
);
555 NtfsAllocateIrpContext(PDEVICE_OBJECT DeviceObject
,
560 wstrcmpjoki(PWSTR s1
, PWSTR s2
);
563 CdfsSwapString(PWCHAR Out
,
568 CdfsDateTimeToFileTime(PFCB Fcb
,
572 CdfsFileFlagsToAttributes(PFCB Fcb
,
573 PULONG FileAttributes
);
578 DRIVER_DISPATCH NtfsFsdRead
;
580 NtfsFsdRead(PDEVICE_OBJECT DeviceObject
,
583 DRIVER_DISPATCH NtfsFsdWrite
;
585 NtfsFsdWrite(PDEVICE_OBJECT DeviceObject
,
592 NtfsQueryVolumeInformation(PNTFS_IRP_CONTEXT IrpContext
);
595 NtfsSetVolumeInformation(PNTFS_IRP_CONTEXT IrpContext
);
599 DRIVER_INITIALIZE DriverEntry
;
601 VOID NTAPI
NtfsInitializeFunctionPointers(PDRIVER_OBJECT DriverObject
);