windows 驱动开发 MDL 内核层用户层共享内存

小咪咪 2023-10-12 01:26 42阅读 0赞

参考资料

https://blog.csdn.net/wdykanq/article/details/7752909

http://blog.51cto.com/laokaddk/404584

内核层创建内存映射用户层

PVOID pShareMM\_SYS;  
PMDL pShareMM\_MDL;  
PVOID pShareMM\_User;

PKUANGKEEPROCESS vEProcess = KuangKeGetProcessById(3412);  
KAPC\_STATE vKapcState;

KeStackAttachProcess((PRKPROCESS)vEProcess, &vKapcState);

pShareMM\_SYS = KuangKeAllocate(1024);//size必须是page的整数倍  也可以使用 ExAllocatePoolWithTag(NonPagedPool, \_s, 'KUAN')  
RtlZeroMemory(pShareMM\_SYS, 1024);

pShareMM\_MDL = IoAllocateMdl(pShareMM\_SYS, 1024, FALSE, FALSE, NULL);  
MmBuildMdlForNonPagedPool(pShareMM\_MDL);

pShareMM\_User = MmMapLockedPagesSpecifyCache(pShareMM\_MDL, UserMode, MmCached, NULL, FALSE, NormalPagePriority);  
KuangKeDebugPrint("pShareMM\_SYS的地址为： 0x%p\\n", (PUCHAR)pShareMM\_SYS);  
KuangKeDebugPrint("pShareMM\_User的地址为： 0x%p\\n", (PUCHAR)pShareMM\_User);

//MmUnMapLockerPages(pShareMM\_MDL);  
MmUnmapLockedPages(pShareMM\_User, pShareMM\_MDL);  
IoFreeMdl(pShareMM\_MDL);  
KuangKeFree(pShareMM\_SYS);

KeUnstackDetachProcess(&vKapcState);

用户层映射内核

BaseAddr = OpenKernel32();        //映射kernel32的section到本进程的低2G空间  
if (!BaseAddr)  
\{  
KdPrint(("DriverEntry--OpenKernel32 failure!\\n"));  
return 0;  
\}  
KdPrint(("BaseAddr: 0x%08x\\n",BaseAddr));  
//创建一个MDL  
pMDL = IoAllocateMdl(BaseAddr,0x11c000,FALSE,FALSE,NULL);  
if (!pMDL)  
\{  
KdPrint(("pMDL == NULL\\n"));  
return 0;  
\}  
\_try  
\{  
MmProbeAndLockPages(pMDL,UserMode,IoReadAccess);  
\}  
\_except(EXCEPTION\_EXECUTE\_HANDLER)  
\{  
KdPrint(("MmProbeAndLockPages exception\\n"));  
\}  
  
\_try  
\{  
pMapedAddr = MmMapLockedPagesSpecifyCache(pMDL,KernelMode,MmCached,NULL,FALSE,NormalPagePriority);  
if (!pMapedAddr)  
\{  
KdPrint(("pMapedAdd == NULL\\n"));  
return 0;  
\}  
\}  
\_except(EXCEPTION\_EXECUTE\_HANDLER)  
\{  
KdPrint(("MmMapLockedPagesSpecifyCache exception\\n"));  
\}

转载于:https://www.cnblogs.com/kuangke/p/9888671.html