process

More documents

Recommendations

Info

8 Object Structure Object header (owned by object manager) Object body (owned by executive component) Object name Object Object directory name Security Object Object descriptor directory name Quota Security Object charges descriptor directory Open Quota Security handle charges descriptor count Open Open Quota handles handle charges list count Object Open Open type handles handle list count Reference Object Open type handles list count Reference Object type count Object-specific Reference data count Object-specific data Object-specific data Process 1 Type object Process 2 Process 3 Type name Access types Synchronizable (Y/N) Pageable (Y/N) Methods: open, close, delete parse, security, query name
9 Object Header Field Handle count Pointer count Security descriptor Object type Subheader offset Flags Purpose Number of currently opened handles to the object Number of references to the object (>= handle count) Kernel components can refer to an object without opening a handle Determines who can use the object and what they can do with it. Unnamed objects cannot have security Points to the Type Object that contains common attributes Negative offsets to the optional subheader structures, which if present, always precedes the object header Characteristics and object attributes for the object
Page 1 and 2: Core System Mechanisms and Windows
Page 3 and 4: 3 Object Manager (I) Executive comp
Page 5 and 6: 5 Executive Objects vs. Kernel Obje
Page 7: 7 Executive Objects (contd.) Object
Page 11 and 12: 11 Object Methods Method Open Close
Page 13 and 14: 13 Handles and Security Process han
Page 15 and 16: 15 Handle and Reference Count handl
Page 17 and 18: 17 Interesting Object Directories i
Page 19 and 20: 19 System Worker Threads Created at
Page 21 and 22: 21 Port Objects ALPC exports port o
Page 23 and 24: 23 Wow64 Allows execution of Win32
Page 25 and 26: 25 Wow64 File Locations Location of
Page 27 and 28: 27 Example: Cmd.exe on 64-bit Syste
Page 29 and 30: 29 Windows API - Overview APIs to W
Page 31 and 32: 31 Windows API Principles System re
Page 33 and 34: 33 Windows API Naming Conventions P
Page 35 and 36: 35 Differences from UNIX HANDLEs ar
Page 37 and 38: 37 Example Application Sequential f
Page 39 and 40: 39 Basic cp file copy program. UNIX
Page 41 and 42: 41 Basic cp file copy program. C li
Page 43 and 44: 43 Basic cp file copy program. Wind
Page 45 and 46: 45 Further Reading Mark E. Russinov
Page 47 and 48: Lab: 2013-9-23 Handles & ALPC
Page 49: ALPC Port Objects Use Winobj.exe to

process

Create successful ePaper yourself

Delete template?

Save as template?