StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PONDIS filter driver' FilterReceiveNetBufferLists handler isn't called
primarykey
Id
18257048
data
AcceptedAnswerId
18478725
AnswerCount
1
ClosedDate
CommentCount
16
CommunityOwnedDate
CreationDate
2013-08-15T16:21:25.713
FavoriteCount
0
LastActivityDate
2013-08-28T03:05:14.987
LastEditDate
2013-08-17T01:47:54.767
LastEditorUserId
1087890
OwnerUserId
1087890
ParentId
0
PostTypeId
1
Score
0
ViewCount
1071
LastEditorDisplayName
text
Body
I am developing an NDIS filter driver, and I fount its <code>FilterReceiveNetBufferLists</code> is never called (the network is blocked) under certain condition (like open Wireshark or click the "Interface List" button of it). But When I start the capturing, the <code>FilterReceiveNetBufferLists</code> get to be normal (network restored), this is so strange. I found that when I mannually return <code>NDIS_STATUS_FAILURE</code> for the <code>NdisFOidRequest</code> function in an OID originating place of WinPcap driver (BIOCQUERYOID & BIOCSETOID switch branch of NPF_IoControl), then driver won't block the network (Also the winpcap can't work). Is there something wrong with the <code>NdisFOidRequest</code> call? The DeviceIO routine in Packet.c that originates OID requests: <pre><code>case BIOCQUERYOID: case BIOCSETOID: TRACE_MESSAGE(PACKET_DEBUG_LOUD, "BIOCSETOID - BIOCQUERYOID"); // // gain ownership of the Ndis Handle // if (NPF_StartUsingBinding(Open) == FALSE) { // // MAC unbindind or unbound // SET_FAILURE_INVALID_REQUEST(); break; } // Extract a request from the list of free ones RequestListEntry = ExInterlockedRemoveHeadList(&Open->RequestList, &Open->RequestSpinLock); if (RequestListEntry == NULL) { // // Release ownership of the Ndis Handle // NPF_StopUsingBinding(Open); SET_FAILURE_NOMEM(); break; } pRequest = CONTAINING_RECORD(RequestListEntry, INTERNAL_REQUEST, ListElement); // // See if it is an Ndis request // OidData = Irp->AssociatedIrp.SystemBuffer; if ((IrpSp->Parameters.DeviceIoControl.InputBufferLength == IrpSp->Parameters.DeviceIoControl.OutputBufferLength) && (IrpSp->Parameters.DeviceIoControl.InputBufferLength >= sizeof(PACKET_OID_DATA)) && (IrpSp->Parameters.DeviceIoControl.InputBufferLength >= sizeof(PACKET_OID_DATA) - 1 + OidData->Length)) { TRACE_MESSAGE2(PACKET_DEBUG_LOUD, "BIOCSETOID|BIOCQUERYOID Request: Oid=%08lx, Length=%08lx", OidData->Oid, OidData->Length); // // The buffer is valid // NdisZeroMemory(&pRequest->Request, sizeof(NDIS_OID_REQUEST)); pRequest->Request.Header.Type = NDIS_OBJECT_TYPE_OID_REQUEST; pRequest->Request.Header.Revision = NDIS_OID_REQUEST_REVISION_1; pRequest->Request.Header.Size = NDIS_SIZEOF_OID_REQUEST_REVISION_1; if (FunctionCode == BIOCSETOID) { pRequest->Request.RequestType = NdisRequestSetInformation; pRequest->Request.DATA.SET_INFORMATION.Oid = OidData->Oid; pRequest->Request.DATA.SET_INFORMATION.InformationBuffer = OidData->Data; pRequest->Request.DATA.SET_INFORMATION.InformationBufferLength = OidData->Length; } else { pRequest->Request.RequestType = NdisRequestQueryInformation; pRequest->Request.DATA.QUERY_INFORMATION.Oid = OidData->Oid; pRequest->Request.DATA.QUERY_INFORMATION.InformationBuffer = OidData->Data; pRequest->Request.DATA.QUERY_INFORMATION.InformationBufferLength = OidData->Length; } NdisResetEvent(&pRequest->InternalRequestCompletedEvent); if (*((PVOID *) pRequest->Request.SourceReserved) != NULL) { *((PVOID *) pRequest->Request.SourceReserved) = NULL; } // // submit the request // pRequest->Request.RequestId = (PVOID) NPF6X_REQUEST_ID; ASSERT(Open->AdapterHandle != NULL); Status = NdisFOidRequest(Open->AdapterHandle, &pRequest->Request); //Status = NDIS_STATUS_FAILURE; } else { // // Release ownership of the Ndis Handle // NPF_StopUsingBinding(Open); // // buffer too small // SET_FAILURE_BUFFER_SMALL(); break; } if (Status == NDIS_STATUS_PENDING) { NdisWaitEvent(&pRequest->InternalRequestCompletedEvent, 1000); Status = pRequest->RequestStatus; } // // Release ownership of the Ndis Handle // NPF_StopUsingBinding(Open); // // Complete the request // if (FunctionCode == BIOCSETOID) { OidData->Length = pRequest->Request.DATA.SET_INFORMATION.BytesRead; TRACE_MESSAGE1(PACKET_DEBUG_LOUD, "BIOCSETOID completed, BytesRead = %u", OidData->Length); } else { if (FunctionCode == BIOCQUERYOID) { OidData->Length = pRequest->Request.DATA.QUERY_INFORMATION.BytesWritten; if (Status == NDIS_STATUS_SUCCESS) { // // check for the stupid bug of the Nortel driver ipsecw2k.sys v. 4.10.0.0 that doesn't set the BytesWritten correctly // The driver is the one shipped with Nortel client Contivity VPN Client V04_65.18, and the MD5 for the buggy (unsigned) driver // is 3c2ff8886976214959db7d7ffaefe724 *ipsecw2k.sys (there are multiple copies of this binary with the same exact version info!) // // The (certified) driver shipped with Nortel client Contivity VPN Client V04_65.320 doesn't seem affected by the bug. // if (pRequest->Request.DATA.QUERY_INFORMATION.BytesWritten > pRequest->Request.DATA.QUERY_INFORMATION.InformationBufferLength) { TRACE_MESSAGE2(PACKET_DEBUG_LOUD, "Bogus return from NdisRequest (query): Bytes Written (%u) > InfoBufferLength (%u)!!", pRequest->Request.DATA.QUERY_INFORMATION.BytesWritten, pRequest->Request.DATA.QUERY_INFORMATION.InformationBufferLength); Status = NDIS_STATUS_INVALID_DATA; } } TRACE_MESSAGE1(PACKET_DEBUG_LOUD, "BIOCQUERYOID completed, BytesWritten = %u", OidData->Length); } } ExInterlockedInsertTailList(&Open->RequestList, &pRequest->ListElement, &Open->RequestSpinLock); if (Status == NDIS_STATUS_SUCCESS) { SET_RESULT_SUCCESS(sizeof(PACKET_OID_DATA) - 1 + OidData->Length); } else { SET_FAILURE_INVALID_REQUEST(); } break; </code></pre> Three Filter OID routines: <pre><code>_Use_decl_annotations_ NDIS_STATUS NPF_OidRequest( NDIS_HANDLE FilterModuleContext, PNDIS_OID_REQUEST Request ) { POPEN_INSTANCE Open = (POPEN_INSTANCE) FilterModuleContext; NDIS_STATUS Status; PNDIS_OID_REQUEST ClonedRequest=NULL; BOOLEAN bSubmitted = FALSE; PFILTER_REQUEST_CONTEXT Context; BOOLEAN bFalse = FALSE; TRACE_ENTER(); do { Status = NdisAllocateCloneOidRequest(Open->AdapterHandle, Request, NPF6X_ALLOC_TAG, &ClonedRequest); if (Status != NDIS_STATUS_SUCCESS) { TRACE_MESSAGE(PACKET_DEBUG_LOUD, "FilerOidRequest: Cannot Clone Request\n"); break; } Context = (PFILTER_REQUEST_CONTEXT)(&ClonedRequest->SourceReserved[0]); *Context = Request; bSubmitted = TRUE; // // Use same request ID // ClonedRequest->RequestId = Request->RequestId; Open->PendingOidRequest = ClonedRequest; Status = NdisFOidRequest(Open->AdapterHandle, ClonedRequest); if (Status != NDIS_STATUS_PENDING) { NPF_OidRequestComplete(Open, ClonedRequest, Status); Status = NDIS_STATUS_PENDING; } }while (bFalse); if (bSubmitted == FALSE) { switch(Request->RequestType) { case NdisRequestMethod: Request->DATA.METHOD_INFORMATION.BytesRead = 0; Request->DATA.METHOD_INFORMATION.BytesNeeded = 0; Request->DATA.METHOD_INFORMATION.BytesWritten = 0; break; case NdisRequestSetInformation: Request->DATA.SET_INFORMATION.BytesRead = 0; Request->DATA.SET_INFORMATION.BytesNeeded = 0; break; case NdisRequestQueryInformation: case NdisRequestQueryStatistics: default: Request->DATA.QUERY_INFORMATION.BytesWritten = 0; Request->DATA.QUERY_INFORMATION.BytesNeeded = 0; break; } } TRACE_EXIT(); return Status; } //------------------------------------------------------------------- _Use_decl_annotations_ VOID NPF_CancelOidRequest( NDIS_HANDLE FilterModuleContext, PVOID RequestId ) { POPEN_INSTANCE Open = (POPEN_INSTANCE) FilterModuleContext; PNDIS_OID_REQUEST Request = NULL; PFILTER_REQUEST_CONTEXT Context; PNDIS_OID_REQUEST OriginalRequest = NULL; BOOLEAN bFalse = FALSE; FILTER_ACQUIRE_LOCK(&Open->OIDLock, bFalse); Request = Open->PendingOidRequest; if (Request != NULL) { Context = (PFILTER_REQUEST_CONTEXT)(&Request->SourceReserved[0]); OriginalRequest = (*Context); } if ((OriginalRequest != NULL) && (OriginalRequest->RequestId == RequestId)) { FILTER_RELEASE_LOCK(&Open->OIDLock, bFalse); NdisFCancelOidRequest(Open->AdapterHandle, RequestId); } else { FILTER_RELEASE_LOCK(&Open->OIDLock, bFalse); } } //------------------------------------------------------------------- _Use_decl_annotations_ VOID NPF_OidRequestComplete( NDIS_HANDLE FilterModuleContext, PNDIS_OID_REQUEST Request, NDIS_STATUS Status ) { POPEN_INSTANCE Open = (POPEN_INSTANCE) FilterModuleContext; PNDIS_OID_REQUEST OriginalRequest; PFILTER_REQUEST_CONTEXT Context; BOOLEAN bFalse = FALSE; TRACE_ENTER(); Context = (PFILTER_REQUEST_CONTEXT)(&Request->SourceReserved[0]); OriginalRequest = (*Context); // // This is an internal request // if (OriginalRequest == NULL) { TRACE_MESSAGE1(PACKET_DEBUG_LOUD, "Status= %p", Status); NPF_InternalRequestComplete(Open, Request, Status); TRACE_EXIT(); return; } FILTER_ACQUIRE_LOCK(&Open->OIDLock, bFalse); ASSERT(Open->PendingOidRequest == Request); Open->PendingOidRequest = NULL; FILTER_RELEASE_LOCK(&Open->OIDLock, bFalse); // // Copy the information from the returned request to the original request // switch(Request->RequestType) { case NdisRequestMethod: OriginalRequest->DATA.METHOD_INFORMATION.OutputBufferLength = Request->DATA.METHOD_INFORMATION.OutputBufferLength; OriginalRequest->DATA.METHOD_INFORMATION.BytesRead = Request->DATA.METHOD_INFORMATION.BytesRead; OriginalRequest->DATA.METHOD_INFORMATION.BytesNeeded = Request->DATA.METHOD_INFORMATION.BytesNeeded; OriginalRequest->DATA.METHOD_INFORMATION.BytesWritten = Request->DATA.METHOD_INFORMATION.BytesWritten; break; case NdisRequestSetInformation: OriginalRequest->DATA.SET_INFORMATION.BytesRead = Request->DATA.SET_INFORMATION.BytesRead; OriginalRequest->DATA.SET_INFORMATION.BytesNeeded = Request->DATA.SET_INFORMATION.BytesNeeded; break; case NdisRequestQueryInformation: case NdisRequestQueryStatistics: default: OriginalRequest->DATA.QUERY_INFORMATION.BytesWritten = Request->DATA.QUERY_INFORMATION.BytesWritten; OriginalRequest->DATA.QUERY_INFORMATION.BytesNeeded = Request->DATA.QUERY_INFORMATION.BytesNeeded; break; } (*Context) = NULL; NdisFreeCloneOidRequest(Open->AdapterHandle, Request); NdisFOidRequestComplete(Open->AdapterHandle, OriginalRequest, Status); TRACE_EXIT(); } </code></pre>
Tags
<c><windows><driver><function-calls><ndis>
Title
NDIS filter driver' FilterReceiveNetBufferLists handler isn't called
singulars
PostAcceptedAnswerId
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
PostParentId
1. This table or related slice is empty.
PostTypePostTypeId
1. PTQuestion
UserLastEditorUserId
1. UShsluoyz
UserOwnerUserId
1. UShsluoyz
plurals
PostLinksPostIdRelatedPostId
1. This table or related slice is empty.
PostLinksRelatedPostIdPostId
1. PL
 singulars
 LinkTypeLinkTypeId
 LTLinked
PostsAcceptedAnswerId
1. This table or related slice is empty.
PostsParentIdCreationDate
1. PO
 singulars
 PostTypePostTypeId
 PTAnswer
VotesPostIdCreationDate
1. VO
 singulars
 PostPostId
 PONDIS filter driver' FilterReceiveNetBufferLists handler isn't called
 UserUserId
 This table or related slice is empty.
 VoteTypeVoteTypeId
 VTApproveEditSuggestion
CommentsPostId

Querying!

Guidance

A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.