mirror of
https://github.com/mirkobrombin/raven.git
synced 2026-11-03 21:46:32 +00:00
Raymond Bennett
e6ca2018a9
QueryDosDevice names C: and Z: as volumes 1 and 24, and NtQueryObject names an open folder on drive C by that volume device, without a closing backslash. Assisted-by: Claude Code:claude-opus-5-5 AI-Scope: the test client and its registration (cherry picked from commit 701efce5592e7e3c91ade4e341863124fe3895f6)
46 lines
1.7 KiB
C
46 lines
1.7 KiB
C
#include <windows.h>
|
|
|
|
// Each drive is one volume device, the same for QueryDosDevice and for the name NtQueryObject gives an open file: drive C is
|
|
// \Device\HarddiskVolume1 and Z, after it in letter order, \Device\HarddiskVolume24. Returns 0, or the number of the check that failed.
|
|
typedef LONG NTSTATUS;
|
|
typedef struct {
|
|
USHORT Length, MaximumLength;
|
|
PWSTR Buffer;
|
|
} Text;
|
|
__declspec(dllimport) NTSTATUS NTAPI NtQueryObject(HANDLE, int, void *, ULONG, ULONG *);
|
|
|
|
static int same(const WCHAR *left, const WCHAR *right)
|
|
{
|
|
while (*left && *left == *right)
|
|
++left, ++right;
|
|
return *left == *right;
|
|
}
|
|
|
|
int raven_entry(void)
|
|
{
|
|
static WCHAR device[MAX_PATH], folder[MAX_PATH];
|
|
if (!QueryDosDeviceW(L"C:", device, MAX_PATH) || !same(device, L"\\Device\\HarddiskVolume1"))
|
|
return 1;
|
|
if (!QueryDosDeviceW(L"Z:", device, MAX_PATH) || !same(device, L"\\Device\\HarddiskVolume24"))
|
|
return 2;
|
|
const DWORD length = GetTempPathW(MAX_PATH, folder);
|
|
if (!length || folder[0] != L'C')
|
|
return 3;
|
|
HANDLE directory = CreateFileW(folder, GENERIC_READ, FILE_SHARE_READ | FILE_SHARE_WRITE, NULL, OPEN_EXISTING, FILE_FLAG_BACKUP_SEMANTICS, NULL);
|
|
if (directory == INVALID_HANDLE_VALUE)
|
|
return 4;
|
|
// The name is the volume device, then the path after the drive (without the closing backslash).
|
|
static unsigned char name[1024];
|
|
if (NtQueryObject(directory, 1, name, sizeof name, NULL) != 0)
|
|
return 5;
|
|
const Text *text = (const Text *)name;
|
|
static const WCHAR prefix[] = L"\\Device\\HarddiskVolume1\\";
|
|
for (int index = 0; prefix[index]; ++index)
|
|
if (index >= text->Length / 2 || text->Buffer[index] != prefix[index])
|
|
return 6;
|
|
if (text->Length / 2 != 23 + length - 3 || text->Buffer[22 + length - 3] == L'\\')
|
|
return 7;
|
|
CloseHandle(directory);
|
|
return 0;
|
|
}
|