Complete Compilation of nt4's NTFS source code (stable replacement of XP's original NTFS. sys

Author: weolar
Hour: 2009-06-01,08: 59

· Write by http://hi.baidu.com/weolar/blog
As you know, the file system should be relatively independent in the operating system, and you only need to provide corresponding interfaces for upper-layer use.
The same is true for Windows NTFS file systems,
In actual programming, Windows provides read/write interfaces for the upper-layer Io manager and cache manager in the form of dispatch routing,
Even the page breaks of the file system itself are implemented through its own read/write routines.
Therefore, in terms of design, its relative independence provides us with a lot of convenience for its drive.
I believe you have also read the NTFS source code of NT4.
But that source code is far from the current win 5.1 (NT4 should be written in 91 years ).
However, due to the independence of the file system, I think that the change in NTFS's own structure may not impede its transplantation.
This turns out to be the same. After I deduct the NT4 code, I can run it successfully under xp with only a few modifications, this may be very convenient for the majority of operating system enthusiasts ~

I thought it would be difficult to transplant to XP,
But in the actual process, I only modified a small part.
This includes a deadlock bug in the read operation. The cause of this bug is:
If pageio is used in ntfscommonread,
In addition, it is asynchronous read. Ms forgot to put the lock into the context of the completed function. The lock is nowhere to be released.
In addition, the NT4 Code lacks the ntfsfsdpnp routine.
This routine is called in ntcreatepagingfile-pppagepathassign.
I originally wanted to refer to XP, but it seems that it was not successful, So I simply returned STATUS_SUCCESS,
It seems that there are no major problems, and you can also switch pages ~
In other aspects, what is the NTFS file structure,
You do not need to modify it. So you may despise me. After all, I have not made any major changes,
Take such a question to attract everyone. But I think it's better than yingcracker,
This doll directly changed my ksbinsword to his title.
As for how to use the NTFS that can be debugged by source code, I don't have to say much about it,
For example, if you want to study how to forcibly delete a file, debug ntfsdeletefile.
With the code, it is much easier! The structure you want to view depends on. You can also modify the file to hide it.
Sys in the attachment cannot be run directly because the entry function has an int 3 breakpoint.
Below is:
We can see that the unique functions of NTFS such as hard links are also well supported.
Views: 1811
File Size: 117.3 kb "src =" http://bbs.pediy.com/attachment.php? Attachmentid = 26887 & D = 1243817038 "border =" 0 "alt =" Name: 3.jpg
Views: 1811
File Size: 117.3 kb ">
Uneshell.org account: u10365n