Windows内核开发设备句柄无效的句柄值

Question

所以我目前正在关注本教程：关于内核开发的https://www.youtube.com/watch?v=VaIMgJz05wI&t=2s。当我尝试在用户模式程序中单击“打开设备”时，尽管我正确地映射了我的驱动程序并且我的设备链接是相同的，但devicehandle返回了无效的句柄值。

用户模式代码：

HANDLE devicehandle = NULL;

void CKMDFDriverTut1userDlg::OnBnClickedButton1()
{
    // TODO: Add your control notification handler code here
    devicehandle = CreateFile(L"\\\\.\\myDeviceLink123", GENERIC_ALL, 0, 0, OPEN_EXISTING, FILE_ATTRIBUTE_SYSTEM, 0);
    if (devicehandle == INVALID_HANDLE_VALUE) {
        MessageBox(L"not valid value", 0, 0);
        return;
    }
    //do your ting if valid
    MessageBox(L"valid value", 0, 0);
}

KernelMode：

DRIVER_INITIALIZE DriverEntry;

UNICODE_STRING DeviceName = RTL_CONSTANT_STRING(L"\\Device\\myDevice123");
UNICODE_STRING SymLinkName = RTL_CONSTANT_STRING(L"\\??\\myDeviceLink123");

PDEVICE_OBJECT DeviceObject = NULL;

VOID Unload(PDRIVER_OBJECT DriverObject) 
{
    IoDeleteSymbolicLink(&SymLinkName);
    IoDeleteDevice(DeviceObject);
    KdPrint(("Driver Unload \r\n"));
}

NTSTATUS DispatchPassThru(PDEVICE_OBJECT DeviceObject, PIRP Irp)
{
    PIO_STACK_LOCATION irpsp = IoGetCurrentIrpStackLocation(Irp);
    NTSTATUS status = STATUS_SUCCESS;

    switch (irpsp->MajorFunction)
    {
    case IRP_MJ_CREATE:
        KdPrint(("create request \r\n"));
        break;
    case IRP_MJ_CLOSE:
        KdPrint(("close resuest \r\n"));
        break;
    case IRP_MJ_READ:
        KdPrint(("read request \r\n"));
        break;
    case IRP_MJ_WRITE:
        KdPrint(("write resuest \r\n"));
        break;
    default:
        break;
    }

    Irp->IoStatus.Information = 0;
    Irp->IoStatus.Status = status;
    IoCompleteRequest(Irp, IO_NO_INCREMENT);
    return status;
}

NTSTATUS DriverEntry(PDRIVER_OBJECT DriverObject, PUNICODE_STRING RegistryPath
)
{

    NTSTATUS status = STATUS_SUCCESS;
    int i;
    DriverObject->DriverUnload = Unload;

    status = IoCreateDevice(DriverObject, 0, &DeviceName, FILE_DEVICE_UNKNOWN, FILE_DEVICE_SECURE_OPEN, FALSE, &DeviceObject);

    if (!NT_SUCCESS(status)) {
        KdPrint(("Creating device failed \r\n"));
        return status;
    }

    status = IoCreateSymbolicLink(&SymLinkName, &DeviceName);

    if (!NT_SUCCESS(status)) {
        KdPrint(("creating symbolic link failed \r\n"));
        IoDeleteDevice(DeviceObject);
        return status;
    }

    for (i = 0; i < IRP_MJ_MAXIMUM_FUNCTION; i++) {
        DriverObject->MajorFunction[i] = DispatchPassThru;
    }

    //DriverObject->MajorFunction[IRP_MJ_READ] = DispatchCustom;
    //DriverObject->MajorFunction[IRP_MJ_WRITE] = DispatchCustom1;

    KdPrint(("Driver load \r\n"));

    return status;
}

预期的输出是，当我单击Button1时，出现一个消息框，显示“有效值”，但是出现一个消息框，显示“无效值”，这表示我的设备句柄是错误的。非常感谢您的帮助，谢谢。

The device was successfully created

Answer 1

调试此类问题的第一步，我的建议是验证并确认您的设备已成功创建为对象并在命名空间中可见。一种方法是使用Microsoft的工具：WinObj。该工具位于https://docs.microsoft.com/en-us/sysinternals/downloads/winobj

Answer 2

当您访问\\。\区域中的设备时，表示按DosDevice名称进行访问。因此，必须在驱动程序侧的DosDevice区域中创建符号链接。

以下链接将为您提供帮助。

https://docs.microsoft.com/en-us/windows-hardware/drivers/kernel/introduction-to-ms-dos-device-names