{"id":590,"date":"2011-08-03T19:03:13","date_gmt":"2011-08-03T11:03:13","guid":{"rendered":"http:\/\/blog.dynox.cn\/?p=590"},"modified":"2011-08-08T08:47:23","modified_gmt":"2011-08-08T00:47:23","slug":"%e6%96%87%e4%bb%b6%e7%b3%bb%e7%bb%9f%e5%bc%80%e5%8f%91%e4%b9%8b%e6%b3%a8%e5%86%8c%e7%af%87","status":"publish","type":"post","link":"https:\/\/blog.dynox.cn\/?p=590","title":{"rendered":"\u6587\u4ef6\u7cfb\u7edf\u5f00\u53d1\u4e4b\u6ce8\u518c\u7bc7"},"content":{"rendered":"

\u6587\u4ef6\u7cfb\u7edf\u662f\u4e00\u7c7b\u7279\u6b8a\u7684\u5185\u6838\u9a71\u52a8\uff0c\u4e3b\u8981\u8d1f\u8d23\u6570\u636e\u6d41\uff08\u5373\u6587\u4ef6\uff09\u7684\u7ba1\u7406\u3002\u7528\u6237\u7684\u89c6\u56fe\u6240\u663e\u793a\u51fa\u7684\u662f\u5404\u8272\u5404\u6837\u7684\u6587\u4ef6\u548c\u76ee\u5f55\uff0c\u4f46\u6700\u5e95\u5c42\u7684\u5b58\u50a8\u8bbe\u5907\u5219\u662f\u4ee5\u6247\u533a\u4e3a\u5355\u4f4d\u7684\u8fde\u7eed\u7684\u5b58\u50a8\u5b9e\u4f53\uff08\u5982\u786c\u76d8\uff0c\u5149\u76d8\u7b49\uff09\uff0c\u6587\u4ef6\u7cfb\u7edf\u4fbf\u5904\u4e8e\u4e8c\u8005\u4e2d\u95f4\uff0c\u8d1f\u8d23\u7ba1\u7406\u6587\u4ef6\/\u76ee\u5f55\u5728\u8bbe\u5907\u5b58\u50a8\u4e2d\u7684\u89e3\u6790\u4e0e\u5b9a\u4f4d\uff0c\u56e0\u6b64\u4e5f\u53ef\u4ee5\u5c06\u6587\u4ef6\u7cfb\u7edf\u770b\u4f5c\u662f\u4e00\u4e2a\u8f6c\u6362\u673a\u3002<\/p>

\u4e0d\u540c\u7c7b\u578b\u7684\u9a71\u52a8\u90fd\u6709\u4e0d\u540c\u7684\u529f\u80fd\u5b9e\u73b0\uff0c\u5e76\u4e14\u5728\u9a71\u52a8\u52a0\u8f7d\u65f6\u90fd\u8981\u5411\u64cd\u4f5c\u7cfb\u7edf\u6ce8\u518c\uff0c\u62a5\u544a\u5b83\u662f\u4e2a\u4ec0\u4e48\u7c7b\u578b\u7684\u9a71\u52a8\u53ca\u8981\u7ba1\u7406\u4ec0\u4e48\u6837\u7684\u8bbe\u5907\u7b49\u7b49\u3002\u5c31\u5982\u4e00\u4e2a\u7535\u996d\u7172\u9a71\u52a8\uff0c\u8981\u5b9e\u73b0\u7684\u529f\u80fd\u5927\u81f4\u6709\u5f00\u5173\u7535\u6e90\uff0c\u6e29\u63a7\u53ca\u5b9a\u65f6\u7b49\u529f\u80fd\uff0c\u52a0\u8f7d\u65f6\u53ef\u4ee5\u5411\u7cfb\u7edf\u6ce8\u518c\u4e3a\u70f9\u8c03\u7c7b\u8bbe\u5907\u7684\u9a71\u52a8\u3002\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\u4e5f\u5927\u81f4\u5982\u6b64\uff0c\u53ea\u662f\u529f\u80fd\u66f4\u590d\u6742\uff0c\u4e0e\u5185\u6838\u7684\u5173\u7cfb\u4e5f\u66f4\u7d27\u5bc6\uff0c\u7279\u522b\u662f\u548cVirtual Memory, Cache Management\u53caI\/O Subsystem\u7684\u5173\u7cfb\u548c\u4ea4\u4e92\u3002<\/p>

\u4e0d\u540c\u7684\u64cd\u4f5c\u7cfb\u7edf\u5bf9\u6587\u4ef6\u7cfb\u7edf\u7684\u529f\u80fd\u5b9e\u73b0\u6709\u4e0d\u540c\u7684\u89c4\u8303\u548c\u8981\u6c42\uff0c\u4f46\u4ece\u6700\u57fa\u672c\u7684\u9700\u6c42\u51fa\u53d1\uff0c\u5404\u79cd\u6587\u4ef6\u7cfb\u7edf\u7684\u529f\u80fd\u5927\u81f4\u4e00\u6837\uff0c\u53ea\u662f\u7cfb\u7edf\u7684\u63a5\u53e3\u4e0d\u540c\u800c\u5df2\u3002\u8fd9\u91cc\u53ea\u4ecb\u7ecdWindows\u548cLinux\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u6587\u4ef6\u7cfb\u7edf\u7684\u5f00\u53d1\u3002Windows\u5e73\u53f0\u4e0a\u79f0\u4e4b\u4e3aIFS (Installable File System)\uff0cLinux\u7cfb\u7edf\u5219\u4e3aVFS(Virtual Filesystem\uff0c\u4e5f\u53ef\u89e3\u91ca\u4e3aVirtual Filesystem Switch)\u3002<\/p>

\u6b64\u7bc7\u6587\u7ae0\u53ea\u7740\u91cd\u4e8e\u6587\u4ef6\u7cfb\u7edf\u7684\u6ce8\u518c\u8fc7\u7a0b\uff0c\u81f3\u4e8e\u5377\u7684\u6302\u8f7d(Mount)\u64cd\u4f5c\u5c06\u5728\u4ee5\u540e\u7684\u6587\u7ae0\u4e2d\u518d\u4f5c\u8bb2\u8ff0\u3002<\/p>

 <\/p>

Windows\u5e73\u53f0\u4e0a\u7684\u6587\u4ef6\u7cfb\u7edf\u6ce8\u518c\u8fc7\u7a0b\uff1a<\/h3>

Windows\u5185\u6838(I\/O Manager)\u63d0\u4f9b\u4e86\u4e00\u7ec4\u5185\u6838\u652f\u6301\u7a0b\u5e8f(kernel support routine)\u6765\u5b8c\u6210\u6587\u4ef6\u7cfb\u7edf\u7684\u6ce8\u518c\u548c\u79fb\u9664\u3002<\/p>

VOID
  IoRegisterFileSystem(
    IN OUT PDEVICE_OBJECT  DeviceObject   \/* Deviect object representitive of file system*\/
    );<\/font><\/p>

VOID
  IoUnregisterFileSystem(
    IN OUT PDEVICE_OBJECT  DeviceObject  \/* Deviect object representitive of file system*\/
    );<\/font><\/p>

\u6ce8\u518c\u8c03\u7528\u5f88\u7b80\u5355\uff0c\u4ee5Ext2Fsd\u4e3a\u4f8b\uff0cExt2Fsd\u9488\u5bf9\u5149\u76d8\u4ecb\u8d28\u548c\u78c1\u76d8\u4ecb\u8d28\u7684\u8bbe\u5907\u5206\u522b\u521b\u5efaCdromdevObject\u53caDiskdevobject\uff0c\u7136\u540e\u5206\u522b\u6ce8\u518c\u3002<\/p>

NTSTATUS
DriverEntry<\/strong> (
    IN PDRIVER_OBJECT   DriverObject,
    IN PUNICODE_STRING  RegistryPath
)
{
 <\/font><\/p>

    PDEVICE_OBJECT              DiskdevObject = NULL;
    PDEVICE_OBJECT              CdromdevObject = NULL;<\/font><\/p>

    ......<\/font><\/p>

    \/* create Ext2Fsd cdrom fs deivce *\/
    RtlInitUnicodeString(&DeviceName, CDROM_NAME); 
    Status = IoCreateDevice<\/strong>(  DriverObject,  0,  DeviceName,
                                                    <\/font>FILE_DEVICE_CD_ROM_FILE_SYSTEM,
<\/strong>                                                    0,  FALSE,  &CdromdevObject <\/strong>);<\/font><\/p>

    if (!NT_SUCCESS(Status)) {
        DEBUG(DL_ERR, ( "IoCreateDevice cdrom device object error.\\n"));
        goto errorout;
    }<\/font><\/p>

    \/* create Ext2Fsd disk fs deivce *\/
    RtlInitUnicodeString(&DeviceName, DEVICE_NAME);
    Status = IoCreateDevice<\/strong>(  DriverObject,  0, &DeviceName, 
                                                   FILE_DEVICE_DISK_FILE_SYSTEM<\/strong>, 
                                                   0,  FALSE,  &DiskdevObject <\/strong>);<\/font><\/p>

    if (!NT_SUCCESS(Status)) {
        DEBUG(DL_ERR, ( "IoCreateDevice disk deviceobject error.\\n"));
        goto errorout;
    }<\/font><\/p>

    ......<\/font><\/p>

    \/* register file system devices for disk and cdrom *\/
    <\/font>IoRegisterFileSystem(DiskdevObject); 
<\/strong>    ObReferenceObject(DiskdevObject);<\/font><\/p>

    IoRegisterFileSystem(CdromdevObject); <\/strong>
    ObReferenceObject(CdromdevObject);<\/font><\/p>

    ......<\/font><\/p>

    return status;
}<\/font><\/p>

\u4f60\u6216\u8bb8\u4f1a\u8ff7\u60d1\u4e3a\u4ec0\u4e48Ext2Fsd\u4f1a\u6ce8\u518c\u4e24\u6b21\uff08\u9488\u5bf9cdrom\u8bbe\u5907\u548cdisk\u8bbe\u5907\uff09\uff1f\u4e0b\u9762\u6211\u4eec\u5c31\u6765\u63a2\u8ba8IoRegisterFileSystem\u7684\u5185\u90e8\u5b9e\u73b0\u3002<\/p>

Windows I\/O Manager \u7ba1\u7406\u77404\u4e2a\u961f\u5217\uff1a\u6bcf\u4e2a\u961f\u5217\u90fd\u7ba1\u7406\u4e0d\u540c\u7c7b\u522b\u7684\u6240\u6709\u6587\u4ef6\u7cfb\u7edf\uff1a<\/p>

\u4ee5Windows 7 X64\u4e3a\u4f8b\uff1a<\/font><\/p>

0: kd> x nt!iop*FileSystemQueueHead
fffff800`04076200 nt!IopCdRomFileSystemQueueHead = <no type information>
fffff800`04076210 nt!IopDiskFileSystemQueueHead = <no type information>
fffff800`040761e0 nt!IopTapeFileSystemQueueHead = <no type information>
fffff800`040761f0 nt!IopNetworkFileSystemQueueHead = <no type information><\/font><\/p>

\u901a\u8fc7\u540d\u5b57\u5c31\u80fd\u770b\u51fa\u6bcf\u4e2a\u961f\u5217\u6240\u7ba1\u7406\u7684\u6587\u4ef6\u7cfb\u7edf\u7684\u7c7b\u578b\uff0c\u6240\u4ee5\u5f53I\/O Manager\u65b0\u53d1\u73b0\u67d0\u4e00\u7c7b\u578b\u5b58\u50a8\u8bbe\u5907\u65f6\uff0c\u5c31\u53ea\u4ece\u76f8\u5e94\u7684\u961f\u5217\u4e2d\u4f9d\u6b21\u8c03\u7528\u961f\u5217\u4e0a\u7684\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\u6765\u8bc6\u522b\u5b58\u50a8\u8bbe\u5907\u4e0a\u7684\u6587\u4ef6\u5377\uff0c\u800c\u4e0d\u662f\u8c03\u7528\u6ce8\u518c\u4e8e\u7cfb\u7edf\u4e2d\u7684\u6240\u6709\u6587\u4ef6\u7cfb\u7edf\u3002<\/p>

Ext2Fsd\u9664\u4e86\u652f\u6301\u78c1\u76d8\u4ecb\u8d28\u8bbe\u5907\u5916\uff0c\u8fd8\u53ef\u4ee5\u652f\u6301\u5149\u76d8\u8bbe\u5907\uff0c\u6240\u4ee5\u8981\u9488\u5bf9\u4e0d\u540c\u7684\u50a8\u5b58\u8bbe\u5907\u7c7b\u578b\u5206\u522b\u6ce8\u518c\u3002<\/p>

\u5728Windbg\u4e2d\u53ef\u4ee5\u5f88\u65b9\u4fbf\u5730\u7f57\u5217\u51fa\u6240\u6709\u6302\u8f7d\u7684\u6587\u4ef6\u7cfb\u7edf\uff0c\u4ee5IopDiskFileSystemQueueHead\u4e3a\u4f8b\uff1a<\/p>

0: kd> !list "-t nt!_LIST_ENTRY.Flink -e -x \\"dd @$extret l4;  !devobj @$extret-0x50\\" poi(nt!IopDiskFileSystemQueueHead<\/strong>)"
dd @$extret l4;  !devobj @$extret-0x50
fffffa80`04839450  044e3d50 fffffa80 04076210 fffff800
Device object (fffffa8004839400) is for:
 Ext2Fsd \\FileSystem\\Ext2Fsd DriverObject fffffa800482d210
<\/strong>Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000040
Dacl fffff9a100324650 DevExt 00000000 DevObjExt fffffa8004839550
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
AttachedDevice (Upper) fffffa8004843040 \\FileSystem\\FltMgr
Device queue is not busy.<\/font><\/p>

dd @$extret l4;  !devobj @$extret-0x50
fffffa80`044e3d50  044e22b0 fffffa80 04839450 fffffa80
Device object (fffffa80044e3d00) is for:
ExFatRecognizer \\FileSystem\\Fs_Rec DriverObject fffffa80044e2060<\/strong>
Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000040
Dacl fffff9a100324650 DevExt fffffa80044e3e50 DevObjExt fffffa80044e3e60
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
Device queue is not busy.<\/font><\/p>

dd @$extret l4;  !devobj @$extret-0x50
fffffa80`044e22b0  044e24e0 fffffa80 044e3d50 fffffa80
Device object (fffffa80044e2260) is for:
FatDiskRecognizer \\FileSystem\\Fs_Rec DriverObject fffffa80044e2060<\/strong>
Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000040
Dacl fffff9a100324650 DevExt fffffa80044e23b0 DevObjExt fffffa80044e23c0
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
Device queue is not busy.<\/font><\/p>

dd @$extret l4;  !devobj @$extret-0x50
fffffa80`044e24e0  0448d7f0 fffffa80 044e22b0 fffffa80
Device object (fffffa80044e2490) is for:
UdfsDiskRecognizer \\FileSystem\\Fs_Rec DriverObject fffffa80044e2060<\/strong>
Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000040
Dacl fffff9a100324650 DevExt fffffa80044e25e0 DevObjExt fffffa80044e25f0
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
Device queue is not busy.<\/font><\/p>

dd @$extret l4;  !devobj @$extret-0x50
fffffa80`0448d7f0  036660b0 fffffa80 044e24e0 fffffa80
Device object (fffffa800448d7a0) is for:
Ntfs \\FileSystem\\Ntfs DriverObject fffffa800448d9c0<\/strong>
Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000040
Dacl fffff9a100324650 DevExt 00000000 DevObjExt fffffa800448d8f0
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
AttachedDevice (Upper) fffffa80044d2040 \\FileSystem\\FltMgr
Device queue is not busy.<\/font><\/p>

dd @$extret l4;  !devobj @$extret-0x50
fffffa80`036660b0  04076210 fffff800 0448d7f0 fffffa80
Device object (fffffa8003666060) is for:
RawDisk \\FileSystem\\RAW DriverObject fffffa8003667770<\/strong>
Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000050
Dacl fffff9a100324650 DevExt 00000000 DevObjExt fffffa80036661b0
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
AttachedDevice (Upper) fffffa800371b860 \\FileSystem\\FltMgr
Device queue is not busy.<\/font><\/p>

\u53ef\u4ee5\u770b\u51fa\uff0c\u6700\u665a\u6ce8\u518c\u7684\u6587\u4ef6\u7cfb\u7edfExt2Fsd\u5219\u88ab\u653e\u5728\u4e86\u53cc\u5411\u94fe\u8868\u7684\u94fe\u9996\u4f4d\u7f6e\uff0c\u5373\u7b2c\u4e00\u4e2a\uff1b\u6700\u65e9\u6ce8\u518c\u7684Ntfs\u5219\u662f\u5728\u94fe\u5c3e\u3002\u4e0d\u8fc7\u6709\u79cd\u4f8b\u5916\uff0c\u5982\u679c\u8bbe\u5907\u88ab\u6307\u5b9aDO_LOW_PRIORITY_FILESYSTEM\u6807\u5fd7\uff0cIoRegisterFileSystem\u4f1a\u5c06\u6b64\u6587\u4ef6\u7cfb\u7edf\u6302\u8f7d\u81f3\u94fe\u8868\u5c3e\u90e8\u3002<\/p>

\u5728Ntfs\u53caExt2Fsd\u4e4b\u95f4\uff0c\u8fd8\u6709Windows\u7cfb\u7edf\u672c\u8eab\u63d0\u4f9b\u76843\u4e2aFile system recognizer\uff0c\u5747\u5728\u6a21\u5757Fs_Rec\uff08\u5373 fs_rec.sys\uff09\u4e2d\u5b9e\u73b0\u3002Recognizer\u662f\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\u4e2d\u6bd4\u8f83\u7279\u6b8a\u7684\u4e00\u7c7b\uff0c\u5b83\u7684\u529f\u80fd\u5f88\u7b80\u5355\uff1a\u5982\u679c\u53d1\u73b0\u6709\u5b83\u80fd\u8bc6\u522b\u7684\u5377\u8bbe\u5907\uff0c\u5b83\u5219\u4f1a\u52a0\u8f7d\u76f8\u5e94\u7684\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\u6765\u6302\u8f7d\u6b64\u5377\u5e76\u5378\u8f7d\u81ea\u5df1\u3002Recognizer\u4e4b\u6240\u4ee5\u5b58\u5728\u7684\u552f\u4e00\u76ee\u7684\u5c31\u662f\u8282\u7701\u5185\u5b58\u8d44\u6e90\u3002Recognizer\u9a71\u52a8\u76f8\u6bd4\u5176\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\uff0c\u4ee3\u7801\u91cf\u8981\u5c0f\u5f97\u591a\uff0c\u6bd4\u5982\uff0c\u96c6\u591a\u4e2aRecognizer\u4e0e\u4e00\u8eab\u7684fs_rec.sys\u6a21\u5757\u53ea\u670916K\uff0c\u800cexfat\u53cafastfat\u9a71\u52a8\u5728100K-200K\u4e4b\u95f4\uff0cNtfs\u66f4\u67091.5M\u4e4b\u5927\u3002\u5982\u679c\u76f4\u63a5\u52a0\u8f7d\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\uff0c\u800c\u5b9e\u9645\u7cfb\u7edf\u4e2d\u53c8\u6ca1\u6709\u6b64\u6587\u4ef6\u7cfb\u7edf\u6240\u7ba1\u7406\u7684\u50a8\u5b58\u8bbe\u5907\u7684\u8bdd\uff0c\u90a3\u9a71\u52a8\u7a0b\u5e8f\u6240\u5360\u7528\u7684\u5185\u5b58\u5c31\u5b8c\u5168\u662f\u8d44\u6e90\u7684\u6d6a\u5e9f\u3002<\/p>

\u4e0b\u9762\u505a\u4e2a\u5b9e\u9a8c\uff0c\u63d2\u5165\u4e00\u4e2aFAT32\u683c\u5f0f\u7684SD\u5361\u540e\uff0c\u518d\u6765\u89c2\u5bdf\u4e00\u4e0bIopDiskFileSystemQueueHead\u94fe\u7684\u53d8\u5316\uff1a<\/p>

0: kd> !list "-t nt!_LIST_ENTRY.Flink -e -x \\"dd @$extret l4;  !devobj @$extret-0x50\\" poi(nt!IopDiskFileSystemQueueHead<\/strong>)"
dd @$extret l4;  !devobj @$extret-0x50
fffffa80`048428d0  04839450 fffffa80 04076210 fffff800
Device object (fffffa8004842880) is for:
Fat \\FileSystem\\fastfat DriverObject fffffa8005809e70<\/u><\/strong>
Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000040
Dacl fffff9a100324650 DevExt 00000000 DevObjExt fffffa80048429d0
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
AttachedDevice (Upper) fffffa80047a6870 \\FileSystem\\FltMgr
Device queue is not busy.<\/font><\/p>

dd @$extret l4;  !devobj @$extret-0x50
fffffa80`04839450  044e3d50 fffffa80 048428d0 fffffa80
Device object (fffffa8004839400) is for:
 Ext2Fsd \\FileSystem\\Ext2Fsd DriverObject fffffa800482d210
<\/strong>Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000040
Dacl fffff9a100324650 DevExt 00000000 DevObjExt fffffa8004839550
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
AttachedDevice (Upper) fffffa8004843040 \\FileSystem\\FltMgr
Device queue is not busy.<\/font><\/p>

dd @$extret l4;  !devobj @$extret-0x50
fffffa80`044e3d50  044e24e0 fffffa80 04839450 fffffa80
Device object (fffffa80044e3d00) is for:
 ExFatRecognizer \\FileSystem\\Fs_Rec DriverObject fffffa80044e2060
<\/strong>Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000040
Dacl fffff9a100324650 DevExt fffffa80044e3e50 DevObjExt fffffa80044e3e60
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
Device queue is not busy.<\/font><\/p>

dd @$extret l4;  !devobj @$extret-0x50
fffffa80`044e24e0  0448d7f0 fffffa80 044e3d50 fffffa80
Device object (fffffa80044e2490) is for:
 UdfsDiskRecognizer \\FileSystem\\Fs_Rec DriverObject fffffa80044e2060
<\/strong>Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000040
Dacl fffff9a100324650 DevExt fffffa80044e25e0 DevObjExt fffffa80044e25f0
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
Device queue is not busy.<\/font><\/p>

dd @$extret l4;  !devobj @$extret-0x50
fffffa80`0448d7f0  036660b0 fffffa80 044e24e0 fffffa80
Device object (fffffa800448d7a0) is for:
 Ntfs \\FileSystem\\Ntfs DriverObject fffffa800448d9c0
<\/strong>Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000040
Dacl fffff9a100324650 DevExt 00000000 DevObjExt fffffa800448d8f0
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
AttachedDevice (Upper) fffffa80044d2040 \\FileSystem\\FltMgr
Device queue is not busy.<\/font><\/p>

dd @$extret l4;  !devobj @$extret-0x50
fffffa80`036660b0  04076210 fffff800 0448d7f0 fffffa80
Device object (fffffa8003666060) is for:
 RawDisk \\FileSystem\\RAW DriverObject fffffa8003667770
<\/strong>Current Irp 00000000 RefCount 1 Type 00000008 Flags 00000050
Dacl fffff9a100324650 DevExt 00000000 DevObjExt fffffa80036661b0
ExtensionFlags (0x00000800) 
                             Unknown flags 0x00000800
AttachedDevice (Upper) fffffa800371b860 \\FileSystem\\FltMgr
Device queue is not busy.<\/font><\/p>

FatDiskRecognizer\u53d1\u73b0FAT32\u683c\u5f0f\u7684\u6587\u4ef6\u5377\u540e\u4f1a\u52a0\u8f7dfastfat\u9a71\u52a8\uff0c\u7136\u540e\u5c06\u81ea\u5df1\u5378\u8f7d\uff1a<\/p>

\u65b0\u589e\u52a0\u7684Fat\u8bbe\u5907\uff1a<\/p>

        Fat \\FileSystem\\fastfat DriverObject fffffa8005809e70<\/strong><\/p>

\u6d88\u5931\u7684FatDiskRecognizer:<\/p>

        FatDiskRecognizer \\FileSystem\\Fs_Rec DriverObject fffffa80044e2060<\/strong><\/p>

Windows I\/O Manager\u8fd8\u63d0\u4f9b\u6587\u4ef6\u7cfb\u7edf\u6ce8\u518c\u4e8b\u4ef6\u7684\u901a\u77e5\uff0c\u8fd9\u90e8\u5206\u5c31\u662f\u5728IoRegisterFileSystem\u51fd\u6570\u4e2d\u5b9e\u73b0\u7684\u3002IoRegisterFileSystem\u5728\u5c06\u6587\u4ef6\u7cfb\u7edf\u7684Device Object\u6302\u5165\u76f8\u5e94\u7684\u961f\u5217\u4e2d\u4ee5\u540e\uff0c\u8fd8\u4f1a\u8c03\u7528\u6240\u6709\u7684NotificationRoutine\u4ee5\u901a\u77e5\u5176\u6ce8\u518c\u8005\u3002\uff08\u6ce8\u518c\u8005\uff0c\u5373\u5bf9\u6b64\u4e8b\u4ef6\u611f\u5174\u8da3\u7684\u9a71\u52a8\u3002\u4e00\u822c\u6765\u8bf4\uff0c\u5bf9\u6587\u4ef6\u7cfb\u7edf\u6ce8\u518c\u611f\u5174\u8da3\u7684\u53ea\u6709file system filter driver\u3002\uff09Windows \u5185\u6838\u63d0\u4f9b\u4e863\u4e2a\u51fd\u6570\u7528\u4e8e\u6587\u4ef6\u7cfb\u7edf\u6ce8\u518c\u4e8b\u4ef6\u7684\u901a\u77e5\uff1a<\/p>

NTSTATUS
  IoRegisterFsRegistrationChange(
    IN PDRIVER_OBJECT  DriverObject,
    IN PDRIVER_FS_NOTIFICATION  DriverNotificationRoutine
    );<\/font><\/p>

NTSTATUS
  IoRegisterFsRegistrationChangeEx(
    IN PDRIVER_OBJECT  DriverObject,
    IN PDRIVER_FS_NOTIFICATION  DriverNotificationRoutine
    );  \/* available from Win2k SP4 and its successor OS *\/

VOID 
  IoUnregisterFsRegistrationChange(
    IN PDRIVER_OBJECT  DriverObject,
    IN PDRIVER_FS_NOTIFICATION  DriverNotificationRoutine
    );<\/font><\/p>

\u5173\u4e8e\u8fd9\u4e09\u4e2a\u51fd\u6570\u7684\u4f7f\u7528\u8bf7\u53c2\u9605DDK\u6587\u6863\uff0c\u5728\u6b64\u4e0d\u505a\u71ac\u8ff0\u3002<\/p>

 <\/p>

Linux\u5e73\u53f0\u4e0a\u7684\u6587\u4ef6\u7cfb\u7edf\u6ce8\u518c\u8fc7\u7a0b\uff1a<\/h3>

Linux\u5185\u6838(VFS\uff1aVirtual Filesystem)\u63d0\u4f9b\u4e86\u4e24\u4e2a\u652f\u6301\u4f8b\u7a0b\u5206\u522b\u8fdb\u884c\u6587\u4ef6\u7cfb\u7edf\u7684\u6ce8\u518c\u548c\u79fb\u9664\uff1a<\/p>

int register_filesystem(struct file_system_type * fs)
int unregister_filesystem(struct file_system_type * fs)<\/font><\/p>

struct file_system_type\u7ed3\u6784\u5c31\u4ee3\u8868\u4e00\u4e2a\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\uff0c\u6b64\u7ed3\u6784\u7531\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\u7a0b\u5e8f\u5404\u81ea\u5b9a\u4e49\uff0c\u5176\u7ed3\u6784\u4f53\u5982\u4e0b\uff1a<\/p>

struct file_system_type {
    const char *name;
    int fs_flags;
    int (*get_sb) (struct file_system_type *, int,
               const char *, void *, struct vfsmount *);
    void (*kill_sb) (struct super_block *);
    struct module *owner;
    struct file_system_type * next;
    struct list_head fs_supers;<\/font><\/p>

    struct lock_class_key s_lock_key;
    struct lock_class_key s_umount_key;<\/font><\/p>

    struct lock_class_key i_lock_key;
    struct lock_class_key i_mutex_key;
    struct lock_class_key i_mutex_dir_key;
    struct lock_class_key i_alloc_sem_key;
};<\/font><\/p>

\u7ed3\u6784\u6210\u5458\u8bf4\u660e\uff1a<\/p>

  • name\uff1a<\/strong> \u6587\u4ef6\u7cfb\u7edf\u540d\u79f0\uff1a\u5982ext3\uff0cext4\uff0cnfs\uff0cnfs4\uff0clustre\u7b49 <\/font><\/li>
  • fs_flags:<\/strong> \u6587\u4ef6\u7cfb\u7edf\u76f8\u5173\u6807\u5fd7\u4f4d\uff0c\u76ee\u524d\u6709\u5982\u4e0b\u53d6\u503c\uff1a
    #define FS_REQUIRES_DEV 1            \/* \u6b64\u6587\u4ef6\u7cfb\u7edf\u9002\u7528\u4e8e\u5377\u8bbe\u5907\uff0c\u5982\u786c\u76d8\u5206\u533a\u7b49
                                                                    \u4e0d\u9002\u7528\u4e8e\u7f51\u7edc\u6587\u4ef6\u7cfb\u7edf *\/
    #define FS_BINARY_MOUNTDATA 2  \/* \u6b64\u6587\u4ef6\u7cfb\u7edf\u6709\u5355\u72ec\u7684mount tool, \u53c2\u6570\u7684\u4f20\u9012\u6709
                                                                    \u81ea\u5df1\u7684\u683c\u5f0f\uff0c\u6b64\u6807\u5fd7\u76ee\u524d\u7528\u4e8ecoda, FUSE, nfs,
                                                                    smbfs, ncpfs *\/
    #define FS_HAS_SUBTYPE 4                \/* \u4ec5 FUSE\u4f7f\u7528\uff0c\u652f\u6301\u591a\u79cduser mode\u6587\u4ef6\u7cfb\u7edf *\/
    #define FS_REVAL_DOT    16384         \/* \u4ec5NFS\u4f7f\u7528\uff0c"."\u53ca".."\u4f1a\u8fc7\u671f\u6216\u5931\u6548  *\/
    #define FS_RENAME_DOES_D_MOVE    32768    \/* \u4ec5NFS\u4f7f\u7528\uff0c\u6587\u4ef6\u7cfb\u7edf\u5728.rename\u64cd\u4f5c
                                                                                      \u5df2\u5904\u7406 d_move() \u60c5\u5f62 *\/ <\/font><\/li>
  • get_sb<\/strong>:  <\/strong>\u6302\u8f7d\u65b0\u5377\u65f6\u7684\u56de\u8c03\u51fd\u6570\uff0c\u7531VFS\u8c03\u7528\uff0c\u591a\u6570\u60c5\u51b5\u662f\u7528\u6237\u8fdb\u884c\u4e86mount(2)\u64cd\u4f5c <\/font><\/li>
  • kill_sb<\/strong>:   \u5378\u8f7d\u5df2\u6302\u8f7d\u5377\u65f6\u7684\u56de\u8c03\u51fd\u6570\uff0c\u4e00\u822c\u7531\u7528\u6237\u8fdb\u884cumount(2)\u64cd\u4f5c\u800c\u89e6\u53d1 <\/font><\/li>
  • owner:<\/strong>   \u6587\u4ef6\u7cfb\u7edf\u6240\u5728\u6a21\u5757(module) <\/font><\/li>
  • next<\/strong>:      \u4f9bVFS\u4f7f\u7528\uff0c\u7ec4\u6210\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\u7684\u5355\u5411\u5217\u8868 <\/font><\/li>
  • fs_supers<\/strong>: \u4f9bVFS\u4f7f\u7528\uff0c\u53cc\u5411\u94fe\u8868\u94fe\u9996\uff0c\u7528\u4ee5\u7ba1\u7406\u6b64\u6587\u4ef6\u7cfb\u7edf\u6240\u8bc6\u522b\u7684\u6240\u6709\u7684\u6587\u4ef6\u5377\u7684
                    \u8d85\u7ea7\u5757( super_block\uff09 <\/font><\/li>
  • s_lock_key \u2026 i_alloc_sem_key: \u7528\u4e8elockdep\u68c0\u67e5<\/font> <\/li> <\/ul>

    \u770b\u4e00\u4e0bkernel\u4e2dext4\u7684\u76f8\u5173\u4ee3\u7801\uff1a<\/p>

    static struct file_system_type ext4_fs_type<\/strong> = {
        .owner        = THIS_MODULE,
        .name        = "ext4",
        .get_sb        = ext4_get_sb,
        .kill_sb    = kill_block_super,
        .fs_flags    = FS_REQUIRES_DEV,
    };<\/font><\/p>

    \/* \u5982\u679cext3\u6a21\u5757\u6ca1\u88ab\u5b9a\u4e49\uff0cext4\u6587\u4ef6\u7cfb\u7edf\u5c06\u9ed8\u8ba4\u63a5\u7ba1ext3\u6587\u4ef6\u5377 *\/
    #if !defined(CONTIG_EXT3_FS) && !defined(CONFIG_EXT3_FS_MODULE) && defined(CONFIG_EXT4_USE_FOR_EXT23)

    static struct file_system_type ext3_fs_type<\/strong> = {
        .owner        = THIS_MODULE,
        .name        = "ext3",
        .get_sb        = ext4_get_sb,
        .kill_sb    = kill_block_super,
        .fs_flags    = FS_REQUIRES_DEV,
    };<\/font><\/p>

    static inline void register_as_ext3(void)
    {
        int err = register_filesystem(&ext3_fs_type);
        if (err)
            printk(KERN_WARNING
                   "EXT4-fs: Unable to register as ext3 (%d)\\n", err);
    }<\/font><\/p>

    static inline void unregister_as_ext3(void)
    {
        unregister_filesystem(&ext3_fs_type);
    }
    MODULE_ALIAS("ext3");
    #endif<\/font><\/p>

    ext4\u6a21\u5757\u7684\u521d\u59cb\u5316\u51fd\u6570(init_ext4_fs)\u4f1a\u8c03\u7528register_filesystem\u6765\u6ce8\u518c\u6587\u4ef6\u7cfb\u7edf\u4e3aext4.<\/p>

    static int __init init_ext4_fs<\/strong>(void)
    {
        int err;<\/font><\/p>

    ......<\/font><\/p>

        register_as_ext3<\/strong>();
        err = register_filesystem(&ext4_fs_type)<\/strong>;
        if (err)
            goto out;
    ......<\/font><\/p>

            return err;
    }<\/font><\/p>

    \u7136\u540e\u518d\u7814\u7a76\u4e00\u4e0bregister_filesystem\u53caunregister_filesystem\u7684\u4ee3\u7801\uff08$kernel\/vfs\/filesystems.c\uff09:<\/p>

    static struct file_system_type *file_systems;
    static DEFINE_RWLOCK(file_systems_lock);<\/font><\/p>

    \/**
    *    register_filesystem - register a new filesystem
    *    @fs: the file system structure
    *
    *    Adds the file system passed to the list of file systems the kernel
    *    is aware of for mount and other syscalls. Returns 0 on success,
    *    or a negative errno code on an error.
    *
    *    The &struct file_system_type that is passed is linked into the kernel
    *    structures and must not be freed until the file system has been
    *    unregistered.
    *\/
     
    int register_filesystem(struct file_system_type * fs)
    {
        int res = 0;
        struct file_system_type ** p;<\/font><\/p>

        BUG_ON(strchr(fs->name, '.'));
        if (fs->next)
            return -EBUSY;
        INIT_LIST_HEAD(&fs->fs_supers);
        write_lock(&file_systems_lock);
        p = find_filesystem(fs->name, strlen(fs->name));
        if (*p)
            res = -EBUSY;
        else
            *p = fs;
        write_unlock(&file_systems_lock);
        return res;
    }<\/font><\/p>

    EXPORT_SYMBOL(register_filesystem);<\/font><\/p>

    static struct file_system_type **find_filesystem(const char *name, unsigned len)
    {
        struct file_system_type **p;
        for (p=&file_systems; *p; p=&(*p)->next)
            if (strlen((*p)->name) == len &&
                strncmp((*p)->name, name, len) == 0)
                break;
        return p;
    }<\/font><\/p>

    \/**
    *    unregister_filesystem - unregister a file system
    *    @fs: filesystem to unregister
    *
    *    Remove a file system that was previously successfully registered
    *    with the kernel. An error is returned if the file system is not found.
    *    Zero is returned on a success.
    *   
    *    Once this function has returned the &struct file_system_type structure
    *    may be freed or reused.
    *\/
     
    int unregister_filesystem(struct file_system_type * fs)
    {
        struct file_system_type ** tmp;<\/font><\/p>

        write_lock(&file_systems_lock);
        tmp = &file_systems;
        while (*tmp) {
            if (fs == *tmp) {
                *tmp = fs->next;
                fs->next = NULL;
                write_unlock(&file_systems_lock);
                return 0;
            }
            tmp = &(*tmp)->next;
        }
        write_unlock(&file_systems_lock);
        return -EINVAL;
    }<\/font><\/p>

    \u901a\u8fc7\u4ee3\u7801\u53ef\u4ee5\u5f97\u77e5\uff0c\u4e0eWindows\u5bf9\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\u7684\u7ba1\u7406\u4e0d\u540c\u7684\u662f\uff0cLinux\u53ea\u7ef4\u62a4\u4e86\u4e00\u4e2a\u5168\u5c40\u7684\u5355\u5411\u5217\u8868\u6765\u7ba1\u7406\u6240\u6709\u7684\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\uff0c\u800c\u4e14\u65b0\u6587\u4ef6\u7cfb\u7edf\u9ed8\u8ba4\u88ab\u94fe\u63a5\u81f3\u94fe\u8868\u672b\u5c3e\u3002<\/p>

    Linux\u4e0d\u5141\u8bb8\u540c\u540d\u7684\u6587\u4ef6\u7cfb\u7edf\u518d\u6b21\u88ab\u6ce8\u518c\uff0cregister_filesystem()\u6bcf\u6b21\u90fd\u4f1a\u8c03\u7528find_filesystem()\u4ee5\u68c0\u67e5\u540c\u540d\u7684\u6587\u4ef6\u7cfb\u7edf\u662f\u4e0d\u662f\u5df2\u5b58\u5728\u3002Windows\u5e73\u53f0\u4e0a\u56e0\u4e3a\u662f\u4ee5DeviceObject\u4e3a\u4e3b\u4f53\u8fdb\u884c\u6ce8\u518c\u7684\uff0c\u5e76\u4e0d\u5b58\u5728\u6b64\u9879\u7684\u68c0\u6d4b\uff0c\u6240\u4ee5Windows\u5141\u8bb8\u591a\u4e2a\u540c\u4e00\u5377\u7c7b\u578b\u7684\u6587\u4ef6\u7cfb\u7edf\u9a71\u52a8\u7684\u52a0\u8f7d\uff0c\u4f46\u53ea\u6709\u6700\u665a\u52a0\u8f7d\u7684\u9a71\u52a8\u624d\u6709\u6548\uff08\u9ed8\u8ba4\u65e0DO_LOW_PRIORITY_FILESYSTEM\u6807\u5fd7\uff09\u3002<\/p><\/div>","protected":false},"excerpt":{"rendered":"

    \u6587\u4ef6\u7cfb\u7edf\u662f\u4e00\u7c7b\u7279\u6b8a\u7684\u5185\u6838\u9a71\u52a8\uff0c\u4e3b\u8981\u8d1f\u8d23\u6570\u636e\u6d41\uff08\u5373\u6587\u4ef6\uff09\u7684\u7ba1\u7406\u3002\u7528\u6237\u7684\u89c6\u56fe\u6240\u663e\u793a\u51fa\u7684\u662f\u5404\u8272\u5404\u6837\u7684\u6587\u4ef6\u548c\u76ee\u5f55\uff0c\u4f46\u6700 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[9],"tags":[279,281,282,278,280],"views":2480,"_links":{"self":[{"href":"https:\/\/blog.dynox.cn\/index.php?rest_route=\/wp\/v2\/posts\/590"}],"collection":[{"href":"https:\/\/blog.dynox.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.dynox.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.dynox.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.dynox.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=590"}],"version-history":[{"count":6,"href":"https:\/\/blog.dynox.cn\/index.php?rest_route=\/wp\/v2\/posts\/590\/revisions"}],"predecessor-version":[{"id":598,"href":"https:\/\/blog.dynox.cn\/index.php?rest_route=\/wp\/v2\/posts\/590\/revisions\/598"}],"wp:attachment":[{"href":"https:\/\/blog.dynox.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=590"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.dynox.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=590"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.dynox.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=590"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}