天天看點

字首

文字都是從Programming WDM中摘出來的,是以算轉載了吧

I/O管理器(Io字首) 包含許多驅動程式可以使用的服務函數,

程序結構子產品(Ps字首) 建立并管理核心模式線程。普通的WDM驅動程式應使用一個獨立的線程來循檢無中斷生成能力的裝置。

記憶體管理器(Mm字首) 控制頁表,頁表定義了虛拟記憶體到實體記憶體之間的映射。

executive (Ex字首) 提供堆管理和同步服務。

對象管理器(Ob字首) 集中控制Windows NT中的各種資料對象。WDM驅動程式僅需要對象管理器維護對象的參考計數,以防止對象被意外删除。

安全參考螢幕(Se字首) 使檔案系統驅動程式執行安全檢測。I/O請求到達WDM驅動程式前已經做完了安全檢測,是以本書不讨論這些函數。

運作時間庫部件(Rtl字首) 包含工具例程,例如清單和串管理例程,核心模式驅動程式可以用這些例程來替代正常的ANSI标準例程。大部分例程可以從其名字上直接看出它的功能。

Win32子系統存在于使用者模式中,是以使用者模式中的應用程式可以容易地調用其例程。為了友善,Windows NT在核心模式中實作了一些有Zw字首名的函數,這些函數可以使驅動程式調用Win32子系統例程。Windows 2000 DDK中僅暴露一少部分這樣的函數給驅動程式使用,包括通路檔案和系統資料庫的函數。我将在本章讨論這些函數。

Windows NT核心(Ke字首) 所有多線程和多處理器的低級同步活動都發生在核心中(第一版,驅網翻譯)

The I/O Manager (prefix Io) contains many service functions that drivers use,The Process Structure module (prefix Ps) creates and manages kernel-mode threads. An ordinary WDM driver might use an independent thread to repeatedly poll a device incapable of generating interrupts, and for other purposes.

The Memory Manager (prefix Mm) controls the page tables that define the mapping of virtual addresses onto physical memory.

The executive (prefix Ex) supplies heap management and synchronization services.

The Object Manager (prefix Ob) provides centralized control over the many data objects with which Windows XP works. WDM drivers rely on the Object Manager for keeping a reference count that prevents an object from disappearing while someone is still using it and to convert object handles to pointers to the objects the handles represent.

The Security Reference Monitor (prefix Se) allows file system drivers to perform security checks. Someone else has usually dealt with security concerns by the time an I/O request reaches a WDM driver, so I won’t be discussing these functions in this book.

The so-called run-time library component (prefix Rtl) contains utility routines, such as list and string-management routines, that kernel-mode drivers can use instead of regular ANSI-standard library routines. For the most part, the operation of these functions is obvious from their names, and you would pretty much know how to use them in a program if you just were aware of them.

Windows XP implements the native API for kernel-mode callers using routine names that begin with the prefix Zw. The DDK documents just a few of the ZwXxx functions, namely the ones that pertain to registry and file access. I’ll discuss those functions in this chapter.

The Windows XP kernel (prefix Ke) is where all the low-level synchronization of activities between threads and processors occurs.(第二版,En)