[sys] windows: add QueryWorkingSetEx

Gerrit Bot (Gerrit)

unread,

Apr 26, 2022, 8:57:33 PM4/26/22

to goph...@pubsubhelper.golang.org, golang-co...@googlegroups.com

Gerrit Bot has uploaded this change for review.

windows: add QueryWorkingSetEx

This change adds the QueryWorkingSetEx function for inspecting
the virtual memory details of pointers.

https://docs.microsoft.com/en-us/windows/win32/api/psapi/nf-psapi-queryworkingsetex

Change-Id: I2bc92bb0b65d34ed1caf88e4d368d64946dfcc5c
GitHub-Last-Rev: 7393d66e8ca0c971817672d4abc1e62355027601
GitHub-Pull-Request: golang/sys#124
---
M windows/syscall_windows.go
M windows/syscall_windows_test.go
M windows/zsyscall_windows.go
3 files changed, 150 insertions(+), 0 deletions(-)

diff --git a/windows/syscall_windows.go b/windows/syscall_windows.go
index ce3075c..f2d8715 100644
--- a/windows/syscall_windows.go
+++ b/windows/syscall_windows.go
@@ -6,6 +6,60 @@
 
 package windows
 
+/*
+#include <stdbool.h>
+#include <windows.h>
+
+typedef union _PSAPI_WORKING_SET_EX_BLOCK {
+  ULONG_PTR Flags;
+  union {
+    struct {
+      ULONG_PTR Valid : 1;
+      ULONG_PTR ShareCount : 3;
+      ULONG_PTR Win32Protection : 11;
+      ULONG_PTR Shared : 1;
+      ULONG_PTR Node : 6;
+      ULONG_PTR Locked : 1;
+      ULONG_PTR LargePage : 1;
+      ULONG_PTR Reserved : 7;
+      ULONG_PTR Bad : 1;
+      ULONG_PTR ReservedUlong : 32;
+    };
+    struct {
+      ULONG_PTR Valid : 1;
+      ULONG_PTR Reserved0 : 14;
+      ULONG_PTR Shared : 1;
+      ULONG_PTR Reserved1 : 15;
+      ULONG_PTR Bad : 1;
+      ULONG_PTR ReservedUlong : 32;
+    } Invalid;
+  };
+} PSAPI_WORKING_SET_EX_BLOCK, *PPSAPI_WORKING_SET_EX_BLOCK;
+
+typedef struct {
+        bool Valid;
+        int ShareCount;
+        int Win32Protection;
+        bool Shared;
+        int Node;
+        bool Locked;
+        bool LargePage;
+        bool Bad;
+} PSAPIWorkingSetExBlock;
+
+void PSAPIWorkingSetExBlockUnion(PSAPI_WORKING_SET_EX_BLOCK b, PSAPIWorkingSetExBlock* cBlock) {
+        cBlock->Valid = b.Valid;
+        cBlock->ShareCount = b.ShareCount;
+        cBlock->Win32Protection = b.Win32Protection;
+        cBlock->Shared = b.Shared;
+        cBlock->Node = b.Node;
+        cBlock->Locked = b.Locked;
+        cBlock->LargePage = b.LargePage;
+        cBlock->Bad = b.Bad;
+}
+*/
+import "C"
+
 import (
 	errorspkg "errors"
 	"fmt"
@@ -417,6 +471,7 @@
 //sys	GetModuleInformation(process Handle, module Handle, modinfo *ModuleInfo, cb uint32) (err error) = psapi.GetModuleInformation
 //sys	GetModuleFileNameEx(process Handle, module Handle, filename *uint16, size uint32) (err error) = psapi.GetModuleFileNameExW
 //sys	GetModuleBaseName(process Handle, module Handle, baseName *uint16, size uint32) (err error) = psapi.GetModuleBaseNameW
+//sys   queryWorkingSetEx(process Handle, pv *psapiWorkingSetExInformation, cb uintptr) (err error) = psapi.QueryWorkingSetEx
 
 // NT Native APIs
 //sys	rtlNtStatusToDosErrorNoTeb(ntstatus NTStatus) (ret syscall.Errno) = ntdll.RtlNtStatusToDosErrorNoTeb
@@ -1699,3 +1754,59 @@
 	h.Cap = int(size)
 	return
 }
+
+type PSAPIWorkingSetExBlock struct {
+	Valid           bool
+	ShareCount      int
+	Win32Protection int
+	Shared          bool
+	Node            int
+	Locked          bool
+	LargePage       bool
+	Bad             bool
+	Raw             []byte
+}
+
+// typedef struct _PSAPI_WORKING_SET_EX_INFORMATION {
+//   PVOID                      VirtualAddress;
+//   PSAPI_WORKING_SET_EX_BLOCK VirtualAttributes;
+// } PSAPI_WORKING_SET_EX_INFORMATION, *PPSAPI_WORKING_SET_EX_INFORMATION;
+type psapiWorkingSetExInformation struct {
+	VirtualAddress    Pointer
+	VirtualAttributes C.PSAPI_WORKING_SET_EX_BLOCK
+}
+
+func QueryWorkingSetEx(hProcess Handle, ptrs []unsafe.Pointer) ([]PSAPIWorkingSetExBlock, error) {
+	if len(ptrs) == 0 {
+		return nil, nil
+	}
+	infos := make([]psapiWorkingSetExInformation, len(ptrs))
+	for i, ptr := range ptrs {
+		infos[i].VirtualAddress = Pointer(ptr)
+	}
+	if err := queryWorkingSetEx(hProcess, &infos[0], uintptr(len(infos))*unsafe.Sizeof(infos[0])); err != nil {
+		return nil, err
+	}
+
+	blocks := make([]PSAPIWorkingSetExBlock, 0, len(infos))
+	for _, info := range infos {
+		var cBlock C.PSAPIWorkingSetExBlock
+		C.PSAPIWorkingSetExBlockUnion(info.VirtualAttributes, &cBlock)
+
+		var block PSAPIWorkingSetExBlock
+		block.Valid = bool(cBlock.Valid)
+		block.ShareCount = int(cBlock.ShareCount)
+		block.Win32Protection = int(cBlock.Win32Protection)
+		block.Shared = bool(cBlock.Shared)
+		block.Node = int(cBlock.Node)
+		block.Locked = bool(cBlock.Locked)
+		block.LargePage = bool(cBlock.LargePage)
+		block.Bad = bool(cBlock.Bad)
+		block.Raw = make([]byte, len(info.VirtualAttributes))
+		copy(block.Raw, info.VirtualAttributes[:])
+
+		blocks = append(blocks, block)
+	}
+
+	return blocks, nil
+}
diff --git a/windows/syscall_windows_test.go b/windows/syscall_windows_test.go
index dcebb2c..d2187d0 100644
--- a/windows/syscall_windows_test.go
+++ b/windows/syscall_windows_test.go
@@ -777,6 +777,20 @@
 	}
 }
 
+func TestQueryWorkingSetEx(t *testing.T) {
+	var a int
+
+	process := windows.CurrentProcess()
+	pointers := []unsafe.Pointer{unsafe.Pointer(&a)}
+	blocks, err := windows.QueryWorkingSetEx(process, pointers)
+	if err != nil {
+		t.Fatalf("%+v", err)
+	}
+	if !blocks[0].Valid {
+		t.Errorf("memory location not valid")
+	}
+}
+
 func TestReadWriteProcessMemory(t *testing.T) {
 	testBuffer := []byte{0xBA, 0xAD, 0xF0, 0x0D}
 
diff --git a/windows/zsyscall_windows.go b/windows/zsyscall_windows.go
index 68f52c1..de7891a 100644
--- a/windows/zsyscall_windows.go
+++ b/windows/zsyscall_windows.go
@@ -407,6 +407,7 @@
 	procGetModuleBaseNameW                                   = modpsapi.NewProc("GetModuleBaseNameW")
 	procGetModuleFileNameExW                                 = modpsapi.NewProc("GetModuleFileNameExW")
 	procGetModuleInformation                                 = modpsapi.NewProc("GetModuleInformation")
+	procQueryWorkingSetEx                                    = modpsapi.NewProc("QueryWorkingSetEx")
 	procSubscribeServiceChangeNotifications                  = modsechost.NewProc("SubscribeServiceChangeNotifications")
 	procUnsubscribeServiceChangeNotifications                = modsechost.NewProc("UnsubscribeServiceChangeNotifications")
 	procGetUserNameExW                                       = modsecur32.NewProc("GetUserNameExW")
@@ -3495,6 +3496,14 @@
 	return
 }
 
+func queryWorkingSetEx(process Handle, pv *psapiWorkingSetExInformation, cb uintptr) (err error) {
+	r1, _, e1 := syscall.Syscall(procQueryWorkingSetEx.Addr(), 3, uintptr(process), uintptr(unsafe.Pointer(pv)), uintptr(cb))
+	if r1 == 0 {
+		err = errnoErr(e1)
+	}
+	return
+}
+
 func SubscribeServiceChangeNotifications(service Handle, eventType uint32, callback uintptr, callbackCtx uintptr, subscription *uintptr) (ret error) {
 	ret = procSubscribeServiceChangeNotifications.Find()
 	if ret != nil {

To view, visit change 402494. To unsubscribe, or for help writing mail filters, visit settings.

Gopher Robot (Gerrit)

unread,

Apr 26, 2022, 8:57:59 PM4/26/22

to Gerrit Bot, goph...@pubsubhelper.golang.org, golang-co...@googlegroups.com

Congratulations on opening your first change. Thank you for your contribution!

Next steps:
A maintainer will review your change and provide feedback. See
https://go.dev/doc/contribute#review for more info and tips to get your
patch through code review.

Most changes in the Go project go through a few rounds of revision. This can be
surprising to people new to the project. The careful, iterative review process
is our way of helping mentor contributors and ensuring that their contributions
have a lasting impact.

During May-July and Nov-Jan the Go project is in a code freeze, during which
little code gets reviewed or merged. If a reviewer responds with a comment like
R=go1.11 or adds a tag like "wait-release", it means that this CL will be
reviewed as part of the next development cycle. See https://go.dev/s/release
for more details.

[sys] windows: add QueryWorkingSetEx

Gerrit Bot (Gerrit)

Gopher Robot (Gerrit)

Alex Brainman (Gerrit)

Fumin A (Gerrit)

Alex Brainman (Gerrit)

Fumin A (Gerrit)

Gerrit Bot (Gerrit)

Fumin A (Gerrit)

Dan Kortschak (Gerrit)

Gerrit Bot (Gerrit)

Fumin A (Gerrit)

Alex Brainman (Gerrit)

Alex Brainman (Gerrit)

Alex Brainman (Gerrit)

Gerrit Bot (Gerrit)

Gerrit Bot (Gerrit)

Fumin A (Gerrit)

Alex Brainman (Gerrit)

Alex Brainman (Gerrit)

Fumin A (Gerrit)

Alex Brainman (Gerrit)

Than McIntosh (Gerrit)

Dmitri Shuralyov (Gerrit)

Dmitri Shuralyov (Gerrit)

Keith Randall (Gerrit)

Gerrit Bot (Gerrit)

Fumin A (Gerrit)

Alex Brainman (Gerrit)

Alex Brainman (Gerrit)