提示：

1.应用层的符号链接不要使用L，宽字符！！！

2.任何宏定义后面都不能有分号！！！

  1. #include <stdio.h>
  2. #include <windows.h>
  4. //应用层的符号链接不要使用L，宽字符！！！
  5. #define  SYMBOLIC_NAME "\\\\.\\sym_name"
  6. //任何宏定义后面都不能有分号！！！
  7. #define CTL_CODE_BASE 0x8000
  8. #define CTL_ALLCODE(i) CTL_CODE(FILE_DEVICE_UNKNOWN,CTL_CODE_BASE+i,METHOD_BUFFERED,FILE_ANY_ACCESS)
  9. #define  CTL_TALK   CTL_ALLCODE(1)
  12. int main()
  13. {
  14.     HANDLE hDevice = NULL;
  15.     char buff[] =  "demo" ;
  16.     char codebuff[5] = "less";
  17.     DWORD retlen = NULL;
  18.     hDevice = CreateFile(SYMBOLIC_NAME, GENERIC_ALL, 0, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
  19.     printf("错误码：%d\n", GetLastError());
  20.     if (hDevice < 0)
  21.     {
  22.         printf("打开文件失败");
  23.     }
  24.     printf("handle:%d\n", hDevice);
  25.     BOOL flag = WriteFile(hDevice, buff, 1024, &retlen, NULL);
  26.     if (!flag)
  27.     {
  28.         printf("写入失败");
  29.     }
  30.     do 
  31.     {
  32.         printf("请输入你要传入内核的字符串:");
  33.         scanf_s("%s", &codebuff);
  34.         flag = DeviceIoControl(hDevice, CTL_TALK, codebuff, strlen(codebuff), NULL, 0, &retlen, NULL);
  35.         if (!flag)
  36.         {
  37.             printf("控制码通信失败");
  38.         }
  39.     } while (1);
  40.     system("pause");
  41. }
  1. #include <ntddk.h>
  2. #define  DEVICE_NAME L"\\device\\mydevice"
  3. #define  SYMBOLIC_NAME L"\\dosdevices\\sym_name"
  4. #define CTL_CODE_BASE 0x8000
  5. #define CTL_CMD(i) CTL_CODE(FILE_DEVICE_UNKNOWN,CTL_CODE_BASE+i,METHOD_BUFFERED,FILE_ANY_ACCESS)
  6. #define  CTL_TALK CTL_CMD(1)
  8. NTSTATUS DispatchControl(PDEVICE_OBJECT pDevice, PIRP pIrp)
  9. {
  10.     PVOID pBuff = pIrp->AssociatedIrp.SystemBuffer;
  11.     PIO_STACK_LOCATION pStack = IoGetCurrentIrpStackLocation(pIrp);
  12.     ULONG CtlCode = pStack->Parameters.DeviceIoControl.IoControlCode;
  13.     ULONG uLen = { 0 };
  14.     uLen = strlen(pBuff);
  15.     switch (CtlCode)
  16.     {
  17.     case CTL_TALK:
  18.     {
  19.             DbgPrint("长度:%d", uLen);
  20.             DbgPrint("接收到的数据为:%s",pBuff);
  21.     }
  22.     default:
  23.         break;
  24.     }
  25.     pIrp->IoStatus.Information = 0;
  26.     pIrp->IoStatus.Status = STATUS_SUCCESS;
  27.     IoCompleteRequest(pIrp, IO_NO_INCREMENT);
  28.     return STATUS_SUCCESS;
  29. }
  31. NTSTATUS DispatchCreate(PDEVICE_OBJECT pDeviceObject, PIRP pIrp)
  32. {
  33.     DbgPrint("Create!");
  34.     //设置IRP处理已经成功了
  35.     pIrp->IoStatus.Status = STATUS_SUCCESS;
  36.     //返回多少字节的数据
  37.     pIrp->IoStatus.Information = 0;
  38.     //结束IRP处理流程
  39.     IoCompleteRequest(pIrp, IO_NO_INCREMENT);
  40.     //函数调用成功
  41.     return STATUS_SUCCESS;
  42. }
  44. NTSTATUS DispatchRead(PDEVICE_OBJECT pDevice, PIRP pIrp)
  45. {
  46.     ULONG retlen = 0;
  47.     PVOID pMes = pIrp->AssociatedIrp.SystemBuffer;
  48.     DbgPrint("%c", (char *)pMes);
  49.     pIrp->IoStatus.Information = retlen;
  50.     pIrp->IoStatus.Status = STATUS_SUCCESS;
  51.     //表示调用者已经完成了给定I/O请求的所有处理，并将给定的IRP返回给I/O管理器
  52.     IoCompleteRequest(pIrp,IO_NO_INCREMENT);
  53.     return STATUS_SUCCESS;
  54. }
  56. VOID UnloadDriver(PDRIVER_OBJECT pDriver)
  57. {
  58.     UNICODE_STRING uSyb_Name = RTL_CONSTANT_STRING(SYMBOLIC_NAME);
  59.     IoDeleteDevice(pDriver->DeviceObject);
  60.     IoDeleteSymbolicLink(&uSyb_Name);
  61.     DbgPrint("卸载成功");
  62. }
  64. NTSTATUS DriverEntry(PDRIVER_OBJECT pDriver, PUNICODE_STRING pRegpath)
  65. {
  66.     PDEVICE_OBJECT pDevice = NULL;
  67.     UNICODE_STRING uDeciceName = RTL_CONSTANT_STRING(DEVICE_NAME);
  68.     UNICODE_STRING uSyb_Name = RTL_CONSTANT_STRING(SYMBOLIC_NAME);
  69.     NTSTATUS status = STATUS_SUCCESS;
  70.     status = IoCreateDevice(pDriver, 0, &uDeciceName, FILE_DEVICE_UNKNOWN, 0, FALSE, &pDevice);
  71.     if (!NT_SUCCESS(status))
  72.     {
  73.         DbgPrint("创建设备失败\n");
  74.     }
  75.     status = IoCreateSymbolicLink(&uSyb_Name, &uDeciceName);
  76.     if (!NT_SUCCESS(status))
  77.     {
  78.         DbgPrint("创建符号链接失败\n");
  79.     }
  81.     pDevice->Flags |= DO_BUFFERED_IO;
  82.     pDriver->MajorFunction[IRP_MJ_CREATE] = DispatchCreate;
  83.     pDriver->MajorFunction[IRP_MJ_WRITE] = DispatchRead;
  84.     pDriver->MajorFunction[IRP_MJ_DEVICE_CONTROL] = DispatchControl;
  85.     DbgPrint("驱动加载成功");
  86.     pDriver->DriverUnload = UnloadDriver;
  87.     return STATUS_SUCCESS;
  88. }