Ring0 - 链表

//一般驱动层不使用数据结构，一般Ring3层

双向链表可以将链表形成一个环.BLINK指针指向前一个元素,FLINK指针指向下一个元素.
typedef struct _LIST_ENTRY {
struct _LIST_ENTRY *Flink;
struct _LIST_ENTRY *Blink;
} LIST_ENTRY, *PLIST_ENTRY, *RESTRICTED_POINTER PRLIST_ENTRY;

初始化
双向链表都是以一个链表头作为链表的第一个元素.初始化链表头就是把Flink和Blink都指向自己,此时就是空链.使用InitializeListHead函数.

 #include <ntifs.h>
 
 typedef struct _ITEM_
 {
     union
     {
         LIST_ENTRY        ListEntry;
         SINGLE_LIST_ENTRY SingleListEntry;
     }u;
     ULONG ItemData;
 }ITEM,*PITEM;
 
 void SingleListTest();//单链表
 void ListTest();//双链表
 
 VOID DriverUnload(PDRIVER_OBJECT DriverObject);
 
 #include "List.h"
 
 //bp List!DriverEntry
 NTSTATUS DriverEntry(PDRIVER_OBJECT DriverObject, PUNICODE_STRING RegisterPath)
 {
     NTSTATUS Status = STATUS_SUCCESS;
     PDEVICE_OBJECT  DeviceObject = NULL;
 
     DriverObject->DriverUnload = DriverUnload;
 
     //ListTest();//双向链表
     SingleListTest();//单链表
 
     return Status;
 }
 
 void ListTest()
 {
     LIST_ENTRY ListHead;
     PITEM Item = NULL;
 
     ULONG i = ;
 
     //初始化链表
     InitializeListHead(&ListHead);
 
     for (i = ; i < ; i++)
     {
         Item = (PITEM)
             ExAllocatePool(PagedPool, sizeof(ITEM));
         Item->ItemData = i;
         InsertHeadList(&ListHead, &Item->u.ListEntry);
     }
 
     while (!IsListEmpty(&ListHead))
     {
         PLIST_ENTRY ListEntry = RemoveTailList(&ListHead);
 
         DbgPrint("%d\r\n", ((PITEM)ListEntry)->ItemData);
         ExFreePool((PITEM)ListEntry);
     }
 }
 
 void SingleListTest()
 {
     SINGLE_LIST_ENTRY  ListHead;
 
     PITEM Item = NULL;
     ULONG i = ;
     //初始化链表
     InitializeListHead(&ListHead);
     for (i = ; i < ; i++)
     {
         Item = (PITEM)
             ExAllocatePool(PagedPool, sizeof(ITEM));
         Item->ItemData = i;
         PushEntryList(&ListHead, &Item->u.SingleListEntry);
     }
 
     while (!IsListEmpty(&ListHead))
     {
         PSINGLE_LIST_ENTRY ListEntry = PopEntryList(&ListHead);
 
         DbgPrint("%d\n", ((PITEM)ListEntry)->ItemData);
         ExFreePool((PITEM)ListEntry);
     }
 
 }
 
 VOID DriverUnload(PDRIVER_OBJECT DriverObject)
 {
     DbgPrint("DriverUnload()\r\n");
 }