1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
use super::bindings::Windows::Win32::Automation::{SysStringLen, BSTR};
use std::mem::MaybeUninit;
use windows::{Abi, Guid};
#[derive(Debug, PartialEq)]
pub enum PlaError {
NotFound,
ComHResultError(HResult),
}
#[derive(Debug, PartialEq)]
pub enum HResult {
HrOk,
HrAbort,
HrAccessDenied,
HrFail,
HrInvalidArg,
HrOutOfMemory,
NotImplemented(i32),
}
impl From<i32> for HResult {
fn from(hr: i32) -> HResult {
match hr {
0x0 => HResult::HrOk,
-2147467260 => HResult::HrAbort,
-2147024891 => HResult::HrAccessDenied,
-2147467259 => HResult::HrFail,
-2147024809 => HResult::HrInvalidArg,
-2147024882 => HResult::HrOutOfMemory,
_ => HResult::NotImplemented(hr),
}
}
}
impl From<i32> for PlaError {
fn from(val: i32) -> PlaError {
PlaError::ComHResultError(HResult::from(val))
}
}
pub(crate) type ProvidersComResult<T> = Result<T, PlaError>;
const VT_UI4: u16 = 0x13;
#[repr(C)]
#[doc(hidden)]
#[derive(Debug, Default, Clone, Copy)]
pub struct Variant {
vt: u16,
w_reserved1: u16,
w_reserved2: u16,
w_reserved3: u16,
val: u32,
}
impl Variant {
pub fn new(vt: u16, val: u32) -> Self {
let mut variant = Variant::default();
variant.vt = vt;
variant.val = val;
variant
}
pub fn increment_val(&mut self) {
self.val = self.val + 1;
}
pub fn get_val(&self) -> u32 {
self.val
}
}
fn check_hr(hr: i32) -> ProvidersComResult<()> {
let res = HResult::from(hr);
if res != HResult::HrOk {
return Err(PlaError::ComHResultError(res));
}
Ok(())
}
pub(crate) unsafe fn get_provider_guid(name: &str) -> ProvidersComResult<Guid> {
com::runtime::init_runtime()?;
let all_providers = com::runtime::create_instance::<
pla_interfaces::ITraceDataProviderCollection,
>(&pla_interfaces::CLSID_TRACE_DATA_PROV_COLLECTION)?;
let mut guid: MaybeUninit<Guid> = MaybeUninit::uninit();
let mut hr = all_providers.get_trace_data_providers(BSTR::from(""));
check_hr(hr)?;
let mut count = 0;
hr = all_providers.get_count(&mut count);
check_hr(hr)?;
let mut index = Variant::new(VT_UI4, 0);
while index.get_val() < count as u32 {
let mut provider = None;
hr = all_providers.get_item(index, &mut provider);
check_hr(hr)?;
let mut raw_name: MaybeUninit<BSTR> = MaybeUninit::uninit();
let provider = provider.unwrap();
provider.get_display_name(raw_name.as_mut_ptr());
check_hr(hr)?;
let raw_name = raw_name.assume_init();
let prov_name = String::from_utf16_lossy(std::slice::from_raw_parts(
raw_name.abi(),
SysStringLen(raw_name) as usize,
));
index.increment_val();
if prov_name.eq(name) {
hr = provider.get_guid(guid.as_mut_ptr());
check_hr(hr)?;
println!("{}", prov_name);
break;
}
}
if index.get_val() == count as u32 {
return Err(PlaError::NotFound);
}
Ok(guid.assume_init())
}
mod pla_interfaces {
use super::{Guid, Variant, BSTR};
use com::sys::IID;
use com::{interfaces, interfaces::iunknown::IUnknown, sys::HRESULT};
interfaces! {
#[uuid("00020400-0000-0000-C000-000000000046")]
pub unsafe interface IDispatch: IUnknown {
pub fn get_type_info_count(&self) -> HRESULT;
pub fn get_type_info(&self) -> HRESULT;
pub fn get_ids_of_names(&self) -> HRESULT;
pub fn invoke(&self) -> HRESULT;
}
#[uuid("03837510-098b-11d8-9414-505054503030")]
pub unsafe interface ITraceDataProviderCollection: IDispatch {
pub fn get_count(&self, retval: *mut i32) -> HRESULT;
pub fn get_item(
&self,
#[pass_through]
index: Variant,
provider: *mut Option<ITraceDataProvider>,
) -> HRESULT;
pub fn get__new_enum(&self) -> HRESULT;
pub fn add(&self) -> HRESULT;
pub fn remove(&self) -> HRESULT;
pub fn clear(&self) -> HRESULT;
pub fn add_range(&self) -> HRESULT;
pub fn create_trace_data_provider(&self) -> HRESULT;
pub fn get_trace_data_providers(
&self,
#[pass_through]
server: BSTR
) -> HRESULT;
pub fn get_trace_data_providers_by_process(&self) -> HRESULT;
}
#[uuid("03837512-098b-11d8-9414-505054503030")]
pub unsafe interface ITraceDataProvider: IDispatch {
pub fn get_display_name(
&self,
#[pass_through]
name: *mut BSTR
) -> HRESULT;
pub fn put_display_name(&self) -> HRESULT;
pub fn get_guid(
&self,
#[pass_through]
guid: *mut Guid
) -> HRESULT;
pub fn put_guid(&self) -> HRESULT;
pub fn get_level(&self) -> HRESULT;
pub fn get_keywords_any(&self) -> HRESULT;
pub fn get_keywords_all(&self) -> HRESULT;
pub fn get_properties(&self) -> HRESULT;
pub fn get_filter_enabled(&self) -> HRESULT;
pub fn put_filter_enabled(&self) -> HRESULT;
pub fn get_filter_type(&self) -> HRESULT;
pub fn put_filter_type(&self) -> HRESULT;
pub fn get_filter_data(&self) -> HRESULT;
pub fn put_filter_data(&self) -> HRESULT;
pub fn query(&self) -> HRESULT;
pub fn resolve(&self) -> HRESULT;
pub fn set_security(&self) -> HRESULT;
pub fn get_security(&self) -> HRESULT;
pub fn get_registered_processes(&self) -> HRESULT;
}
}
pub const CLSID_TRACE_DATA_PROV_COLLECTION: IID = IID {
data1: 0x03837511,
data2: 0x098b,
data3: 0x11d8,
data4: [0x94, 0x14, 0x50, 0x50, 0x54, 0x50, 0x30, 0x30],
};
}
#[cfg(test)]
mod test {
use super::*;
#[test]
pub fn test_get_provider() {
unsafe {
let guid =
get_provider_guid("Microsoft-Windows-Kernel-Process").expect("Error Getting GUID");
assert_eq!(Guid::from("22FB2CD6-0E7B-422B-A0C7-2FAD1FD0E716"), guid);
}
}
#[test]
pub fn test_provider_not_found() {
unsafe {
let err = get_provider_guid("Not-A-Real-Provider");
assert_eq!(err, Err(PlaError::NotFound));
}
}
}