[PATCH] ntoskrnl.exe: Implement ObGetObjectType.

[Derek Lesho]

Signed-off-by: Derek Lesho <dereklesho52(a)Gmail.com>
---
 dlls/ntoskrnl.exe/ntoskrnl.c | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/dlls/ntoskrnl.exe/ntoskrnl.c b/dlls/ntoskrnl.exe/ntoskrnl.c
index 4ff4a75972..d84f1250c5 100644
--- a/dlls/ntoskrnl.exe/ntoskrnl.c
+++ b/dlls/ntoskrnl.exe/ntoskrnl.c
@@ -2914,9 +2914,8 @@ USHORT WINAPI ObGetFilterVersion(void)
  */
 POBJECT_TYPE WINAPI ObGetObjectType(void *object)
 {
-    FIXME("stub: %p\n", object);
-
-    return NULL;
+    struct object_header *header = (struct object_header *)object - 1;
+    return header->type;
 }
 
 /***********************************************************************
-- 
2.20.1

[Jacek Caban]

Hi Derek,

On 3/21/19 5:18 AM, Derek Lesho wrote:
> Signed-off-by: Derek Lesho <dereklesho52(a)Gmail.com>
> ---
>   dlls/ntoskrnl.exe/ntoskrnl.c | 5 ++---
>   1 file changed, 2 insertions(+), 3 deletions(-)
>
> diff --git a/dlls/ntoskrnl.exe/ntoskrnl.c b/dlls/ntoskrnl.exe/ntoskrnl.c
> index 4ff4a75972..d84f1250c5 100644
> --- a/dlls/ntoskrnl.exe/ntoskrnl.c
> +++ b/dlls/ntoskrnl.exe/ntoskrnl.c
> @@ -2914,9 +2914,8 @@ USHORT WINAPI ObGetFilterVersion(void)
>    */
>   POBJECT_TYPE WINAPI ObGetObjectType(void *object)
>   {
> -    FIXME("stub: %p\n", object);
> -
> -    return NULL;
> +    struct object_header *header = (struct object_header *)object - 1;
> +    return header->type;
>   }
>
> /***********************************************************************

The patch looks good, but it would be nice to have a test. It should be 
easy to call it on event object in test_ob_reference and check that 
returned value is ExEventObjectType.


Thanks,

Jacek