Ring0

//一般驱动层不使用数据结构，一般Ring3层

双向链表可以将链表形成一个环.BLINK指针指向前一个元素,FLINK指针指向下一个元素.
typedef struct _LIST_ENTRY {
struct _LIST_ENTRY *Flink;
struct _LIST_ENTRY *Blink;
} LIST_ENTRY, *PLIST_ENTRY, *RESTRICTED_POINTER PRLIST_ENTRY;

初始化
双向链表都是以一个链表头作为链表的第一个元素.初始化链表头就是把Flink和Blink都指向自己,此时就是空链.使用InitializeListHead函数.

#include <ntifs.h>

typedef struct _ITEM_
{
    union 
    {
        LIST_ENTRY        ListEntry;
        SINGLE_LIST_ENTRY SingleListEntry;
    }u;
    ULONG ItemData;
}ITEM,*PITEM;


void SingleListTest();//单链表
void ListTest();//双链表

VOID DriverUnload(PDRIVER_OBJECT DriverObject);







#include "List.h"

//bp List!DriverEntry
NTSTATUS DriverEntry(PDRIVER_OBJECT DriverObject, PUNICODE_STRING RegisterPath)
{
    NTSTATUS Status = STATUS_SUCCESS;
    PDEVICE_OBJECT  DeviceObject = NULL;
    
    DriverObject->DriverUnload = DriverUnload;
    

    //ListTest();//双向链表
    SingleListTest();//单链表

    
    
    return Status;
}


void ListTest()
{
    LIST_ENTRY ListHead;
    PITEM Item = NULL;

    ULONG i = 0;
    
    //初始化链表
    InitializeListHead(&ListHead);

    for (i = 0; i < 10; i++)
    {
        Item = (PITEM)
            ExAllocatePool(PagedPool, sizeof(ITEM));
        Item->ItemData = i;
        InsertHeadList(&ListHead, &Item->u.ListEntry);
    }

    while (!IsListEmpty(&ListHead))
    {
        PLIST_ENTRY ListEntry = RemoveTailList(&ListHead);

        DbgPrint("%d
", ((PITEM)ListEntry)->ItemData);
        ExFreePool((PITEM)ListEntry);
    }
}

void SingleListTest()
{
    SINGLE_LIST_ENTRY  ListHead;

    PITEM Item = NULL;
    ULONG i = 0;
    //初始化链表
    InitializeListHead(&ListHead);
    for (i = 0; i < 10; i++)
    {
        Item = (PITEM)
            ExAllocatePool(PagedPool, sizeof(ITEM));
        Item->ItemData = i;
        PushEntryList(&ListHead, &Item->u.SingleListEntry);
    }

    while (!IsListEmpty(&ListHead))
    {
        PSINGLE_LIST_ENTRY ListEntry = PopEntryList(&ListHead);

        DbgPrint("%d
", ((PITEM)ListEntry)->ItemData);
        ExFreePool((PITEM)ListEntry);
    }

}



VOID DriverUnload(PDRIVER_OBJECT DriverObject)
{
    DbgPrint("DriverUnload()
");
}