[PATCH] ntoskrnl.exe: Implement ObGetObjectType.

[Jacek Caban]

Hi Derek,

On 3/21/19 5:18 AM, Derek Lesho wrote:
> Signed-off-by: Derek Lesho <dereklesho52 at Gmail.com>
> ---
>   dlls/ntoskrnl.exe/ntoskrnl.c | 5 ++---
>   1 file changed, 2 insertions(+), 3 deletions(-)
>
> diff --git a/dlls/ntoskrnl.exe/ntoskrnl.c b/dlls/ntoskrnl.exe/ntoskrnl.c
> index 4ff4a75972..d84f1250c5 100644
> --- a/dlls/ntoskrnl.exe/ntoskrnl.c
> +++ b/dlls/ntoskrnl.exe/ntoskrnl.c
> @@ -2914,9 +2914,8 @@ USHORT WINAPI ObGetFilterVersion(void)
>    */
>   POBJECT_TYPE WINAPI ObGetObjectType(void *object)
>   {
> -    FIXME("stub: %p\n", object);
> -
> -    return NULL;
> +    struct object_header *header = (struct object_header *)object - 1;
> +    return header->type;
>   }
>   
>   /***********************************************************************



The patch looks good, but it would be nice to have a test. It should be 
easy to call it on event object in test_ob_reference and check that 
returned value is ExEventObjectType.


Thanks,

Jacek