quick_push

rflog3-server.cc

+#include <windows.h>
+#include <stdio.h>
+
+#define PIPE_NAME "\\\\.\\pipe\\KernelLogPipe"
+
+void ListenToKernelLogs() {
+    HANDLE hPipe;
+    char buffer[256];
+    DWORD bytesRead;
+
+    hPipe = CreateNamedPipeA(
+        PIPE_NAME,
+        PIPE_ACCESS_INBOUND,
+        PIPE_TYPE_BYTE | PIPE_READMODE_BYTE | PIPE_WAIT,
+        1, 256, 256, 0, NULL
+    );
+
+    if (hPipe == INVALID_HANDLE_VALUE) {
+        printf("Failed to create named pipe. Error: %d\n", GetLastError());
+        return;
+    }
+
+    printf("Waiting for kernel connection...\n");
+    ConnectNamedPipe(hPipe, NULL);
+
+    while (ReadFile(hPipe, buffer, sizeof(buffer) - 1, &bytesRead, NULL)) {
+        buffer[bytesRead] = '\0';
+        printf("Kernel Log: %s\n", buffer);
+    }
+
+    CloseHandle(hPipe);
+}
+
+int main() {
+    ListenToKernelLogs();
+    return 0;
+}

rflog3.h

+// GPT-4o generated. NOT thread safe.
+// v2502.1
+#ifndef SIMPLE_LOGGER_H
+#define SIMPLE_LOGGER_H
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <time.h>
+
+#if defined(_WIN32) && defined(NTDDI_VERSION)
+#include <ntddk.h>
+#include <ntstrsafe.h>  // For RtlStringCbPrintfA
+#define RL_SNPRINTF_FUNC RtlStringCbPrintfA
+#define RL_LOG_FILE_PATH "N/A"
+#elif defined(_WIN32)
+#include <windows.h>
+#define RL_SNPRINTF_FUNC snprintf
+#define RL_LOG_FILE_PATH "C:\\rflog.txt"
+#else
+#include <sys/time.h>
+#define RL_SNPRINTF_FUNC snprintf
+#define RL_LOG_FILE_PATH "/tmp/rflog.txt"
+#endif
+
+#ifdef __GNUC__
+#define RL_THREAD_LOC __thread
+#define RL_UNUSED __attribute__ ((unused))
+#else
+#define RL_THREAD_LOC /*__declspec( thread ) Not Supported*/
+#define RL_UNUSED
+#endif
+
+// Define static buffers
+#define RL_DATETIME_BUFFER_SIZE 64
+#define RL_LOG_BUFFER_SIZE 512
+
+// Static buffers for reduced memory allocation. NOT THREAD SAFE!!
+static RL_THREAD_LOC char datetime_buffer[RL_DATETIME_BUFFER_SIZE];
+static RL_THREAD_LOC char log_buffer[RL_LOG_BUFFER_SIZE];
+#if defined(_WIN32) && defined(NTDDI_VERSION)
+static RL_THREAD_LOC WCHAR wideBuffer[RL_LOG_BUFFER_SIZE];
+#endif
+
+RL_UNUSED static const char *get_current_datetime() {
+#if defined(_WIN32) && defined(NTDDI_VERSION)
+    // Windows kernel-mode implementation
+    LARGE_INTEGER system_time, local_time;
+    TIME_FIELDS time_fields;
+
+    KeQuerySystemTime(&system_time);
+    ExSystemTimeToLocalTime(&system_time, &local_time);
+    RtlTimeToTimeFields(&local_time, &time_fields);
+
+    // Format the datetime string
+    RL_SNPRINTF_FUNC (datetime_buffer, RL_DATETIME_BUFFER_SIZE,
+                       "%04d-%02d-%02d %02d:%02d:%02d.%03d",
+                       time_fields.Year, time_fields.Month, time_fields.Day,
+                       time_fields.Hour, time_fields.Minute, time_fields.Second, 0); // No millisecond precision in kernel
+#else
+    // User-mode implementation
+    #ifdef _WIN32
+        SYSTEMTIME st;
+        GetLocalTime(&st);
+        snprintf(datetime_buffer, RL_DATETIME_BUFFER_SIZE, "%04d-%02d-%02d %02d:%02d:%02d.%03d",
+                 st.wYear, st.wMonth, st.wDay, st.wHour, st.wMinute, st.wSecond, st.wMilliseconds);
+    #else
+        // Linux or other Unix-like systems
+        struct timeval tv;
+        struct tm *tm_info;
+        gettimeofday(&tv, NULL);
+        tm_info = localtime(&tv.tv_sec);
+        snprintf(datetime_buffer, RL_DATETIME_BUFFER_SIZE, "%04d-%02d-%02d %02d:%02d:%02d.%03ld",
+                 tm_info->tm_year + 1900, tm_info->tm_mon + 1, tm_info->tm_mday,
+                 tm_info->tm_hour, tm_info->tm_min, tm_info->tm_sec, tv.tv_usec / 1000);
+    #endif
+#endif
+    return datetime_buffer;
+}
+
+#if defined(_WIN32) && defined(NTDDI_VERSION)
+// Windows kernel-mode only
+static size_t NaiveStrlen(const char *str) {
+    if (!str) return 0;
+    size_t len = 0;
+    while (str[len]) len++;
+    return len;
+}
+#define PIPE_NAME L"\\??\\pipe\\KernelLogPipe"
+NTSTATUS SendLogToUserMode(const char* message) {
+    HANDLE hPipe;
+    UNICODE_STRING pipeName;
+    OBJECT_ATTRIBUTES objAttr;
+    IO_STATUS_BLOCK ioStatus;
+    NTSTATUS status;
+    size_t messageLen;
+
+    RtlInitUnicodeString(&pipeName, PIPE_NAME);
+    InitializeObjectAttributes(&objAttr, &pipeName, OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE, NULL, NULL);
+
+    status = ZwCreateFile(
+        &hPipe,
+        GENERIC_WRITE,
+        &objAttr,
+        &ioStatus,
+        NULL,
+        FILE_ATTRIBUTE_NORMAL,
+        0,
+        FILE_OPEN,
+        FILE_SYNCHRONOUS_IO_NONALERT,
+        NULL,
+        0
+    );
+
+    if (!NT_SUCCESS(status)) {
+        return status;
+    }
+
+    messageLen = NaiveStrlen(message);
+
+    status = ZwWriteFile(
+        hPipe,
+        NULL,
+        NULL,
+        NULL,
+        &ioStatus,
+        (PVOID)message,
+        (ULONG)messageLen,
+        NULL,
+        NULL
+    );
+
+    if (!NT_SUCCESS(status)) {
+        ;
+    }
+
+    ZwClose(hPipe);
+    return status;
+}
+
+#endif
+
+RL_UNUSED static void log_to_file(const char *message) {
+#if defined(_WIN32) && defined(NTDDI_VERSION)
+    // Windows kernel-mode: rfloga
+    NTSTATUS status = SendLogToUserMode(message);
+    if (!NT_SUCCESS(status)) {
+        TraceDtlsMiscTraceOnPort(NULL, L"rfloga_send: send fail");
+    }
+#else
+    // User mode
+    FILE *file = fopen(RL_LOG_FILE_PATH, "a");
+    if (file) {
+        fprintf(file, "%s\n", message);
+        fclose(file);
+    } else {
+        fprintf(stderr, "Failed to open log file: %s\n", RL_LOG_FILE_PATH);
+    }
+#endif
+}
+
+
+RL_UNUSED static void rflogs(const char *message) {
+    RL_SNPRINTF_FUNC(log_buffer, RL_LOG_BUFFER_SIZE, "[%s] %s", get_current_datetime(), message);
+    log_to_file(log_buffer);
+}
+RL_UNUSED static void rflogsi(const char *message, int value) {
+    RL_SNPRINTF_FUNC(log_buffer, RL_LOG_BUFFER_SIZE, "[%s] %s: %d", get_current_datetime(), message, value);
+    log_to_file(log_buffer);
+}
+RL_UNUSED static void rflogsii(const char *message, int value, int i2) {
+    RL_SNPRINTF_FUNC(log_buffer, RL_LOG_BUFFER_SIZE, "[%s] %s: %d, %d", get_current_datetime(), message, value, i2);
+    log_to_file(log_buffer);
+}
+RL_UNUSED static void rflogsiip(const char *message, int value, int i2, void *ptr) {
+    RL_SNPRINTF_FUNC(log_buffer, RL_LOG_BUFFER_SIZE, "[%s] %s: %d, %d, %p", get_current_datetime(), message, value, i2, ptr);
+    log_to_file(log_buffer);
+}
+RL_UNUSED static void rflogss(const char *message1, const char *message2) {
+    RL_SNPRINTF_FUNC(log_buffer, RL_LOG_BUFFER_SIZE, "[%s] %s: %s", get_current_datetime(), message1, message2);
+    log_to_file(log_buffer);
+}
+
+#endif // SIMPLE_LOGGER_H
+

rflog4.h

+// GPT-4o generated.
+// v2502.3
+#ifndef RFLOG_H
+#define RFLOG_H
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <time.h>
+#include <stdarg.h>
+
+#define RL_WIN_KERNEL 101
+#define RL_WIN_USER   102
+#define RL_LINUX_USER 103
+#if defined(_WIN32) && defined(NTDDI_VERSION)
+#define RL_MODE RL_WIN_KERNEL
+#elif defined(_WIN32)
+#define RL_MODE RL_WIN_USER
+#else
+#define RL_MODE RL_LINUX_USER
+#endif
+
+#if RL_MODE == RL_WIN_KERNEL
+#include <ntddk.h>
+#include <ntstrsafe.h>  // RtlStringCbPrintfA
+#define RL_SNPRINTF_FUNC RtlStringCbPrintfA
+#define RL_LOG_FILE_PATH "N/A"
+#elif RL_MODE == RL_WIN_USER
+#include <windows.h>
+#define RL_SNPRINTF_FUNC snprintf
+#define RL_LOG_FILE_PATH "C:\\rflog.txt"
+#elif RL_MODE == RL_LINUX_USER
+#include <sys/time.h>
+#define RL_SNPRINTF_FUNC snprintf
+#define RL_LOG_FILE_PATH "/tmp/rflog.txt"
+#endif
+
+#ifdef __GNUC__
+#define RL_THREAD_LOC __thread
+#define RL_UNUSED __attribute__ ((unused))
+#elif RL_MODE == RL_WIN_KERNEL
+#define RL_THREAD_LOC // TLS not supported. Avoid get_current_datatime() because it's not thread-safe.
+#define RL_UNUSED
+#else
+#define RL_THREAD_LOC __declspec( thread )
+#define RL_UNUSED
+#endif
+
+// Define static buffers
+#define RL_DATETIME_BUFFER_SIZE 64
+#define RL_LOG_BUFFER_SIZE 512
+
+RL_UNUSED static const char *get_current_datetime() {
+    static RL_THREAD_LOC char datetime_buffer[RL_DATETIME_BUFFER_SIZE];
+
+#if RL_MODE == RL_WIN_KERNEL
+    // Tested, but not in use
+    LARGE_INTEGER system_time, local_time;
+    TIME_FIELDS time_fields;
+
+    KeQuerySystemTime(&system_time);
+    ExSystemTimeToLocalTime(&system_time, &local_time);
+    RtlTimeToTimeFields(&local_time, &time_fields);
+
+    // Format the datetime string
+    RL_SNPRINTF_FUNC (datetime_buffer, RL_DATETIME_BUFFER_SIZE,
+                       "%04d-%02d-%02d %02d:%02d:%02d.%03d",
+                       time_fields.Year, time_fields.Month, time_fields.Day,
+                       time_fields.Hour, time_fields.Minute, time_fields.Second, 0); // No millisecond precision in kernel
+#elif RL_MODE == RL_WIN_USER
+        SYSTEMTIME st;
+        GetLocalTime(&st);
+        snprintf(datetime_buffer, RL_DATETIME_BUFFER_SIZE, "%04d-%02d-%02d %02d:%02d:%02d.%03d",
+                 st.wYear, st.wMonth, st.wDay, st.wHour, st.wMinute, st.wSecond, st.wMilliseconds);
+#elif RL_MODE == RL_LINUX_USER
+        struct timeval tv;
+        struct tm *tm_info;
+        gettimeofday(&tv, NULL);
+        tm_info = localtime(&tv.tv_sec);
+        snprintf(datetime_buffer, RL_DATETIME_BUFFER_SIZE, "%04d-%02d-%02d %02d:%02d:%02d.%03ld",
+                 tm_info->tm_year + 1900, tm_info->tm_mon + 1, tm_info->tm_mday,
+                 tm_info->tm_hour, tm_info->tm_min, tm_info->tm_sec, tv.tv_usec / 1000);
+#endif
+    return datetime_buffer;
+}
+
+RL_UNUSED static void log_to_file(const char *message) {
+#if RL_MODE == RL_WIN_KERNEL
+    // DebugView already has timestamp, but newline is still necessary.
+    DbgPrint("%s\n", message);
+    // DbgPrintEx(DPFLTR_DEFAULT_ID, DPFLTR_ERROR_LEVEL, "%s\n", message);
+#else
+    FILE *file = fopen(RL_LOG_FILE_PATH, "a");
+    if (file) {
+        fprintf(file, "[%s] %s\n", get_current_datetime(), message);
+        fclose(file);
+    } else {
+        fprintf(stderr, "Failed to open log file: %s\n", RL_LOG_FILE_PATH);
+    }
+#endif
+}
+
+RL_UNUSED static void rflogv(const char *fmt, ...) {
+    static RL_THREAD_LOC char log_buffer[RL_LOG_BUFFER_SIZE];
+
+    va_list args;
+    va_start(args, fmt);
+
+    RL_SNPRINTF_FUNC(log_buffer, RL_LOG_BUFFER_SIZE, fmt, args);
+    log_to_file(log_buffer);
+
+    va_end(args);
+}
+
+#endif // RFLOG_H
\ No newline at end of file