Windows核心编程：第5章 作业

Github

https://github.com/gongluck/Windows-Core-Program.git

//第5章 作业.cpp: 定义应用程序的入口点。
//

#include "stdafx.h"
#include "第5章 作业.h"

int APIENTRY wWinMain(_In_ HINSTANCE hInstance,
                     _In_opt_ HINSTANCE hPrevInstance,
                     _In_ LPWSTR    lpCmdLine,
                     _In_ int       nCmdShow)
{
    //在调试一个作业(Job)程序时发现，如下代码总是返回TRUE，无论是从VS中启动调试还是从资源管理器中启动。
    //原来，从资源管理器或者VS中启动程序时，系统会自动把该进程放到一个作业(Job)中。知道了这一点，要想让这段代码返回FALSE，只要从CMD中启动该程序即可。
    BOOL bInJob;
    IsProcessInJob(GetCurrentProcess(), NULL, &bInJob);
    if (bInJob)
        MessageBox(nullptr, TEXT("process already in a job"), TEXT("info"), MB_OK);
    else
        MessageBox(nullptr, TEXT("process not in a job"), TEXT("info"), MB_OK);

    BOOL bret;
    HANDLE hJob = CreateJobObject(nullptr, TEXT("第5章 作业"));
    JOBOBJECT_BASIC_LIMIT_INFORMATION basiclimit = { 0 };
    //作业(进程沙盒)限制
    //JobObjectBasicLimitInformation、JobObjectExtendedLimitInformation、JobObjectBasicUIRestrictions、JobObjectSecurityLimitInformation
    //UserHandleGrantAccess授予或禁止一个Job中的进程访问施加了UI限制的用户对象的句柄的权限.当授予了访问权限，所有相关联的进程都可以在随后识别和使用这个句柄.当访问被拒绝，该进程不能在使用该句柄.
    basiclimit.LimitFlags = JOB_OBJECT_LIMIT_PRIORITY_CLASS | JOB_OBJECT_LIMIT_JOB_TIME;
    basiclimit.PriorityClass = IDLE_PRIORITY_CLASS;//指定关联进程的优先级类
    basiclimit.PerJobUserTimeLimit.QuadPart = 100000;//分配给进程的最大用户模式时间（100纳秒）
    bret = SetInformationJobObject(hJob, JobObjectBasicLimitInformation, &basiclimit, sizeof(basiclimit));
    bret = QueryInformationJobObject(hJob, JobObjectBasicLimitInformation, &basiclimit, sizeof(basiclimit), nullptr);
    JOBOBJECT_END_OF_JOB_TIME_INFORMATION endoftime;
    endoftime.EndOfJobTimeAction = JOB_OBJECT_POST_AT_END_OF_JOB;//到期不终止进程(If no completion port is associated with the job when the time limit has been exceeded, the action taken is the same as for JOB_OBJECT_TERMINATE_AT_END_OF_JOB。)JOB_OBJECT_TERMINATE_AT_END_OF_JOB（到期终止进程）
    bret = SetInformationJobObject(hJob, JobObjectEndOfJobTimeInformation, &endoftime, sizeof(endoftime));
    bret = QueryInformationJobObject(hJob, JobObjectEndOfJobTimeInformation, &endoftime, sizeof(endoftime), nullptr);

    //将进程放入作业中,只能添加未运行的“无业”进程
    STARTUPINFO si = { 0 };
    si.cb = sizeof(si);
    PROCESS_INFORMATION pi = { 0 };
    bret = CreateProcess(TEXT("C:\\WINDOWS\\SYSTEM32\\NOTEPAD.EXE"), nullptr,  nullptr, nullptr, FALSE, CREATE_SUSPENDED, nullptr, nullptr, &si, &pi);
    bret = AssignProcessToJobObject(hJob, pi.hProcess);
    ResumeThread(pi.hThread);

    //查询作业(进程)统计信息
    JOBOBJECT_BASIC_ACCOUNTING_INFORMATION accountinfo = { 0 };
    bret = QueryInformationJobObject(hJob, JobObjectBasicAccountingInformation, &accountinfo, sizeof(accountinfo), nullptr);
    FILETIME c, e, k, u;
    bret = GetProcessTimes(pi.hProcess, &c, &e, &k, &u);
    JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION ioaccountinfo = { 0 };
    bret = QueryInformationJobObject(hJob, JobObjectBasicAndIoAccountingInformation, &ioaccountinfo, sizeof(ioaccountinfo), nullptr);
    IO_COUNTERS ioconters;
    bret = GetProcessIoCounters(pi.hProcess, &ioconters);

    //查询作业内进程
    const int max = 10;
    DWORD cb = sizeof(JOBOBJECT_BASIC_PROCESS_ID_LIST) + (max - 1) * sizeof(ULONG_PTR);
    PJOBOBJECT_BASIC_PROCESS_ID_LIST pidlist = (PJOBOBJECT_BASIC_PROCESS_ID_LIST)malloc(cb);
    pidlist->NumberOfAssignedProcesses = max;
    bret = QueryInformationJobObject(hJob, JobObjectBasicProcessIdList, pidlist, cb, &cb);
    for (int i = 0; i < pidlist->NumberOfProcessIdsInList; ++i)
    {
        pidlist->ProcessIdList[i];
    }
    free(pidlist);
    pidlist = nullptr;

    //已分配的CPU时间到期时，作业状态变成已触发
    WaitForSingleObject(hJob, INFINITE);

    system("pause");

    //终止作业中所有的进程
    bret = TerminateJobObject(hJob, 0);

    CloseHandle(pi.hProcess);
    pi.hProcess = nullptr;
    CloseHandle(pi.hThread);
    pi.hThread = nullptr;
    system("pause");
    return 0;
}