CSR_API_CONNECTINFO

The CSR_API_CONNECTINFO structure is the connection information that a client process of the CSRSS.EXE server supplies to the NtConnectPort function when hoping to connect to the server. CSRSRV.DLL in the CSRSS.EXE process receives this data as the ConnectionRequest in a CSR_API_MSG whose PORT_MESSAGE header has LPC_CONNECTION_REQUEST (0x000A) as its Type.

Documentation Status

The CSR_API_CONNECTINFO structure is not documented. Neither is Microsoft known to have disclosed a C-language definition in any header from any publicly available kit for any sort of software development. Type information for the CSR_API_CONNECTINFO is in public symbol files for CSRSS.EXE in Windows Vista only. Earlier type information is known in a statically linked library, named GDISRVL.LIB, which Microsoft published with the Device Driver Kit (DDK) for Windows NT 3.51.

Variability

The following changes of size are known:

Layout

These sizes and the names and types in the table that follows are from type information in public symbol files (or such as would ordinarily be in public symbol files) for versions 3.51 and 6.0. What’s known of Microsoft’s names and types for other versions is something of a guess, being inferred from what use CSRSRV is seen to make of the structure. Where use of a member corresponds closely with that of a version for which Microsoft’s symbols are available, it seems reasonable to suppose continuity. Some use, however, has no correspondence, the code having changed too much. Even where the use hasn’t changed, tracking it down exhaustively would be difficult, if not impossible, even with source code.

ULONG ExpectedVersion;

ULONG CurrentVersion;

HANDLE ObjectDirectory;

PVOID SharedSectionBase;

PVOID SharedStaticServerData;

PVOID SharedSectionHeap;

ULONG DebugFlags;

ULONG SizeOfPebData;

ULONG SizeOfTebData;

ULONG NumberOfServerDllNames;

PVOID ServerProcessId;