g_log() accelerated by 'captive_debug_messages_disabled' slave global flag.
[captive.git] / src / libcaptive / client / init.c
index 27cdb6f..a2459e4 100644 (file)
@@ -1,6 +1,6 @@
 /* $Id$
  * Init and cleanup code of libcaptive to be called by client application
- * Copyright (C) 2002 Jan Kratochvil <project-captive@jankratochvil.net>
+ * Copyright (C) 2002-2003 Jan Kratochvil <project-captive@jankratochvil.net>
  * 
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
 
 #include "config.h"
 
-#include "captive/client.h"    /* self */
+#include "init.h"      /* self */
 #include "captive/ldr.h"
 #include "captive/ldr_exports.h"
 #include "captive/unicode.h"
-#include "captive/file.h"
+#include "captive/rtl-file.h"
 #include <glib/gtypes.h>
 #include <glib/gmessages.h>
 #include "reactos/internal/ldr.h"
 #include <fcntl.h>
 #include <sys/mman.h>  /* for PROT_READ, MAP_SHARED */
 #include "reactos/ddk/kefuncs.h"       /* for KeInitializeSpinLock() */
-#include "reactos/internal/ntoskrnl.h" /* for RtlpInitNlsTables() and IoInit() */
+#include "reactos/internal/ntoskrnl.h" /* for IoInit() */
 #include "reactos/internal/ps.h"       /* for PsInitProcessManagment() and PsInitThreadManagment() */
 #include "reactos/ddk/iofuncs.h"       /* for IoCreateFile() */
+#include "captive/storage.h"
+#include "captive/signal.h"    /* for captive_signal_init() */
+#include "reactos/ddk/psfuncs.h"       /* for PsGetCurrentThread() */
+#include <stdio.h>
+#include <popt.h>
+#include <glib/gstrfuncs.h>
+#include <glib/glist.h>
+#include "giochannel-blind.h"
+#include <glib-object.h>
+#include "reactos/internal/se.h"       /* for SeInit2() */
+#include "captive/leave.h"
+#include "captive/options.h"
+#include <libgnomevfs/gnome-vfs-result.h>
+#include "lib.h"
+#include <reactos/ddk/obfuncs.h>
+#include <syslog.h>
+#include "captive/macros.h"
 
 
+struct captive_options *captive_options;
+
 /* Are we initialized? */
 static gboolean active;
 
-/* Module of fs module itself loaded by captive_init(fs_path) */
+/* Module of fs module itself loaded by captive_w32_init() */
 static PMODULE_OBJECT ModuleObject;
 
-/* Driver in fs module loaded by captive_init(fs_path) */
-static DRIVER_OBJECT DriverObject;
+/* Driver in fs module loaded by captive_w32_init() */
+DRIVER_OBJECT captive_DriverObject;
+PDRIVER_REINITIALIZE captive_DriverObject_ReinitRoutine;
+PVOID captive_DriverObject_ReinitRoutine_Context;
 
-/* Handle for the root directory of the mounted volume */
-static HANDLE root_Handle;
+/* Structure holding the pointer to the toplevel IRP */
+static TOP_LEVEL_IRP TopLevelIrp;      /* TODO:thread */
 
-/**
- * captive_init:
- * @fs_path: #utf8 pathname to %.sys filesystem module file
- *
- * Initializes %libcaptive and loads the specified filesystem.
- *
- * Returns: %TRUE if successfuly loaded.
- */
-gboolean captive_init(const gchar *fs_path)
+
+void *_local_unwind2_addr;
+
+
+gboolean captive_debug_messages_disabled=FALSE;
+
+static gboolean captive_w32_init(void)
 {
 NTSTATUS err;
-OBJECT_ATTRIBUTES root_ObjectAttributes;
-IO_STATUS_BLOCK root_IoStatusBlock;
+gboolean errbool;
 
-#ifdef MAINTAINER_MODE
-       g_log_set_always_fatal(~(0
-                       |G_LOG_LEVEL_MESSAGE
-                       |G_LOG_LEVEL_INFO
-                       |G_LOG_LEVEL_DEBUG
-                       ));
-#endif
+       g_return_val_if_fail(captive_options!=NULL,FALSE);
+       g_return_val_if_fail(captive_options->filesystem.type!=CAPTIVE_OPTIONS_MODULE_TYPE_EMPTY,FALSE);
 
-       g_return_val_if_fail(fs_path!=NULL,FALSE);
-       g_return_val_if_fail(active==FALSE,FALSE);
+       /* captive_giochannel_size() only _after_ g_io_channel_set_encoding() ! */
+       captive_image_size=captive_giochannel_size(captive_image_iochannel);
+       g_return_val_if_fail(captive_image_size>0,FALSE);
 
        /* Part of reactos/ntoskrnl/ke/main.c/KiSystemStartup() begins. */
        /* ExpInitializeExecutive(); */
@@ -83,12 +97,21 @@ IO_STATUS_BLOCK root_IoStatusBlock;
                        /* Part of reactos/ntoskrnl/ldr/loader.c/LdrInit1() begins. */
                        InitializeListHead(&ModuleTextListHead);
                        /* Part of reactos/ntoskrnl/ldr/loader.c/LdrInit1() ends. */
+               KeLowerIrql(DISPATCH_LEVEL);
                /*...*/
-               /* create default nls tables */
-               RtlpInitNlsTables();
+               /* FIXME: create default nls tables? Really still needed? */
+               /* Obsolete: RtlpInitNlsTables(); */
                /*...*/
+               /* KeInit2() */
+                       /*...*/
+                       KeInitializeDispatcher();
+                       /*...*/
+               KeLowerIrql(PASSIVE_LEVEL);
+               errbool=SeInit1();
+               g_assert(errbool==TRUE);
                ObInit();
-               /*...*/
+               errbool=SeInit2();
+               g_assert(errbool==TRUE);
                /* PiInitProcessManager(); */
                        /* Part of reactos/ntoskrnl/ps/psmgr.c/PiInitProcessManager() begins. */
                        PsInitProcessManagment();
@@ -106,81 +129,424 @@ IO_STATUS_BLOCK root_IoStatusBlock;
                        InitializeListHead(&ModuleListHead);
                        KeInitializeSpinLock(&ModuleListLock);
                        /* Part of reactos/ntoskrnl/ldr/loader.c/LdrInitModuleManagement ends. */
+               /*...*/
+               /* Ntinit(); */
+                       NtInitializeEventImplementation();
+                       /*...*/
                /* Part of reactos/ntoskrnl/ke/main.c/ExpInitializeExecutive() ends. */
        /* Part of reactos/ntoskrnl/ke/main.c/KiSystemStartup() ends. */
 
-       /* Simulate our PE headers and export the symbols of {NTOSKRNL,HAL} */
+       /* Simulate our PE headers and export the symbols of our complete libraries */
        captive_kernel_exports();
 
+       errbool=captive_cdrom_init();
+       g_return_val_if_fail(errbool==TRUE,FALSE);
+       errbool=captive_disk_init();
+       g_return_val_if_fail(errbool==TRUE,FALSE);
+
+       while (captive_options->load_module) {
+PMODULE_OBJECT ModuleObject_tmp;
+NTSTATUS err;
+
+               /* load the module */
+               err=captive_LdrLoadModule(
+                               captive_options->load_module->data,
+                               &ModuleObject_tmp);     /* ModuleObjectp */
+               g_return_val_if_fail(NT_SUCCESS(err),FALSE);
+
+               captive_options_module_free(captive_options->load_module->data);
+               /* also frees 'options->load_module->data' */
+               captive_options->load_module=g_list_delete_link(captive_options->load_module,captive_options->load_module);
+               }
+
+       /* Patch 'ntoskrnl.exe' loaded by 'captive_options->load_module' above. */
+       {
+       CHAR *KeNumberProcessorsp=captive_Module_GetExportAddress("ntoskrnl.exe","KeNumberProcessors");
+       
+               g_assert(*KeNumberProcessorsp==0);
+               *KeNumberProcessorsp=KeNumberProcessors;
+               g_assert(*KeNumberProcessorsp==1);
+               }
+       /* Apply captive_kernel_patches() AFTER any symbols sanity checks above! */
+       captive_kernel_patches();
+
+       _local_unwind2_addr=captive_Module_GetExportAddress("ntoskrnl.exe","_local_unwind2");
+
+       /* Initialize 'FsRtlLegalAnsiCharacterArray'.
+        * It requires 'ntoskrnl.exe' loaded by 'captive_options->load_module' above;
+        * captive_kernel_patches() should not be needed.
+        */
+       captive_FsRtlLegalAnsiCharacterArray_init();
+
+       /* set TopLevelIrp() - FIXME: where is it set by native reactos? */
+       PsGetCurrentThread()->TopLevelIrp=&TopLevelIrp; /* otherwise Io{Get,Set}TopLevelIrp() would SIGSEGV */
+
+       /* Begin possible handling of foreign W32 binary code here */
+       /* If you want to disable SIGSEGV handler if not needed:
+        *      if (ModuleObject->Flags & MODULE_FLAG_PE)
+        */
+       captive_signal_init();
+
+       /* You must have already captive_signal_init() passed here as the module may
+        * call some functions from W32 ntoskrnl.exe.
+        */
+       captive_DriverObject_ReinitRoutine=NULL;
        err=captive_LdrpLoadAndCallImage(
                        &ModuleObject,  /* ModuleObjectp */
-                       captive_utf8_to_UnicodeString_alloca(fs_path),  /* ModuleName */
-                       &DriverObject,  /* DriverEntry_DriverObject */
+                       &captive_options->filesystem,   /* options_module */
+                       &captive_DriverObject,  /* DriverEntry_DriverObject */
                        captive_utf8_to_UnicodeString_alloca("\\captive\\filesystem")); /* DriverEntry_RegistryPath */
        g_return_val_if_fail(NT_SUCCESS(err),FALSE);
-       
-       /* Do not supply plain "\\Cdfs" as 'ObjectName' as
-        * IoCreateFile()->ObCreateObject()->ObFindObject()
-        * would leave 'ObCreateObject::RemainingPath' as NULL
-        * and later IopCreateFile() would consider it FO_DIRECT_DEVICE_OPEN (w/o mount)
+       if (captive_DriverObject_ReinitRoutine) {
+               captive_stdcall_call_12((CaptiveStdCallFunc12)captive_DriverObject_ReinitRoutine,
+                               &captive_DriverObject,  /* DriverObject */
+                               captive_DriverObject_ReinitRoutine_Context,     /* Context */
+                               (gpointer)1);   /* Count: # of calls of ReinitRoutine incl. the current one */
+               }
+
+       return TRUE;
+}
+
+
+static void    captive_log_init_g_log_func_discard
+               (const gchar *log_domain,GLogLevelFlags log_level,const gchar *message,gpointer user_data)
+{
+       g_return_if_fail(message!=NULL);
+
+       /* NOP */
+}
+
+static void captive_log_init_g_log_func
+               (const gchar *log_domain,GLogLevelFlags log_level,const gchar *message,gpointer user_data /* unused */)
+{
+int priority;
+
+       g_return_if_fail(message!=NULL);
+
+               /* unused: LOG_EMERG */
+               /* unused: LOG_ALERT */
+       /**/ if (log_level&G_LOG_LEVEL_ERROR)
+               priority=LOG_CRIT;
+       else if (log_level&G_LOG_LEVEL_CRITICAL)
+               priority=LOG_ERR;
+       else if (log_level&G_LOG_LEVEL_WARNING)
+               priority=LOG_WARNING;
+       else if (log_level&G_LOG_LEVEL_MESSAGE)
+               priority=LOG_NOTICE;
+       else if (log_level&G_LOG_LEVEL_INFO)
+               priority=LOG_INFO;
+       else if (log_level&G_LOG_LEVEL_DEBUG)
+               priority=LOG_DEBUG;
+       else /* bogus? */
+               priority=LOG_WARNING;
+
+       syslog(priority,"%s%s%s",
+                       (!(log_level&G_LOG_FLAG_RECURSION) ? "" : "RECURSION: "),
+                       (!(log_level&G_LOG_FLAG_FATAL    ) ? "" : "FATAL: "),
+                       message);
+}
+
+void captive_log_init(const struct captive_options *captive_options)
+{
+       g_return_if_fail(captive_options!=NULL);
+
+       /* FIXME: Fix sharing of different 'debug_messages' for various sandboxes. */
+       captive_debug_messages_disabled=!captive_options->debug_messages;
+
+       /* FIXME: Fix sharing of different 'debug_messages' for various sandboxes. */
+       if (!captive_options->debug_messages) {
+               /* FIXME: Save handler_id and destroy it in captive_vfs_close(). */
+               g_log_set_handler(
+                               G_LOG_DOMAIN,   /* log_domain; "Captive" */
+                               0       /* log_levels */
+                                               | G_LOG_FLAG_RECURSION
+                                               | G_LOG_FLAG_FATAL
+                                               /* The same mask is in:
+                                                * libcaptive/sandbox/server-GLogFunc.c
+                                                * libcaptive/client/init.c
+                                                */
+                                               | G_LOG_LEVEL_MESSAGE
+                                               | G_LOG_LEVEL_INFO
+                                               | G_LOG_LEVEL_DEBUG,
+                               captive_log_init_g_log_func_discard,    /* log_func */
+                               NULL);  /* user_data */
+               }
+       /* We are not the sandboxed slave;
+        * 'syslog_facility' would be '-1' in slave anyway as it is not transferred through CORBA.
         */
-       InitializeObjectAttributes(
-                       &root_ObjectAttributes, /* InitializedAttributes */
-                       captive_utf8_to_UnicodeString_alloca("\\Cdfs\\."),      /* ObjectName */
-                       0,      /* Attributes; I hope no OBJ_KERNEL_HANDLE as we are 'system process' */
-                       NULL,   /* RootDirectory */
-                       NULL);  /* SecurityDescriptor; ignored */
+       if (!captive_options->sandbox || (captive_options->sandbox_server_argv || captive_options->sandbox_server_ior)) {
+               if (captive_options->syslog_facility!=-1) {
+                       openlog(
+                                       /* FIXME: Prefix 'ident' by device/mountpoint. */
+                                       G_LOG_DOMAIN,   /* ident; "Captive"; FIXME: lowercase it for syslog(3)? */
+                                       LOG_CONS|LOG_PID,       /* options */
+                                       captive_options->syslog_facility);      /* facility */
+                       /* FIXME: Save handler_id and destroy it in captive_vfs_close(). */
+                       g_log_set_handler(
+                                       G_LOG_DOMAIN,   /* log_domain; "Captive" */
+                                       0       /* log_levels */
+                                                       | 0     /* !G_LOG_FLAG_RECURSION */
+                                                       | G_LOG_FLAG_FATAL
+                                                       | (G_LOG_LEVEL_MASK & ~(captive_options->debug_messages ? 0 : 0
+                                                                       /* The same mask is in:
+                                                                        * libcaptive/sandbox/server-GLogFunc.c
+                                                                        * libcaptive/client/init.c
+                                                                        */
+                                                                       | G_LOG_LEVEL_MESSAGE
+                                                                       | G_LOG_LEVEL_INFO
+                                                                       | G_LOG_LEVEL_DEBUG)),
+                                       (GLogFunc)captive_log_init_g_log_func,  /* log_func */
+                                       NULL);  /* user_data */
+                       }
+               }
+}
 
+/**
+ * captive_init:
+ *
+ * Expects #captive_options: Parsed by captive_options_parse().
+ * %NULL value is forbidden. Field #image_iochannel %NULL value is forbidden.
+ *
+ * Initializes %libcaptive and loads the specified filesystem.
+ *
+ * Returns: %TRUE if successfuly initialized.
+ */
+gboolean captive_init(void)
+{
+gboolean errbool;
+
+       /* We are in sandbox child and we have the right to fail. */
+       g_log_set_always_fatal(~(0
+                       |G_LOG_LEVEL_MESSAGE
+                       |G_LOG_LEVEL_INFO
+                       |G_LOG_LEVEL_DEBUG
+                       ));
+
+       g_return_val_if_fail(active==FALSE,FALSE);
+
+       g_return_val_if_fail(captive_options!=NULL,FALSE);
+       g_return_val_if_fail(captive_options->image_iochannel!=NULL,FALSE);
+
+       /* Initialize GObject subsystem of GLib. */
+       g_type_init();
+
+       captive_log_init(captive_options);
+
+       if (captive_options->rwmode==CAPTIVE_OPTION_RWMODE_BLIND)
+               captive_image_iochannel=(GIOChannel *)captive_giochannel_blind_new(captive_options->image_iochannel,
+                               TRUE);  /* writeable */
+       else
+               captive_image_iochannel=captive_options->image_iochannel;
+
+       /* Do not initialize 'captive_image_size' by captive_giochannel_size() here
+        * as we yet need to do g_io_channel_set_encoding().
+        */
+
+       errbool=captive_w32_init();
+       g_return_val_if_fail(errbool==TRUE,FALSE);
+
+       active=TRUE;
+       return TRUE;
+}
+
+
+static void dismount_volume(void)
+{
+IO_STATUS_BLOCK IoStatusBlock;
+PIO_STACK_LOCATION StackPtr;
+PIRP Irp;
+NTSTATUS Status;
+DEVICE_OBJECT *DeviceObject=captive_DriverObject.DeviceObject;
+OBJECT_ATTRIBUTES dir_ObjectAttributes;
+HANDLE dir_Handle;
+FILE_OBJECT *FileObject;
+GnomeVFSResult errvfsresult;
+NTSTATUS err;
+IO_STATUS_BLOCK dir_IoStatusBlock;
+#if 0
+static const ULONG fsctls[2]={ FSCTL_LOCK_VOLUME,FSCTL_DISMOUNT_VOLUME };
+int fsctlsi;
+#endif
+WCHAR wzero;
+
+       errvfsresult=captive_ObjectAttributes_init("/!Captive!del",&dir_ObjectAttributes);
+       g_return_if_fail(errvfsresult==GNOME_VFS_OK);
+       
        /* wanted: * IoCreateFile()->ObCreateObject(,,,IoFileObjectType)->
         * ->(IoFileObjectType->Create==IopCreateFile)()->IoMountVolume()
         */
+       CAPTIVE_MEMZERO(&dir_IoStatusBlock);    /* FIXME: Try to pre-clear it - uninitialized otherwise? */
+       dir_IoStatusBlock.Information=FILE_OPENED;      /* FIXME: Try to pre-set it - uninitialized otherwise? */
        err=IoCreateFile(
-                       &root_Handle,   /* FileHandle */
-                       FILE_LIST_DIRECTORY,    /* DesiredAccess */
-                       &root_ObjectAttributes, /* ObjectAttributes */
-                       &root_IoStatusBlock,    /* IoStatusBlock */
+                       &dir_Handle,    /* FileHandle */
+                       GENERIC_READ|GENERIC_WRITE|SYNCHRONIZE|0x80,    /* DesiredAccess; 0xC0100080=GENERIC_READ|GENERIC_WRITE|SYNCHRONIZE|0x80 */
+                       &dir_ObjectAttributes,  /* ObjectAttributes */
+                       &dir_IoStatusBlock,     /* IoStatusBlock */
                        NULL,   /* AllocationSize; ignored for open */
                        FILE_ATTRIBUTE_NORMAL,  /* FileAttributes; ignored for open */
-                       0,      /* ShareAccess; 0 means exclusive */
+                       (FILE_SHARE_READ | FILE_SHARE_WRITE),   /* ShareAccess; 0 means exclusive */
                        FILE_OPEN,      /* CreateDisposition */
-                       FILE_DIRECTORY_FILE,    /* CreateOptions */
+                       /* FILE_SYNCHRONOUS_IO_{,NON}ALERT: We need to allow W32 filesystem
+                        * any waits to not to let it return STATUS_CANT_WAIT us.
+                        * Alertability should have only effect on asynchronous events
+                        * from KeWaitForSingleObject() by setting/clearing its parameter 'Alertable'.
+                        */
+                       FILE_SYNCHRONOUS_IO_NONALERT | FILE_NON_DIRECTORY_FILE, /* CreateOptions; FILE_DIRECTORY_FILE is forbidden */
                        NULL,   /* EaBuffer */
                        0,      /* EaLength */
                        CreateFileTypeNone,     /* CreateFileType */
                        NULL,   /* ExtraCreateParameters */
                        0);     /* Options */
-       g_return_val_if_fail(NT_SUCCESS(err),FALSE);
-       g_return_val_if_fail(NT_SUCCESS(root_IoStatusBlock.Status),FALSE);
-       g_return_val_if_fail(root_IoStatusBlock.Information==FILE_OPENED,FALSE);
+       g_free(dir_ObjectAttributes.ObjectName);        /* left from captive_gnomevfs_uri_parent_init() */
+       g_return_if_fail(NT_SUCCESS(err));
+       g_return_if_fail(NT_SUCCESS(err)==NT_SUCCESS(dir_IoStatusBlock.Status));
+       g_return_if_fail(dir_IoStatusBlock.Information==FILE_OPENED);
 
+       Status=ObReferenceObjectByHandle(dir_Handle,FILE_LIST_DIRECTORY,IoFileObjectType,UserMode,(PVOID *)&FileObject,NULL);
+       g_assert(NT_SUCCESS(Status));
 
-       active=TRUE;
-       return TRUE;
+       g_assert(FileObject->FileName.Length==0);
+       /* 'FileObject->FileName.MaximumLength' is not reset by IoCreateFile(). */
+       g_assert(FileObject->FileName.Buffer==NULL);
+       FileObject->FileName.MaximumLength=2;
+       FileObject->FileName.Buffer=&wzero;
+
+#if 0
+       for (fsctlsi=0;fsctlsi<2;fsctlsi++)
+#endif
+       {
+               Irp=IoAllocateIrp(DeviceObject->StackSize,TRUE);
+               g_return_if_fail(Irp!=NULL);
+
+               Irp->UserIosb=&IoStatusBlock;
+               Irp->UserEvent=&FileObject->Event;
+               Irp->Tail.Overlay.Thread=PsGetCurrentThread();
+
+               StackPtr=IoGetNextIrpStackLocation(Irp);
+#if 0
+               StackPtr->MajorFunction=IRP_MJ_FILE_SYSTEM_CONTROL;
+               StackPtr->MinorFunction=IRP_MN_USER_FS_REQUEST;
+#else
+               StackPtr->MajorFunction=IRP_MJ_FLUSH_BUFFERS;
+#endif
+               StackPtr->Flags=0;
+               StackPtr->Control=0;
+               StackPtr->DeviceObject=DeviceObject;    /* FIXME: FileObject->Vpb->DeviceObject ? */
+               StackPtr->FileObject=FileObject;
+               StackPtr->CompletionRoutine=NULL;
+
+#if 0
+               StackPtr->Parameters.FileSystemControl.OutputBufferLength=0;
+               StackPtr->Parameters.FileSystemControl.InputBufferLength=0;
+               StackPtr->Parameters.FileSystemControl.FsControlCode=fsctls[fsctlsi];
+               StackPtr->Parameters.FileSystemControl.Type3InputBuffer=NULL;
+#endif
+
+               /* IoCallDriver() will do one ObDereferenceObject(FileObject)
+                * in its IoSecondStageCompletion().
+                * Do not leave to dereference it itself as we need its 'FileObject->Event'.
+                */
+               ObReferenceObject(FileObject);
+
+               Status=IoCallDriver(DeviceObject,Irp);
+               if (Status==STATUS_PENDING) {
+                       KeWaitForSingleObject(&FileObject->Event,Executive,KernelMode,FALSE,NULL);
+                       Status=IoStatusBlock.Status;
+                       }
+               g_assert(NT_SUCCESS(Status)
+                               || (Status==STATUS_MEDIA_WRITE_PROTECTED && captive_options->rwmode==CAPTIVE_OPTION_RWMODE_RO));
+       }
+
+       ObDereferenceObject(FileObject);
 }
 
 
+BOOLEAN captive_cc_FileObject_delete(FILE_OBJECT *FileObject);
+void captive_cc_flush(void);
+
 /**
- * captive_cleanup:
- *
- * Closes #libcaptive. Frees any used system resources. You are forbidden
- * to touch any #libcaptive data or funtions before a new captive_init()
- * is done. Forbidden to call it before successful captive_init() is done.
+ * captive_shutdown:
  *
- * Currently this function IS NOT IMPLEMENTED.
+ * Closes down %libcaptive. It should flush all pending buffers and successfuly
+ * close the filesystem. Variable #captive_options->image_iochannel will not be set to %NULL,
+ * you should close such channel yourself.
  *
- * Returns: %TRUE if the successful resource cleanup was done during the call.
+ * Returns: %TRUE if successfuly shutdown.
  */
-gboolean captive_cleanup(void)
+gboolean captive_shutdown(void)
 {
-NTSTATUS err;
+GIOStatus erriostatus;
 
        g_return_val_if_fail(active==TRUE,FALSE);
+       g_return_val_if_fail(captive_image_iochannel!=NULL,FALSE);
+       g_return_val_if_fail(captive_options->image_iochannel!=NULL,FALSE);
+
+       /* Invoke all pending idle functions just to not to forget for anything... */
+       while (g_main_context_iteration(
+                       NULL,   /* context; NULL means default one */
+                       FALSE)) /* may_block */
+               g_log(G_LOG_DOMAIN,G_LOG_LEVEL_DEBUG,"%s: g_main_context_iteration() proceeded",G_STRLOC);
+
+       /* Do not: captive_cc_flush();  * based on captive_leave(), not g_main idle *
+        * replaced by IRP_MJ_FLUSH_BUFFERS.
+        */
+
+       dismount_volume();
+
+       /* Invoke all pending idle functions just to not to forget for anything... */
+       while (g_main_context_iteration(
+                       NULL,   /* context; NULL means default one */
+                       FALSE)) /* may_block */
+               g_log(G_LOG_DOMAIN,G_LOG_LEVEL_DEBUG,"%s: g_main_context_iteration() proceeded",G_STRLOC);
+
+#if 0
+       captive_PoQueueShutdownWorkItem_hooklist_invoke();
+#endif
+
+       /* Do not: captive_cc_flush();
+        * as the dirty blocks should have been already commited by dismount_volume(),
+        * any further commits would get us just STATUS_VOLUME_DISMOUNTED.
+        */
+
+       /* Do not: captive_cc_unmounting=TRUE;
+        * Without dismount_volume() it was:
+        *      During IoShutdownRegisteredFileSystems() - IRP_MJ_SHUTDOWN to be specific
+        *      some buffers will be written but after the IofCallDriver() it will be
+        *      no longer possible to flush such buffers to their DeviceVolumeFile.
+        *      Therefore we must flush such buffers on the fly although such behaviour
+        *      would crash us in regular case as filesystems access BCBs even after their
+        *      CcUnpinData().
+        * Currently the dirty blocks should have been already commited by dismount_volume(),
+        */
+
+       /* FIXME: ntoskrnl/ex/power.c/NtShutdownSystem() does
+        * IoShutdownRegistered{Devices,FileSystems} order; is it correct?
+        */
+       IoShutdownRegisteredFileSystems();
+
+       /* Do not: captive_cc_FileObject_delete(NULL);
+        * as the dirty blocks should have been already commited by dismount_volume(),
+        * any further commits would get us just STATUS_VOLUME_DISMOUNTED.
+        */
+
+       IoShutdownRegisteredDevices();
+
+       /* libcaptive is not authorized to shutdown 'captive_image_channel'. */
+       erriostatus=g_io_channel_flush(
+                       captive_image_iochannel,        /* channel */
+                       NULL);  /* error */
+       g_assert(erriostatus==G_IO_STATUS_NORMAL);
 
-       err=LdrUnloadModule(ModuleObject);
-       g_assert(NT_SUCCESS(err));
+       /* 'captive_image_iochannel' may be blinded wrapper of 'captive_options->image_iochannel'. */
+       if (captive_image_iochannel!=captive_options->image_iochannel) {
+               erriostatus=g_io_channel_flush(
+                               captive_options->image_iochannel,       /* channel */
+                               NULL);  /* error */
+               g_assert(erriostatus==G_IO_STATUS_NORMAL);
+               g_io_channel_unref(captive_image_iochannel);
+               }
 
-       /* captive_cleanup() NOT IMPLEMENTED */
-       g_return_val_if_reached(FALSE);
+       captive_image_iochannel=NULL;
 
        active=FALSE;
        return TRUE;