Re: minifilter context question
- From: "Don Burn" <burn@xxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 28 May 2008 16:11:05 -0400
First consider asking this sort of question at http://www.osronline.com/ on
the NTFSD news group since that is where file system people hang out. A
STREAM_CONTEXT is a per file object context, and a STREAM_HANDLE context is
per handle. Never used FILE_CONTEXT since only Vista or later support it.
--
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Website: http://www.windrvr.com
Blog: http://msmvps.com/blogs/WinDrvr
Remove StopSpam to reply
"ldick_at_Asempra.com" <ldick_at_Asempra.com@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote in message news:60DF16CB-861F-4CF2-AB73-85BB1CBB24D5@xxxxxxxxxxxxxxxx
Does the FLT_FILE_CONTEXT and the FLT_STREAM_CONTEXT support context per
FILE_OBJECT (i.e. per process) or does it track this per FCB (across
processes) ?
So if process A and process B open a file foo.txt, I will see 2
irp_mj_create calls in my minifilter. If I want to track file_context,
will
I end up with 2 contexts (one for each process) or just one context with 2
reference counts ?
What is the difference between FLT_STREAM_CONTEXT and
FLT_STREAMHANDLE_CONTEXT?
Thanks
.
- Follow-Ups:
- Re: minifilter context question
- From: Maxim S. Shatskih
- Re: minifilter context question
- Prev by Date: Re: sharing memory with user and kernel
- Next by Date: Using difx:Driver in WiX to install a device driver with subdirectories
- Previous by thread: Re: sharing memory with user and kernel
- Next by thread: Re: minifilter context question
- Index(es):
Relevant Pages
|