I’m hoping that someone who was at a recent plugfest and who scribbles
faster than I can remember this:
There is a funky new API available to get around an annoying interaction
between the verifier and the IO subsystem. It is to do with the fact that
an FSD (and indeed a filter) is allowed to trash FileObject->FileName prior
to issuing a STATUS_REPARSE. The trouble with this is that the
allocate/deallocate now spans drivers and so verifier can get itself quite
agitated by that (giving back memory you didn’t allocate).
I remember Sarosh talking about it, but now I come to look it up I cannot
find any reference.
Anyone?