Stack based file object queries.

NTFSD
1

Hi All,

I want to know, what is stack based file object?
In my minifilter, I am using file object from post-create callback for reading file, I used IoGetStackLimit to check if it is stack based file object or not.

How can I generate scenario to get stack based file object in post-create callback?

Thanks in advance.

Regards,
Sujay.

2

> I want to know, what is stack based file object?

It is what it says. It harks back to a different time (when NT was supposed
to boot in was it 64Mb of memory?) and cycles counted.

Anyway they were supposed to be removed in Vista (but weren’t) but I
haven’t seen one since then.

My suggestion is to add the code - just in case. Things like this have a
habit of creeping back when the next generation things of it as a wizard
wheeze (thank you George Santayana). Force the path once in the debugger and
be done.

Unless of course you have an XP machine to hand.

3

> I used IoGetStackLimit to check if it is stack based file object or not.

It works until an upper filter switches the stack.