I am writing a minifilter driver and user mode app to replace a reparse point file with real target file. Assume c:\temp\a.doc is a reparse point file. User double clicks it in file explorer. The minifilter gets a call with GENERIC_READ on PreCreate or PostCreate event. I will read out the reparse file info and send it to the user mode app. Wait for user mode app to replace the reparse point file with a real document (say from c:\worddocs\a.doc, a real word document). Then go on.
My questions are very simple:
1) Which event is the best to achieve this job ?
2) How can I wait for user mode app finishing replacing the file ? So minifilter should wait by notifying user mode app; user mode copies a file; the user mode notifies minifilter; then minifilter goes on.
Desperately need your expertise.
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Writing WDF Drivers||21 Oct 2019||OSR Seminar Space & ONLINE|
|Internals & Software Drivers||18 Nov 2019||Dulles, VA|
|Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||27 Apr 2020||OSR Seminar Space & ONLINE|