Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

File contexts and hard links

Dejan_MaksimovicDejan_Maksimovic Member - All Emails Posts: 239
via Email in NTFSD
Do FLT FILE CONTEXTs register per hard link or per "file"?

Comments

  • rod_widdowsonrod_widdowson Member - All Emails Posts: 1,045
    edited March 20

    Pretty sure that they are per file (per inode if you like).

    The FILE_CONTEXTS hang off a PVOID* which is plugged into the FSRTL_ADVANCED_FILE_SYSTEM_HEADER and that pretty much by definition is to do the the stream and not the DIRENT

  • Dejan_MaksimovicDejan_Maksimovic Member - All Emails Posts: 239
    via Email
    Sure, but how does that plug into hard links, in practice?
    I presumed per node also, meaning all hard links share the same
    FLT_FILE_CONTEXT.
  • rod_widdowsonrod_widdowson Member - All Emails Posts: 1,045
    edited March 20

    all hard links share the same

    I cannot see how they couldn't, but its an easy test.

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Developing Minifilters 29 July 2019 OSR Seminar Space
Writing WDF Drivers 23 Sept 2019 OSR Seminar Space
Kernel Debugging 21 Oct 2019 OSR Seminar Space
Internals & Software Drivers 18 Nov 2019 Dulles, VA