The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
I have an application that sends message to my minifilter using ioctl. (It's originally a legacy filter being ported to minifilter. May be later I will use the technology provided by the filter manager instead of ioctls (FltSendMessage() ...) .)
My application, using ioctl, send a file handle to my filter driver. The filter finds the FILE_OBJECT corresponding to that handle. Then I want to find some registered context I setted when I received IRP_MJ_CREATE for that FILE_OBJECT. But when I received this inside my filter driver, I don't have any PFLT_INSTANCE to use to call for instance FltGetStreamHandleContext() or FltGetFileContext().
I know that the FILE_OBJECT has a "PDEVICE_OBJECT DeviceObject;", can I use it in some ways to find the PFLT_INSTANCE ? Am I missing something ? And even using the FilterManager apis (FltSendMessage() ...) won't help me in this case, I think.
Any help appreciated !
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!|
|Writing WDF Drivers||7 Dec 2020||LIVE ONLINE|
|Internals & Software Drivers||25 Jan 2021||LIVE ONLINE|
|Developing Minifilters||8 March 2021||LIVE ONLINE|