Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results
The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
I have some text files with custom reparse point data in REPARSE_GUID_DATA_BUFFER format and I can use fsutil to verify them. Now if I open them with WorkPad or other Windows apps, I will get error message of "file cannot be accessed by the system" because of the presence of reparse points. So, I want to have my minifilter be able to parse the custom reparse point and allow WordPad to open/read the file without error message prompt.
As far as I can understand, STATUS_REPARSE was returned in Pre-Create callback when there is a reparse point. Can I add a function in pre-create to parse the custom reparse point and return "FLT_PREOP_SUCCESS_WITH_CALLBACK" as if there is no reparse point in the file?
From another post: How can I get Repase Point Information In IRP_MJ_CREATE? (https://community.osr.com/discussion/comment/49056#Comment_49056)
It seems that we should handle "STATUS_REPARSE" in post-create, but I cannot get rid of the error prompts when opening text files by WordPad no matter what I do in Post-create callback.
Thanks in advance.
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!|
|Kernel Debugging||30 January 2023||Live, Online|
|Developing Minifilters||20 March 2023||Live, Online|
|Internals & Software Drivers||17 April 2023||Live, Online|
|Writing WDF Drivers||22 May 2023||Live, Online|