Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Home NTFSD

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


Before Posting...

Please check out the Community Guidelines in the Announcements and Administration Category.

ntfs transactions

jchristatosjchristatos Member Posts: 48
Hello,

Can someone explain the rational behind transactions on NTFS and vista ?
I thought the log was supposed to take care of meta data inconsistencies ?
Does the log still exist ?

Thank you.
Jerome.

Comments

  • OSR_Community_UserOSR_Community_User Member Posts: 110,217
    Transactions are there for USERS of the NTFS file system, not for NTFS itself. Thus, the registry uses it and Microsoft Update uses it.

    Tony

    Tony Mason
    Consulting Partner
    OSR Open Systems Resources, Inc.
    http://www.osr.com
  • jchristatosjchristatos Member Posts: 48
    Hi Tony,

    wrote in message news:[email protected]
    > Transactions are there for USERS of the NTFS file system, not for NTFS
    itself. Thus, the registry uses it and Microsoft Update uses it.

    Thanks for clarifying. The ntinsider article mentionned a log for filesystem
    state so I may have been confused.

    I try to get the model straigth. If a filter is interested to monitor file
    system state changes (i.e.file deletion, attribute changes ...) and the
    filtered file object is part of a transaction, it registers a callback
    function and at some point pass the irp trhough.

    If the transaction is aborted the callback is fired to let the filter do its
    cleanup instead of the system sending a new irp or cancelling the irp?

    This mechanism opens a new path in the filter and I can see a potential for
    breaking lock hierarchy.
    Does the framework has a way to prevent this ? (apc like)
    Can this callback race with the irp completion ?

    I couldn't seem to find all answers in the doc so far, Thanks for the time.

    Jerome.


    >
    > Tony
    >
    > Tony Mason
    > Consulting Partner
    > OSR Open Systems Resources, Inc.
    > http://www.osr.com
    >
    >
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. Sign in or register to get started.

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Internals & Software Drivers 15 November 2021 Live, Online
Writing WDF Drivers TBD Live, Online
Developing Minifilters 7 February 2022 Live, Online
Kernel Debugging 21 March 2022 Live, Online