Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Sept/Oct 2019 Issue of The NT Insider available


Download PDF here: http://insider.osr.com/2019/ntinsider_2019_01.pdf

It’s a particularly BIG issue, too: 40 pages of technical goodness, ranging from WDF to Minifilters. Check it out.
Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

FltCreateFile and FILE_CREATE_TREE_CONNECTION

OSR_Community_UserOSR_Community_User Member Posts: 110,217
Hi,

I'm wondering how to know when to use the FILE_CREATE_TREE_CONNECTION in
my minifilter.

Should I simply use that flag always or should I watch out for failures
of FltCreateFile (and friends) when they return
STATUS_DEVICE_NOT_CONNECTED and then _retry_ with the flag? What status
codes should I watch out for in the second case?

From what I understand, the flag causes some kind of overhead in the
processing.

Thanks,

Oliver

Comments

  • Peter_ScottPeter_Scott Member - All Emails Posts: 749
    From my understanding and observations, this is used when performing a
    create on a network share. Check out the Microsoft SMB protocol for more
    information on tree connections.

    Pete

    --
    Kernel Drivers
    Windows File System and Device Driver Consulting
    www.KernelDrivers.com
    866.263.9295



    ------ Original Message ------
    From: "Oliver Schneider" <xxxxx@gmxpro.net>
    To: "Windows File Systems Devs Interest List" <xxxxx@lists.osr.com>
    Sent: 8/16/2016 5:46:59 AM
    Subject: [ntfsd] FltCreateFile and FILE_CREATE_TREE_CONNECTION

    >Hi,
    >
    >I'm wondering how to know when to use the FILE_CREATE_TREE_CONNECTION
    >in
    >my minifilter.
    >
    >Should I simply use that flag always or should I watch out for failures
    >of FltCreateFile (and friends) when they return
    >STATUS_DEVICE_NOT_CONNECTED and then _retry_ with the flag? What status
    >codes should I watch out for in the second case?
    >
    >From what I understand, the flag causes some kind of overhead in the
    >processing.
    >
    >Thanks,
    >
    >Oliver
    >
    >---
    >NTFSD is sponsored by OSR
    >
    >
    >MONTHLY seminars on crash dump analysis, WDF, Windows internals and
    >software drivers!
    >Details at <http://www.osr.com/seminars>;
    >
    >To unsubscribe, visit the List Server section of OSR Online at
    ><http://www.osronline.com/page.cfm?name=ListServer>;

    Kernel Drivers
    Windows File System and Device Driver Consulting
    www.KernelDrivers.com
    866.263.9295

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Writing WDF Drivers 21 Oct 2019 OSR Seminar Space & ONLINE
Internals & Software Drivers 18 Nov 2019 Dulles, VA
Kernel Debugging 30 Mar 2020 OSR Seminar Space
Developing Minifilters 27 Apr 2020 OSR Seminar Space & ONLINE