I tried to run HLK "File IO 2 Tests" on my minifilter but it failed on Fat FS because the attribute FILE_ATTRIBUTE_TEMPORARY was cleared on the file when the last handle was closed (UDF, REFS and NTFS pass the test).
In my Cleanup Pre/Post operation callback, the FileObject has the flag FO_TEMPORARY_FILE but when I reopen it, the attribute was cleared.
I tried to debug fastfat.sys, from the open to the close, the FCB->FcbState has FCB_STATE_TEMPORARY and the FileObject->Flags has FO_TEMPORARY_FILE.
I don't understand how/when/why the flag is cleared after the last handle is closed.
It's possible that the CacheManager clear this bit in specific case ?
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Writing WDF Drivers||21 Oct 2019||OSR Seminar Space & ONLINE|
|Internals & Software Drivers||18 Nov 2019||Dulles, VA|
|Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||27 Apr 2020||OSR Seminar Space & ONLINE|