Detect if request was reparsed

When a driver returns STATUS_REPARSE from PreCreate is there a way to detect when the reparsed request comes back down the pipe? I’m curious if there is a flag set to indicate that the request was the result of a previous reparse.

ECPs survive reparse. So you’d usually attach one to the (post) create and look for it in the pre-create. That’s a big hammer, but its the only one I’m aware of

Thank Rod but that only works if the filter below reparses. Wouldn’t work for my own reparsing or for a filter above. I was hoping there was a global solution that could be detected at an arbitrary level but I don’t think there is.

In theory your filter shouldn’t care about reparses done above you. Even if there was something that said, “this is a reissue of a reparse” you wouldn’t have ever seen the original reparse so not sure what you’d do with it.

1 Like