Retrieving PFLT_CONTEXT n minifilter driver

NTFSD
1

Hi All,

I am working on a FS minifilter driver. From the MSDN, it seems the FLT_INSTANCE object in only available in the FS callback routines registered in the structure

typedef struct _FLT_OPERATION_REGISTRATION {
UCHAR MajorFunction;
FLT_OPERATION_REGISTRATION_FLAGS Flags;
PFLT_PRE_OPERATION_CALLBACK PreOperation;
PFLT_POST_OPERATION_CALLBACK PostOperation;
PVOID Reserved1;
} FLT_OPERATION_REGISTRATION, *PFLT_OPERATION_REGISTRATION;

Is there anyway to access the FLT_INSTANCE apart from the FS callback routines. For example, when I attach a context to the FLT_INSTANCE using FltSetInstanceContext in one of the FS callback and if I want to retrieve the context in some of the driver IOCTL function using FltGetInstanceContext.

Thanks,

2

I’ve moved your post to NTFSD where it is more appropriate.

Dan.