About FO_HANDLE_CREATED

NTFSD
1

I have some question about FO_HANDLE_CREATED:
1.When the flag(FO_HANDLE_CREATED) for a fileobject will be set?

2.When the flag(FO_HANDLE_CREATED) for a fileobject will be cleared?

3.When cachemanager catch the fileobject(the fileobject has been cleanup,but not close),the flag(FO_HANDLE_CREATED) is cleared?

2

Why are you interested in FO_HANDLE_CREATED flag?

  1. You have to call IoCreateFile/Ex/SpecifyDeviceObjectHint (or even IoCreateStreamFileObject/Ex/Lite) functions.
    2./3. Why would IO/Cache manager clear this flag? I haven’t observed yet that this flag would be cleared…

Petr

wrote in message news:xxxxx@ntfsd…
>I have some question about FO_HANDLE_CREATED:
> 1.When the flag(FO_HANDLE_CREATED) for a fileobject will be set?
>
> 2.When the flag(FO_HANDLE_CREATED) for a fileobject will be cleared?
>
> 3.When cachemanager catch the fileobject(the fileobject has been cleanup,but not close),the flag(FO_HANDLE_CREATED) is cleared?
>
>

3

FO_CLEANUP_COMPLETE ? Me, I’d prefer remember if I’d seen the operations, in
a fltmgr context for example.

wrote in message news:xxxxx@ntfsd…
>I have some question about FO_HANDLE_CREATED:
> 1.When the flag(FO_HANDLE_CREATED) for a fileobject will be set?
>
> 2.When the flag(FO_HANDLE_CREATED) for a fileobject will be cleared?
>
> 3.When cachemanager catch the fileobject(the fileobject has been
> cleanup,but not close),the flag(FO_HANDLE_CREATED) is cleared?
>
>

4

I strongly recommend to avoid this flag interpretation in any way - it is
set by the system for its internal purposes - mainly to maintain a correct
calling sequence for cleanup operation.
There is no rule that says that if FO has FO_HANDLE_CREATED flag then it
has( or had ) a handle associated with this file object.

–
Slava Imameyev, xxxxx@hotmail.com

wrote in message news:xxxxx@ntfsd…
>I have some question about FO_HANDLE_CREATED:
> 1.When the flag(FO_HANDLE_CREATED) for a fileobject will be set?
>
> 2.When the flag(FO_HANDLE_CREATED) for a fileobject will be cleared?
>
> 3.When cachemanager catch the fileobject(the fileobject has been
> cleanup,but not close),the flag(FO_HANDLE_CREATED) is cleared?
>
>