About Parameters.QueryDirectory.FileName format in IRP_MN_QUERY_DIRECTORY

NTFSD
1

Hi,
*Background*:
I have a minifilter that intercepts filesystem calls under a directory of
interest of our application.

I communicate with the usermode app of the dirlisting parameters including
filters with wild card,

From the command prompt if I type dir Parameters.QueryDirectory.FileName
show “*” as expected.
or if I type dir *doc, the Parameters.QueryDirectory.FileName shows the
same filter i.e., “*doc”

*The problem*:
The problem is when there is dot next the wild card, say “*.docx”,
Parameters.QueryDirectory.FileName shows “<.docx” instead of “*.docx”

I could not find any documentation of this kind of behavior.
It will be of great help if you could throw some light on the format of
wild card.

Thanks and regards,
Madhusudhana

2

The < character is the DOS equivalent of * and > is the DOS equivalent
of ?. Look in the FastFat source code in the dirctrl.c file, you’ll see
a pattern at the top for DOS_QM. Search for this in the ntifs.h header
file in the WDK and read the comments there.

Pete

–
Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295

------ Original Message ------
From: “Madhusudhana Narayanappa”
To: “Windows File Systems Devs Interest List”
Sent: 6/11/2015 7:18:34 AM
Subject: [ntfsd] About Parameters.QueryDirectory.FileName format in
IRP_MN_QUERY_DIRECTORY

>Hi,
>Background:
>I have a minifilter that intercepts filesystem calls under a directory
>of interest of our application.
>
>I communicate with the usermode app of the dirlisting parameters
>including filters with wild card,
>
>From the command prompt if I type dir
>Parameters.QueryDirectory.FileName show “*” as expected.
>or if I type dir doc, the Parameters.QueryDirectory.FileName shows the
>same filter i.e., “doc"
>
>
>The problem:
>The problem is when there is dot next the wild card, say ".docx”,
>Parameters.QueryDirectory.FileName shows “<.docx” instead of ".docx"
>
>I could not find any documentation of this kind of behavior.
>It will be of great help if you could throw some light on the format of
>wild card.
>
>
>
>
>Thanks and regards,
>Madhusudhana
>— NTFSD is sponsored by OSR OSR is hiring!! Info at
>http://www.osr.com/careers For our schedule of debugging and file
>system seminars visit: http://www.osr.com/seminars To unsubscribe,
>visit the List Server section of OSR Online at
>http://www.osronline.com/page.cfm?name=ListServer

3

No, MS-DOS used > and < in the same way as CMD.EXE (which continues MS-DOS tradition) and UNIX shell.

–
Maxim S. Shatskih
Microsoft MVP on File System And Storage
xxxxx@storagecraft.com
http://www.storagecraft.com
“PScott” wrote in message news:xxxxx@ntfsd…

The < character is the DOS equivalent of * and > is the DOS equivalent of ?. Look in the FastFat source code in the dirctrl.c file, you’ll see a pattern at the top for DOS_QM. Search for this in the ntifs.h header file in the WDK and read the comments there.

Pete

–
Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295

------ Original Message ------
From: “Madhusudhana Narayanappa”
To: “Windows File Systems Devs Interest List”
Sent: 6/11/2015 7:18:34 AM
Subject: [ntfsd] About Parameters.QueryDirectory.FileName format in IRP_MN_QUERY_DIRECTORY

Hi,
Background:
I have a minifilter that intercepts filesystem calls under a directory of interest of our application.

I communicate with the usermode app of the dirlisting parameters including filters with wild card,

From the command prompt if I type dir Parameters.QueryDirectory.FileName show “*” as expected.
or if I type dir doc, the Parameters.QueryDirectory.FileName shows the same filter i.e., “doc"

The problem:
The problem is when there is dot next the wild card, say ".docx”, Parameters.QueryDirectory.FileName shows “<.docx” instead of ".docx"

I could not find any documentation of this kind of behavior.
It will be of great help if you could throw some light on the format of wild card.

Thanks and regards,
Madhusudhana
— NTFSD is sponsored by OSR OSR is hiring!! Info at http://www.osr.com/careers For our schedule of debugging and file system seminars visit: http://www.osr.com/seminars To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer