Hi Tony,
Thanks for your reply.
One of my team mates solved this issue by progressively commenting out code in the driver and
checking what was causing this BSOD.
The cause was found to be in a function in our PreCreate, where we copy the
attributes of the Shadow File Object to the FltObjects->FileObject.
Here’s the exact code which was commented out to fix the crash:
//fileObject->LastLock = LowerFileObject->LastLock;
//fileObject->Lock = LowerFileObject->Lock;
Now my question is, what all fields of the FltObjects->FileObject can be safely replaced with the corresponding fields of the LowerFileObject.
Btw, we get the LowerFileObject by simpling calling a FltCreateFileEx2() inside the PreCreate.
regards,
V.N.Raju