Difference in attaching to LanManRedirector as opposed to any- other device object

Hi,

I was wondering, is there any difference in filtering IRPs when one is
attached to LanManRedirector as opposed to filtering IRPs from any other
device object like “\DosDevices\C:” ?

This question relates to the strange value for the FCB->Resource
(0xBBBBBBBB) I described yesterday. After examination the original IRP
appears to come from some LanManRedirector request. Also, I found that the
resulting DeviceObject of the IoGetRelatedDeviceObject function with a
LanManRedirector fileobject as a parameter is sometimes crippled. Using
this DeviceObject (for example in a FastIo call) results in an access
violation.

Anyone available who can shine a light on this ?


Bartjan Wattel.


You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com