file system hook through patching tables

Hello

Can I write a some sort of file system filter driver by patching the
driver’s dispatch table and the fast io table?


Elias

Why do you want to patch the driver’s dispatch table, instead of writing a
regular fsfd ?
-Kiran

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of lallous
Sent: Thursday, May 19, 2005 11:46 AM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] file system hook through patching tables

Hello

Can I write a some sort of file system filter driver by patching the
driver’s dispatch table and the fast io table?


Elias


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@calsoftinc.com To
unsubscribe send a blank email to xxxxx@lists.osr.com

Indeed…That’s what I ask for.

I want some convincing reasons as to why not.


Elias
“Kiran Joshi” wrote in message news:xxxxx@ntfsd…
> Why do you want to patch the driver’s dispatch table, instead of writing a
> regular fsfd ?
> -Kiran

That’s exactly what I want to know. What is that you are doing which cannot
be done by writing a good clean FSFD. Why are you even considering the
patchy dirty approach ?
-Kiran

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of lallous
Sent: Thursday, May 19, 2005 12:06 PM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] file system hook through patching tables

Indeed…That’s what I ask for.

I want some convincing reasons as to why not.


Elias
“Kiran Joshi” wrote in message news:xxxxx@ntfsd…
> Why do you want to patch the driver’s dispatch table, instead of
> writing a regular fsfd ?
> -Kiran


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@calsoftinc.com To
unsubscribe send a blank email to xxxxx@lists.osr.com

Well how about the standard response on hooking that it isn’t safe. If you
change the table how will you coordinate this with the driver you are
changing, or another driver that decides to do the same hack? Either is a
recipe for crashing.


Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply

“lallous” wrote in message news:xxxxx@ntfsd…
> Indeed…That’s what I ask for.
>
> I want some convincing reasons as to why not.
>
> –
> Elias
> “Kiran Joshi” wrote in message news:xxxxx@ntfsd…
>> Why do you want to patch the driver’s dispatch table, instead of writing
>> a
>> regular fsfd ?
>> -Kiran
>
>
>

I just want to do something fast for personal use.

This approach requires less discipline and code than the documented FSFD
approach.


Elias
“Kiran Joshi” wrote in message news:xxxxx@ntfsd…
> That’s exactly what I want to know. What is that you are doing which
> cannot
> be done by writing a good clean FSFD. Why are you even considering the
> patchy dirty approach ?
> -Kiran
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of lallous
> Sent: Thursday, May 19, 2005 12:06 PM
> To: Windows File Systems Devs Interest List
> Subject: Re:[ntfsd] file system hook through patching tables
>
> Indeed…That’s what I ask for.
>
> I want some convincing reasons as to why not.
>
> –
> Elias
> “Kiran Joshi” wrote in message news:xxxxx@ntfsd…
>> Why do you want to patch the driver’s dispatch table, instead of
>> writing a regular fsfd ?
>> -Kiran
>
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@calsoftinc.com To
> unsubscribe send a blank email to xxxxx@lists.osr.com
>
>

Technically you can patch the dispatch tables and fast io tables of a file
system driver. Just locate the driver object of the FSD and then change the
pointers in the dispatch/fastio tables. You will encounter all the problems
that are encountered while doing a system call patching… I reiterate, this
approach should strictly be used for testing/personal purpose, not for
production.
-Kiran

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of lallous
Sent: Friday, May 20, 2005 1:17 PM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] file system hook through patching tables

I just want to do something fast for personal use.

This approach requires less discipline and code than the documented FSFD
approach.


Elias
“Kiran Joshi” wrote in message news:xxxxx@ntfsd…
> That’s exactly what I want to know. What is that you are doing which
> cannot be done by writing a good clean FSFD. Why are you even
> considering the patchy dirty approach ?
> -Kiran
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of lallous
> Sent: Thursday, May 19, 2005 12:06 PM
> To: Windows File Systems Devs Interest List
> Subject: Re:[ntfsd] file system hook through patching tables
>
> Indeed…That’s what I ask for.
>
> I want some convincing reasons as to why not.
>
> –
> Elias
> “Kiran Joshi” wrote in message news:xxxxx@ntfsd…
>> Why do you want to patch the driver’s dispatch table, instead of
>> writing a regular fsfd ?
>> -Kiran
>
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@calsoftinc.com To
> unsubscribe send a blank email to xxxxx@lists.osr.com
>
>


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@calsoftinc.com To
unsubscribe send a blank email to xxxxx@lists.osr.com