FLT_FILE_NAME_INFORMATION

NTFSD
1

I think this might have gotten lost the first time I sent it. If not, sorry
for the repost…

I’m developing a mini-filter to capture file-opens via IRP_MJ_CREATE using a
really stripped down version of the MiniSpy sample. Rather than maintaining
a list of file name data can I instead hold onto a FLT_FILE_NAME_INFORMATION
reference and release it when I’m done? I don’t plan on having to modify the
name data and it’s not critical for my app that the cached name hasn’t been
invalidated while I’m holding a reference to it. All the samples seem to
duplicate the data so I just want to make sure it’s not some unwritten,
really bad idea.

Thanks,
Jeremy Boschen

2

You’ve got it right – get the name data in pre-Create and keep it until
you’re done with it. Just don’t forget to eventually release the reference
to the name data.

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Jeremy Boschen
Sent: Friday, January 06, 2006 3:06 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] FLT_FILE_NAME_INFORMATION

I think this might have gotten lost the first time I sent it. If not, sorry
for the repost…

I’m developing a mini-filter to capture file-opens via IRP_MJ_CREATE using a
really stripped down version of the MiniSpy sample. Rather than maintaining
a list of file name data can I instead hold onto a FLT_FILE_NAME_INFORMATION
reference and release it when I’m done? I don’t plan on having to modify the
name data and it’s not critical for my app that the cached name hasn’t been
invalidated while I’m holding a reference to it. All the samples seem to
duplicate the data so I just want to make sure it’s not some unwritten,
really bad idea.

Thanks,
Jeremy Boschen

Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@comcast.net
To unsubscribe send a blank email to xxxxx@lists.osr.com