FltReadFile with FLTFL_IO_OPERATION_PAGING

NTFSD
1

I’m issuing a FltReadFile request with FLTFL_IO_OPERATION_PAGING set.
The result is the following assert:

FILTER VERIFIER ERROR: An attempt was made to issue a non cached IO on
a file object but the

buffer was not aligned. (FileObject = 85FB5038, Buffer = E11FE000)

Here is the stack:

fltmgr!FltpvPrintErrors+0x111

fltmgr!FltpvValidateReadWriteParameters+0xbb

fltmgr!FltvReadFile+0x1b

I’m using FltAllocatePoolAlignedWithTag(…) to allocate the buffer.
0xE000 sure looks like an aligned buffer to me.

Has anyone seen this?

This is on XP-SP2.

Thanks,

Daniel

2

Did you also make the data size aligned to sector size (0x200) ?

L.