FltReissueSynchronousIo instance paramter

Hi, all. I’m using the FltReissueSynchronousIo during
IRP_MJ_DIRECTORY_CONTROL/QUERY_DIRECTORY in case that I want to get the
next list of file names.
This works fine, but a customer has sent me a virtual machine where
along with my mini-filter there is one legacy filter and this API call
causes a deadlock. (the same setup on my VMs does not deadlock). I can
see there is an endless call of query_directory calls (it’s not
recursive or the stack would fault fast enough).

For the instance parameter I’m passing FltObjects->Instance (I do
want only filters below mine to see the I/O). Any ideas what could be
the problem here?


Kind regards, Dejan
http://www.alfasp.com
File system audit, security and encryption kits.