How Notepad.exe open and read a text file

NTFSD
1

i found a problem, when i open a textfile, Filemon will not do anything in FilemonDeiveControl IRP_MJ_READ, and also not execute from FilemonFastIoRead, and how does notepad get the real data. but when i open the text file with MSDEV.exe, it will cause a breakpoint at the IRP_MJ_READ.

so if i want to block the open oeration by notepad.exe, it will fail. how to solve this problem

2

AChen wrote:

i found a problem, when i open a textfile, Filemon will not do anything in FilemonDeiveControl IRP_MJ_READ, and also not execute from FilemonFastIoRead, and how does notepad get the real data. but when i open the text file with MSDEV.exe, it will cause a breakpoint at the IRP_MJ_READ.

so if i want to block the open oeration by notepad.exe, it will fail. how to solve this problem

Notepad uses memory mapping.

Andy.

3

Notepad uses memory-mapped files.

----- Original Message -----
From: “AChen”
To: “File Systems Developers”
Sent: Tuesday, April 30, 2002 10:09 AM
Subject: [ntfsd] How Notepad.exe open and read a text file

> i found a problem, when i open a textfile, Filemon will not do anything in FilemonDeiveControl IRP_MJ_READ, and also not execute
from FilemonFastIoRead, and how does notepad get the real data. but when i open the text file with MSDEV.exe, it will cause a
breakpoint at the IRP_MJ_READ.
>
> so if i want to block the open oeration by notepad.exe, it will fail. how to solve this problemb‹š­ç.®·§¶\¬¹??Þv?µûjÉš?¬¶ŠÚç+i
û\¢dèº{.n?‰·¬zwZnV§‘隊[h•æ¯z{_±Ý´Ûp%ŠËl¢Ê