IoRegisterShutdownNotification from a filter driver

Is it legal to call IoRegisterShutdownNotification from a filter driver that

attaches it self to a mass storage device ?

Detailed description:

I am writing a filter driver that attaches itself above DISK.SYS, I have
some data that I need to save to disk at shutdown, while in the
IRP_MJ_SHUTDOWN dispatch routine I was able to use ZwXXX functions to write
to a file, however the system crashes with a Bug Code of RESOURCE_NOT_OWNED.
( I am running windows 2000 SP2) sometime after it returns from
IRP_MJ_SHUTDOWN.

however after calling IoRegisterShutdownNotification from AddDevice the
above problem disappeared. the DDK states that a filter driver attached
above a mass storage device should NOT call this function.

if this is correct where is the best place to save my data to disk when the
system shutdown.

Your help is highly appreciated.

Muath Ali
Canada


You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com