IRP_MJ_QUERY_VOLUME_INFORMATION

NTFSD
2

This IRP is for obtaining the volume label, size information and file
system characteristics (object id, fsd name, characteristics,
attributes). Look at the comment in ntifs:

// NtQuery[Set]VolumeInformationFile types:

//

// FILE_FS_LABEL_INFORMATION

// FILE_FS_VOLUME_INFORMATION

// FILE_FS_SIZE_INFORMATION

// FILE_FS_DEVICE_INFORMATION

// FILE_FS_ATTRIBUTE_INFORMATION

// FILE_FS_CONTROL_INFORMATION

// FILE_FS_OBJECTID_INFORMATION

//

I hope this helps!

Regards,

Tony

Tony Mason

Consulting Partner

OSR Open Systems Resources, Inc.

http://www.osr.com http:</http:>

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Amitrajit Banerjee.
Sent: Saturday, July 30, 2005 6:06 AM
To: ntfsd redirect
Subject: [ntfsd] IRP_MJ_QUERY_VOLUME_INFORMATION

Can any one tell me what this IRP is exactly used for. I cannot find any
thing in DDK help or the books I have. However, filespy shows this IRP
when I do a file copy.

Also what are IRP_MJ_DIRECTORY_CONTROL/IRP_MN_QUERY_DIRECTORY irps for.

thanks,

amitrajit

Note:-

  1. Spelling Mistakes and Grammatical Errors, If Any, Are Regretted.
  2. Kindly Acknowledge This Mail At The Earliest.
  3. This E-Mail Might contain Confidential information. If You Are Not
    Entitled
    To View it, Please Delete The Message Immediately And Inform Me.
    Thanking You,
    Amitrajit Banerjee.

http: — Questions?
First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
‘’ To unsubscribe send a blank email to xxxxx@lists.osr.com</http:>

3

> Also what are IRP_MJ_DIRECTORY_CONTROL

/IRP_MN_QUERY_DIRECTORY irps for.

IRP_MJ_DIRECTORY_CONTROL serves either for
searching a directory (for FindFirstFile/FindNextFile APIs)
of for creating a directory notify handler (for
FindFirstChangeNotification/FindNextChangeNotification APIs)

Both IRP_MJ_QUERY_VOLUME_INFORMATION and
IRP_MJ_DIRECTORY_CONTROL are documented in the IFS Kit

L.

4

These IRPs underly the GetVolumeInformation and FindFirst/NextFile calls.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: Amitrajit Banerjee.
To: Windows File Systems Devs Interest List
Sent: Saturday, July 30, 2005 2:06 PM
Subject: [ntfsd] IRP_MJ_QUERY_VOLUME_INFORMATION

Can any one tell me what this IRP is exactly used for. I cannot find any thing in DDK help or the books I have. However, filespy shows this IRP when I do a file copy.

Also what are IRP_MJ_DIRECTORY_CONTROL/IRP_MN_QUERY_DIRECTORY irps for.

thanks,

amitrajit

Note:-

  1. Spelling Mistakes and Grammatical Errors, If Any, Are Regretted.
  2. Kindly Acknowledge This Mail At The Earliest.
  3. This E-Mail Might contain Confidential information. If You Are Not Entitled
    To View it, Please Delete The Message Immediately And Inform Me.
    Thanking You,
    Amitrajit Banerjee.

— Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17 You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’ To unsubscribe send a blank email to xxxxx@lists.osr.com

5

> When I fire the IRP_MJ_DIRECTORY_CONTROL

or IRP_MJ_QUERY_VOLUME_INFORMATION
to get parameters from the disk, does the underlying driver
in the stack, generate an IRP_MJ_READ to fetch teh information
from the disk?

Well, it does. The question is why you need this.
Why to try such approach, if you have confortable,
FS-independent way to to it.

You may certainly read the directory information from
the volume by reading sectors, but you must know
where these metadata are. And they are at different
places for every file system.

L.

6

Ooops. If the drive was corrupted, it means that you handle
the sector encryption wrong. Basically, if you encrypt
drive at sector level, you should not care about directory entries
or file metadata.

What I understand is that, I need to write my encrypt decrypt
logic for these IRPs also, and also for IRP_MJ_SET_INFORMATION
(possibly).

Certainly not. AFAIK disk filters don’t even handle these IRPs.
This is a stupid question, but didn’t you attached the sector
encryptor above the file systems ?

L.

7

At the disk level - no.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: Amitrajit Banerjee.
To: Windows File Systems Devs Interest List
Sent: Monday, August 01, 2005 9:34 AM
Subject: Re: RE: [ntfsd] IRP_MJ_QUERY_VOLUME_INFORMATION

it centrainly does tony, thanks a ton, I didn’t have ifs kit with me. Can you tell me one more thing, when I use this IRP to query volume information (which lies in the disk) does the underlying driver translate the IRP into IRP_MJ_READ to fetch teh information or is there any other method applied. My question is, to read daat from a disk (mostly MFT vol information) can any other IRP be used other than IRP_MJ_READ?

amitr0

On Sat, 30 Jul 2005 Tony Mason wrote :
>This IRP is for obtaining the volume label, size information and file
>system characteristics (object id, fsd name, characteristics,
>attributes). Look at the comment in ntifs:
>
>
>
>// NtQuery[Set]VolumeInformationFile types:
>
>//
>
>// FILE_FS_LABEL_INFORMATION
>
>// FILE_FS_VOLUME_INFORMATION
>
>// FILE_FS_SIZE_INFORMATION
>
>// FILE_FS_DEVICE_INFORMATION
>
>// FILE_FS_ATTRIBUTE_INFORMATION
>
>// FILE_FS_CONTROL_INFORMATION
>
>// FILE_FS_OBJECTID_INFORMATION
>
>//
>
>
>
>I hope this helps!
>
>
>
>Regards,
>
>
>
>Tony
>
>
>
>Tony Mason
>
>Consulting Partner
>
>OSR Open Systems Resources, Inc.
>
>http://www.osr.com http:</http:>
>
>
>
>
>
>________________________________
>
> From: xxxxx@lists.osr.com
>[mailto:xxxxx@lists.osr.com] On Behalf Of Amitrajit Banerjee.
>Sent: Saturday, July 30, 2005 6:06 AM
>To: ntfsd redirect
>Subject: [ntfsd] IRP_MJ_QUERY_VOLUME_INFORMATION
>
>
>
>
>Can any one tell me what this IRP is exactly used for. I cannot find any
>thing in DDK help or the books I have. However, filespy shows this IRP
>when I do a file copy.
>
>Also what are IRP_MJ_DIRECTORY_CONTROL/IRP_MN_QUERY_DIRECTORY irps for.
>
>thanks,
>
>amitrajit
>
>Note:-
>1) Spelling Mistakes and Grammatical Errors, If Any, Are Regretted.
>2) Kindly Acknowledge This Mail At The Earliest.
>3) This E-Mail Might contain Confidential information. If You Are Not
>Entitled
>To View it, Please Delete The Message Immediately And Inform Me.
>Thanking You,
>Amitrajit Banerjee.
>
> http: — Questions?
>First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
>You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
>‘’ To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>—
>Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
>
>You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
>To unsubscribe send a blank email to xxxxx@lists.osr.com

Note:-
1) Spelling Mistakes and Grammatical Errors, If Any, Are Regretted.
2) Kindly Acknowledge This Mail At The Earliest.
3) This E-Mail Might contain Confidential information. If You Are Not Entitled
To View it, Please Delete The Message Immediately And Inform Me.
Thanking You,
Amitrajit Banerjee.

— Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17 You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’ To unsubscribe send a blank email to xxxxx@lists.osr.com</http:>