Hi,
I have a filter driver which does some dance with SOP’s. I need to call
MmFlushImageSection (from a work item queued in create completion) and
CcFlushCache from my NtCreateSection hook. I know some of this sounds
nightmarish
I want to know the proper locking hierarchy before calling these
functions.The docs seem to be conflicting. This filter needs to work on NT4
to XP, so I don’t think I can use some of the newer callbacks.
If I have a fileobject, how do I ensure that I own the FCB exclusively?
Thanks