Hi,
I am not able to get file extenstion using FltGetFileNameInformation. will really helpful if any pointers,
PFLT_FILE_NAME_INFORMATION pNameInfo;
status = FltGetFileNameInformation(
Data,
FLT_FILE_NAME_NORMALIZED | FLT_FILE_NAME_QUERY_DEFAULT,
&pNameInfo
);
DbgPrint(“Filename ::%wZ”, &pNameInfo->Name);
DbgPrint(“Extn ::%wZ”, &pNameInfo->Extension);
You need to use FltParseFileNameInformation -
https://msdn.microsoft.com/en-us/library/windows/hardware/ff543417(v=vs.85).aspx
https://msdn.microsoft.com/en-us/library/windows/hardware/ff543032(v=vs.85).aspx
To parse the contents of the FLT_FILE_NAME_INFORMATION structure returned
by FltGetFileNameInformation, call FltParseFileNameInformation.
Regards,
Krystian Bigaj
On 4 August 2015 at 12:57, wrote:
> Hi,
>
> I am not able to get file extenstion using FltGetFileNameInformation. will
> really helpful if any pointers,
>
> PFLT_FILE_NAME_INFORMATION pNameInfo;
>
> status = FltGetFileNameInformation(
>
> Data,
>
> FLT_FILE_NAME_NORMALIZED | FLT_FILE_NAME_QUERY_DEFAULT,
>
> &pNameInfo
>
> );
>
>
> DbgPrint(“Filename ::%wZ”, &pNameInfo->Name);
> DbgPrint(“Extn ::%wZ”, &pNameInfo->Extension);
>
> —
> NTDEV is sponsored by OSR
>
> Visit the list at: http://www.osronline.com/showlists.cfm?list=ntdev
>
> OSR is HIRING!! See http://www.osr.com/careers
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>