not able to get file extenstion using FltGetFileNameInformation.

Hi,

I am not able to get file extenstion using FltGetFileNameInformation. will really helpful if any pointers,

PFLT_FILE_NAME_INFORMATION pNameInfo;

status = FltGetFileNameInformation(
Data,
FLT_FILE_NAME_NORMALIZED | FLT_FILE_NAME_QUERY_DEFAULT,
&pNameInfo
);

DbgPrint(“Filename ::%wZ”, &pNameInfo->Name);
DbgPrint(“Extn ::%wZ”, &pNameInfo->Extension);

You need to use FltParseFileNameInformation -
https://msdn.microsoft.com/en-us/library/windows/hardware/ff543417(v=vs.85).aspx

https://msdn.microsoft.com/en-us/library/windows/hardware/ff543032(v=vs.85).aspx

To parse the contents of the FLT_FILE_NAME_INFORMATION structure returned
by FltGetFileNameInformation, call FltParseFileNameInformation.

Regards,
Krystian Bigaj

On 4 August 2015 at 12:57, wrote:

> Hi,
>
> I am not able to get file extenstion using FltGetFileNameInformation. will
> really helpful if any pointers,
>
> PFLT_FILE_NAME_INFORMATION pNameInfo;
>
> status = FltGetFileNameInformation(
>
> Data,
>
> FLT_FILE_NAME_NORMALIZED | FLT_FILE_NAME_QUERY_DEFAULT,
>
> &pNameInfo
>
> );
>
>
> DbgPrint(“Filename ::%wZ”, &pNameInfo->Name);
> DbgPrint(“Extn ::%wZ”, &pNameInfo->Extension);
>
> —
> NTDEV is sponsored by OSR
>
> Visit the list at: http://www.osronline.com/showlists.cfm?list=ntdev
>
> OSR is HIRING!! See http://www.osr.com/careers
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

thanks lot Krystian.