: [ntfsd] Re: [ntfsd] : Re: [ntfsd] sfilter IRP_MJ_READ question ?

OK, I am understand.Thanks you very much.

Best Regards

Ken Wang

It has a SfCreate routine. when i using softice
to debuging ,the SfCreate hasn’t been called as well.

I’ve already written it.

YOUR FILTER IS NOT ATTACHED TO A VOLUME

If your driver is not attached to something,
then none of your IRP_MJ_XXX dispatch or FastIo
functions is called. Nothing. No attach,
no fun.

Look at the FileSpy sample, there is some
code showing how to attach to a volume.
And look also at some documentation about file
system filters to gain more knowledge
about all this. Otherwise you will have to ask
others with every step you’ll do.

L.


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@lenovo.com
To unsubscribe send a blank email to xxxxx@lists.osr.com