Hi all,
I have a legacy filter in which I track modifications to file. I need to do some processing on the file (need to read the file data) in close completion if the file was modified.
What possible issues could I face if I do take care of IRQL issues and I don’t care about thread/process context?
Specifically, is there any constraint on opening a file from its close completion routing?
Thanks for your help in advance,
Pawan
In general there shouldn’t be any issues with opening a file in close completion (other than those you indicated.) Of course, you might find that the file has gone away (been deleted) or that this close isn’t the last one on the file (think about cached files or memory mapped files, where your file object isn’t the one backing the cache or section.) Keep in mind that a file object only represents an open instance of the file so you might find sharing issues, byte range locks issues, oplock break hangs, etc.
Tony
OSR