query file attributes to determine if a directory handle was returned?

NTFSD
1

From the OSR archives i read

“Directory open operations, however, may come down without the FILE_DIRECTORY_FILE option. Filters must query file attributes to determine if a non-create operation returned a directory handle.”

My question is -> how to query file attributes to determine if a directory handle was returned?

2

Hello Mani,

in a minifilter, you can call FltIsDirectory in PostCreate. In a
legacy filter, i think you can call ZwQueryInformationFile and request
FileStandardInformation.

–
Best regards,
Alex mailto:xxxxx@bitdefender.com

Tuesday, September 6, 2005, 8:20:58 AM, you wrote:

From the OSR archives i read

“Directory open operations, however, may come down without the
FILE_DIRECTORY_FILE option. Filters must query file attributes to
determine if a non-create operation returned a directory handle.”

My question is ->> how to query file attributes to
My question is ->> determine if a directory handle was returned?

Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

–
This message was scanned for spam and viruses by BitDefender.
For more information please visit http://www.bitdefender.com/

3

> legacy filter, i think you can call ZwQueryInformationFile and request

FileStandardInformation.

Don’t call any Zw functions in post create, better build an IRP
(or reuse the existing one) and call the lower driver.

L.

4

Ladislav,

Will it be ok to call ZwQueryInformationFile in pre create?

Thanks.

“Ladislav Zezula” wrote in message news:xxxxx@ntfsd…
> > legacy filter, i think you can call ZwQueryInformationFile and request
> > FileStandardInformation.
>
> Don’t call any Zw functions in post create, better build an IRP
> (or reuse the existing one) and call the lower driver.
>
> L.