Is PUNICODE_STRING FileName; in this structure the name of the file that was
queryed that caused the call to IRP_MJ_DIRECTORY_CONTROL?
DDK says it is a “Pointer to a UNICODE_STRING
<javascript:hhobj_1.click>structure that contains the name of a file
within the specified directory.”
Well that is a little vague 
My best guess after looking for more information on it (nothing in the
thread search) is the query name.
Anyone clear this up for me please?
Jason</javascript:hhobj_1.click>
IIRC, this is the search pattern. (* for all files, test.doc when
searching for a specific file etc.)
Jason T wrote:
Is PUNICODE_STRING FileName; in this structure the name of the file
that was
queryed that caused the call to IRP_MJ_DIRECTORY_CONTROL?
DDK says it is a “Pointer to a UNICODE_STRING
<javascript:hhobj_1.click>structure that contains the name of a file
>
> within the specified directory.”
> Well that is a little vague
> My best guess after looking for more information on it (nothing in
> the
> thread search) is the query name.
> Anyone clear this up for me please?
> Jason
–
Kind regards, Dejan M.
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.</javascript:hhobj_1.click>
Thanks for the input, it sure looked like that from values it was spitting
out, but it also throws null alot. I only used explorer and not a command
shell, but I did notice values such as *, NULL, file name etc.
Will investigate a little more.
On 10/18/05, Dejan Maksimovic wrote:
>
>
> IIRC, this is the search pattern. (* for all files, test.doc when
> searching for a specific file etc.)
>
> Jason T wrote:
>
> > Is PUNICODE_STRING FileName; in this structure the name of the file
> > that was
> > queryed that caused the call to IRP_MJ_DIRECTORY_CONTROL?
> > DDK says it is a “Pointer to a UNICODE_STRING
> > <javascript:hhobj_1.click>structure that contains the name of a file
> >
> > within the specified directory.”
> > Well that is a little vague
> > My best guess after looking for more information on it (nothing in
> > the
> > thread search) is the query name.
> > Anyone clear this up for me please?
> > Jason
>
> –
> Kind regards, Dejan M.
> http://www.alfasp.com E-mail: xxxxx@alfasp.com
> Alfa Transparent File Encryptor - Transparent file encryption services.
> Alfa File Protector - File protection and hiding library for Win32
> developers.
> Alfa File Monitor - File monitoring library for Win32 developers.
>
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@gmail.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
></javascript:hhobj_1.click>
The value need only be set on the FIRST call to enumerate a directory.
The FSD (or any filter) that wants to use that string has to capture it
and store it.
Calls from Win32 actually only set it on first call; it is NULL
afterwards. NTVDM on the other hand sends the string every time. I’m
not sure what SRV does…
Regards,
Tony
Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
Looking forward to seeing you at the next OSR File Systems class in Los
Angeles, CA October 24-27, 2005.
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Jason T
Sent: Tuesday, October 18, 2005 10:54 PM
To: ntfsd redirect
Subject: Re: [ntfsd] QueryDirectory
Thanks for the input, it sure looked like that from values it was
spitting out, but it also throws null alot. I only used explorer and not
a command shell, but I did notice values such as *, NULL, file name etc.
Will investigate a little more.
On 10/18/05, Dejan Maksimovic wrote:
IIRC, this is the search pattern. (* for all files, test.doc when
searching for a specific file etc.)
Jason T wrote:
> Is PUNICODE_STRING FileName; in this structure the name of the file
> that was
> queryed that caused the call to IRP_MJ_DIRECTORY_CONTROL?
> DDK says it is a “Pointer to a UNICODE_STRING
> <javascript:hhobj_1.click>structure that contains the name of a file
>
> within the specified directory.”
> Well that is a little vague
> My best guess after looking for more information on it (nothing in
> the
> thread search) is the query name.
> Anyone clear this up for me please?
> Jason
–
Kind regards, Dejan M.
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.
—
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: xxxxx@gmail.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
mailto:xxxxx
— Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17 You are currently subscribed
to ntfsd as: unknown lmsubst tag argument: ‘’ To unsubscribe send a
blank email to xxxxx@lists.osr.com</mailto:xxxxx></javascript:hhobj_1.click>