Querying User Mode Handles

NTDEV
1

Hi,

I have a driver that is passed user mode handles opened with CreateFile.
What is the best method for me to retrieve the object name associated
with that file if I only have the handle available to me?

Thanks
Ceri

This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email

2

ObReferenceObjectByHandle + ObQueryNameString + ObDereferenceObject

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “Ceri Coburn”
To: “Windows System Software Devs Interest List”
Sent: Monday, April 04, 2005 3:22 PM
Subject: [ntdev] Querying User Mode Handles

Hi,

I have a driver that is passed user mode handles opened with CreateFile.
What is the best method for me to retrieve the object name associated
with that file if I only have the handle available to me?

Thanks
Ceri


This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

3

Maxim S. Shatskih wrote:

ObReferenceObjectByHandle + ObQueryNameString + ObDereferenceObject

Maxim Shatskih, Windows DDK MVP

And you should be in the context of the process for which you query the
handle.

Egemen Tas