Question about Object's handles freeing

NTDEV
1

Hi All;
Are there any way to free all opened handles to certain custom registry hive that loaded using my filter driver without keeping track on these handles…
knowing that all these handles were opened through my driver and while i was trying to unload it using ZwUnloadKey() it return Error cannot delete key, which tell my that there were some opened key to this hive…

Any Idea is Appreciated,

2

Generally you would be providing a layered object above this hive that
provided all access to the registry hive of interest, while you
maintained the only actual open reference to the real hive object.

Mark Roddy

On Sun, Jun 28, 2009 at 11:48 AM, wrote:
> Hi All;
> Are there any way to free all opened handles to certain custom registry hive that loaded using my filter driver without keeping track on these handles…
> knowing that all these handles were opened through my driver and while i was trying to unload it using ZwUnloadKey() it return Error cannot delete key, which tell my that there were some opened key to this hive…
>
> Any Idea is Appreciated,
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>

3

Thanks Mark,
actually i am maintaining a list of all object pointers that i got openkey operations, but but when i derefrencing these pointers it also doesn’t work because it actually not freeing the handle itself…

could i from these object pointers’ get all opened handle to this object and close it

thanks

4

I’ll try again. The only way I know of to do what you are doing is to
layer yourself above the object of interest (a hive) and maintain a
shadow object that you control that appears to applications above you
as the object of interest for their open requests and their handle
based IO. Your software has the one and only open reference on the
real object (the hive).

Mark Roddy

On Mon, Jun 29, 2009 at 3:49 AM, wrote:
> Thanks Mark,
> actually i am maintaining a list of all object pointers that i got openkey operations, but but when i derefrencing these pointers it also doesn’t work because it actually not freeing the handle itself…
>
> could i from these object pointers’ get all opened handle to this object and close it
>
> thanks
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>