Hello,
When a file is opened it will always be two IRP_MJ_CREATE.
If you think to apply my method… you should look for the second
IRP_MJ_CREATE… or better just check for your self which one is the one
you need.
From what I know most of the Open routines… I mean that open a file
at a decent high level… fopen()…WinAPI’s CreateFile()… MFC’s
CFile… these are useing intermediate buffering. So, that’s why I’m
thinking that the second call is the one you need.
Btw: I’m very interested in this… Why there are two calls?(copyright
(c)Kim 04:25am)
Kim Byeong-Kyun wrote:
hi all.
when my filter driver opened a certain file, i received IRP_MJ_CREATE
twice.
when i received IRP_MJ_CREATE first, option was set with
NO_INTERMEDIATE_BUFFERING.
and subsequently, option was set with FILE_SEQUENTIAL_ONLY.i simply… thought that IRP_MJ_CREATE occurs only one time.
but it occurs twice…advise me… please…
i am a beginner in driver program.thanks.
You are currently subscribed to ntfsd as: xxxxx@rdslink.ro
To unsubscribe send a blank email to xxxxx@lists.osr.com
–
Thank you,
Ciubotaru Ovidiu Andrei
a.k.a. Hardwired