Re: [ntfsd] FileObject->Filename , whos the owner ?

It really depends on whether we’re talking preCreate or postCreate. In postCreate filters can change it when returning STATUS_REPARSE (see the SimRep sample). In preCreate the FileName is allocated by the IO manager.

What is it that you’re trying to do?


On Dec 2, 2012, at 8:08 PM, wrote:

How to know whos starting the MJ_CREATE and so FileObject->Filename,
who´s the owner ?

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars visit:

To unsubscribe, visit the List Server section of OSR Online at