Re:[ntfsd] why the fileSysDevice->vpb  is NULL  in f

I dont know who allocate the vpb?
I have read the source of disk.sys, but have no clue who is responsible for
"create them and free them "? Is it “Io Mananger” created them when we set
device-type as FILE_DEVICE_DISK and free them opaquely when we call
IoDeleteDevice?

in filemon’s HookDriver function

it first create the file for example the path “C:”
after this it obtain the fileobject throw the file handle
then use
fileSysDevice = IoGetRelatedDeviceObject( fileObject );

I want to obtain the fileSysDevice->vpb->RealDevice to see the
RealDevice->characteristic;
but it failed because the vpb get from the fileSysDevice is NULL;

why fileSysDevice->vpb is NULL.

thanks.


ÏíÓÃÊÀ½çÉÏ×î´óµÄµç×ÓÓʼþϵͳ¡ª MSN Hotmail¡£ http://www.hotmail.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@eyou.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

http://www.eyou.com
–Îȶ¨¿É¿¿µÄµç×ÓÐÅÏä ÓïÒôÓʼþ ÒÆ¶¯ÊéÇ© ÈÕÀú·þÎñ ÍøÂç´æ´¢…ÒÚÓÊδ¾¡

http://vip.eyou.com
–¿ì¿ìµÇ¼ÒÚÓÊVIPÐÅÏä ×¢²áÄúÖÐÒâµÄÓû§Ãû