Reply Using RtlInitUnicodeString result in BSOD

NTFSD
1

Thanks Ladislav.
I see IFS Help it show that FileName specifies the first character of the
file name string.
This is followed in memory by the remainder of the string.

BTW,Why do i plug and unplug USB Mouse 1000 times result in BSOD?

The result from RtlInitUnicodeString?

Best Regards
Ken

2

> BTW,Why do i plug and unplug USB Mouse 1000 times result in BSOD?

I don’t believe you have plugged and unplugged your mouse
1000 timer really, but this BSOD occurs every time when
the name is stored at the end of the page or near of it.
(exactly - when the random zero WCHAR after the name
does not occur until next inaccessible page).
When so, then RtlInitUnicodeString touches memory
page which is after it and causes access violation.

BTW your crash dump should prove this.

L.