sfilter IRP_MJ_READ question ?

NTFSD
1

Hello,

why my sfRead dispatch routine didn’t work?

I modified some code in DriverEntry

i.e:

for(i = 0; i <= IRP_MJ_MAXMUM_FUNCTION; i++ )
{
DriverObject->MajorFunction[i] = SfPassThrough;
}

DriverObject->MajorFunction[IRP_MJ_CREATE] = SfCreate;

DriverObject->MajorFunction[IRP_MJ_READ] = SfRead; // Modified by me

…
…

DBGSTATIC
NTSTATUS
SfRead( IN PDEVICE_OBJECT DeviceObject,
IN PIRP Irp )
{
…
…
}

The SfRead didn’t work.
Can somebody know What that reason?

Thanks in advance for your help

Best Regards

Ken Wang

2

What means “didn’t work” ?

It crashed ? Or it haven’t been called ?
Or anything else ?

L.

3

> It haven’t been called.

Then your filter ha not been attached to a volume.

L.