System IRQL going UP when on denying Read Request

NTFSD
1

Hi,

We hvae one file system filter driver on Windows 2000 where we have to deny
some file read requests.

What is happening is when we deny the file read requests some applications
are sending the read requests repeatedly and the IRQL of system is raising
to APC_LEVEL, at this moment my application is not able to speak to the
driver using IOCTL.

We are returning STATUS_ACCESS_DENIED as IOStatus and returning
STATUS_UNSUCCESSFUL. But if cha
Could any one help in understanding or what could be reason for this
behaviour.

Any information is helpful.

Thanks,
Kedar.

2

Which is the reason for denying requests? You
shouldn’t be denying them. If you do that for security
reasons (i.e. denying read operations on those files)
consider doing it in IRP_MJ_CREATE rather than denying
IRP_MJ_READ.

And why does your return value (STATUS_ACCESS_DENIED)
differ from the IoStatus.Status (STATUS_UNSUCCESSFUL)
? It doesn’t make any sense to me. Did you run Driver
Verifier with your driver? If yes, didn’t Driver
Verifier complain about that?

Regards,
Razvan

— kedar wrote:
> Hi,
>
> We hvae one file system filter driver on Windows
> 2000 where we have to deny
> some file read requests.
>
> What is happening is when we deny the file read
> requests some applications
> are sending the read requests repeatedly and the
> IRQL of system is raising
> to APC_LEVEL, at this moment my application is not
> able to speak to the
> driver using IOCTL.
>
> We are returning STATUS_ACCESS_DENIED as IOStatus
> and returning
> STATUS_UNSUCCESSFUL. But if cha
> Could any one help in understanding or what could be
> reason for this
> behaviour.
>
> Any information is helpful.
>
> Thanks,
> Kedar.
>
>
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as:
> xxxxx@yahoo.com
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

3

> ? It doesn’t make any sense to me. Did you run Driver

Verifier with your driver? If yes, didn’t Driver
Verifier complain about that?

He surely didn’t. DV bugchecks when the values
are different.

L.