TDI_SEND & FileObject

NTDEV
1

How can this be ?

I’ve got IRP :
Major = 0xf
Minor = 0x7 // TDI_SEND

FileObject->FsContext2 == 1 // this is TDI_TRANSPORT_ADDRESS_FILE

on the other hand, DDK says :
"
TDI_SEND
…
IrpSp->FileObject
Pointer to an open file object representing the connection endpoint.
…"

Does this mean, that I cannot trust the value in
FileObject->FsContext2 ???

–
Best regards,
foxgen mailto:xxxxx@yandex.ru

2

> How can this be ?

I’ve got IRP :
Major = 0xf
Minor = 0x7 // TDI_SEND

FileObject->FsContext2 == 1 // this is TDI_TRANSPORT_ADDRESS_FILE

on the other hand, DDK says :
"
TDI_SEND
…
IrpSp->FileObject
Pointer to an open file object representing the connection endpoint.

It’s possible for UDP. Something like connected UDP sockets but in TDI.

Address object is passed as connection endpoint to TDI_CONNECT, TDI_SEND and
TDI_DISCONNECT.

vlad-ntdev

3

> Address object is passed as connection endpoint to TDI_CONNECT,
TDI_SEND and

TDI_DISCONNECT.

IIRC AFD.SYS does not use TDI_CONNECT for UDP, it handles the
filtering and destination default itself.

Max