Tracking the "life" of a file

NTFSD
1

Hi, I need to keep track of the “life” of a file. I thought to build a
linked list of structure, where I put the FILE_OBJECT pointer, but, the
FILE_OBJECT is always the same??
If I retrieve it during the processing of IRP_MJ_CREATE, will it still
be valid in other irp? (like IRP_MJ_WRITE, IRP_MJ_SET_INFORMATION, etc…)
Are there any other ways to do that? (My driver needs to be compatible
with Win2k, so I can’t use any new XP (or 2003) features)

Thanks.

Lorenzo

2

Read http://www.osr.com/ntinsider/2002/tracking/tracking.htm,
http://www.osr.com/ntinsider/2000/fs_filter/fs_filter.htm and the PDF
file about filter drivers included in the IFS.

Strauss

Lorenzo wrote:

Hi, I need to keep track of the “life” of a file. I thought to build a
linked list of structure, where I put the FILE_OBJECT pointer, but, the
FILE_OBJECT is always the same??
If I retrieve it during the processing of IRP_MJ_CREATE, will it still
be valid in other irp? (like IRP_MJ_WRITE, IRP_MJ_SET_INFORMATION, etc…)
Are there any other ways to do that? (My driver needs to be compatible
with Win2k, so I can’t use any new XP (or 2003) features)

Thanks.

Lorenzo

Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@scua.com.br
To unsubscribe send a blank email to xxxxx@lists.osr.com

3

I read those articles, but I can’t figure out how to use
IoCreateStreamFileObject, and what it has to do with reference counting