why some dispatch functions have no effect when the driver is loaded on demand?

NTFSD
1

I wrote a file system filter driver.
I found a strange thing:

if my driver is loaded when system boots, all dispatch functions are
available; but if loaded as demanded after system boots, only driverentry,
irp_mj_create, irp_mj_device_control can run as normal, other dispatch
functions take no effect.
I put breakpoints in those functions but never stop.

why? Please help me!

2

Maybe you are attached to nothing.

L.

3

Are you using IoRegisterFsRegistrationChange on Windows NT or 2000? This is
expected behavior then.
The IRP_MJ_CREATE and DIOC calls are for your device - not for filtered devices,
really.

Holk wrote:

I wrote a file system filter driver.
I found a strange thing:

if my driver is loaded when system boots, all dispatch functions are
available; but if loaded as demanded after system boots, only driverentry,
irp_mj_create, irp_mj_device_control can run as normal, other dispatch
functions take no effect.
I put breakpoints in those functions but never stop.

why? Please help me!

Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@alfasp.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32 developers.
Alfa File Monitor - File monitoring library for Win32 developers.