I am analysing the source of filespy for windows 2000 . I made a little
modifications to the code by registering a call back using
IoRegisterFsRegistrationChange. then i made an entry in registry and make
filespy boot time driver and change its group load order to filter. Then i
observe that for windows 2000, filespy only attaches itself with ntfs file
system and that automatically attaches with all the device volumes to which
ntfs is attached.
In windows xp the scenario is different. once attaches to a filesystem, then
filespy enumerates all the volumes that are attached with that particular
filesystem and attach itself with all volumes.
Is that what is happening or i am not able to understand code.
This implys that bahaviour of *IoAttachDeviceToDeviceStack API *is different
for windows 2000 and xp.
Regards
Rohit
IoRegisterFsRegistrationChange is different between the two versions
(figure you know that), however IoAttachDeviceToDeviceStack behaves the
same. If you have a FsRegistrationChange callback registered, then you
will see different behaviors (between W2k & XP) when
IoAttachDeviceToDeviceStack is called because that function will invoke
your IoRegisterFsRegistrationChange call-back (which is the one that
behaves differently between the versions).
I *think* that is what you were asking about, and I *think* that is
accurate… Have you tested this in a debugger, or tried to use Device
Tree to see what is attaching/not attaching, or are you simply asking
questions about code you modified that no one else can see?
Rohit wrote:
I am analysing the source of filespy for windows 2000 . I made a
little modifications to the code by registering a call back using
IoRegisterFsRegistrationChange. then i made an entry in registry and
make filespy boot time driver and change its group load order to
filter. Then i observe that for windows 2000, filespy only attaches
itself with ntfs file system and that automatically attaches with all
the device volumes to which ntfs is attached.
In windows xp the scenario is different. once attaches to a
filesystem, then filespy enumerates all the volumes that are attached
with that particular filesystem and attach itself with all volumes.
Is that what is happening or i am not able to understand code.
This implys that bahaviour of *IoAttachDeviceToDeviceStack API *is
different for windows 2000 and xp.
Regards
Rohit
— Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17 You are currently
subscribed to ntfsd as: unknown lmsubst tag argument: ‘’ To
unsubscribe send a blank email to xxxxx@lists.osr.com