Wdk FAQ : [FLTFL_OPERATION_REGISTRATION_SKIP_PAGING_IO] Why is this flag used here? (minifilter)
来源:互联网 发布:网络原创女歌手郑靖雯 编辑:程序博客网 时间:2024/06/02 06:25
original url from : http://www.osronline.com/showthread.cfm?link=238116
Q:
Below is the registration structure:CONST FLT_OPERATION_REGISTRATION Callbacks[] = {{ IRP_MJ_CREATE, 0, SfPreCreateCallback, SfPostCreateCallback },{ IRP_MJ_SET_INFORMATION, FLTFL_OPERATION_REGISTRATION_SKIP_PAGING_IO, SfPreSetInfoCallback, SfPostSetInfoCallback }, { IRP_MJ_CLEANUP, 0, SfPreCleanupCallback, SfPostCleanupCallback },{ IRP_MJ_OPERATION_END }};
Now, my questions are,
-why the filter has been setup to ignore PAGING IO in the
IRP_MJ_SET_INFORMATION?
-similarly, why has the PAGING IO not been ignored in the IRP_MJ_CREATE
and IRP_MJ_SET_INFORMATION?
A:
The paging I/O operations in the set information path change the file sizes.
Those cannot matter for deletion detection.
There are no paging I/O operations for create or cleanup.
The four operations that support paging I/O operations are: read, write, query
information and set information.
- Wdk FAQ : [FLTFL_OPERATION_REGISTRATION_SKIP_PAGING_IO] Why is this flag used here? (minifilter)
- Why me?Why here?
- 【html】What is href=“#” and why is it used?
- Why am I here?
- Why I'm Here
- Why I am Here
- why I am here?
- here is how I see this M$ development
- Here is what can get this system to converge
- react:undefined is not a function(this.State({flag:true,}))
- Why used the RxSwift
- want to port JIT to MIPS - which callingconvention is used here?
- 警告:'serialAttr' is used uninitialized in this function
- This data item is already used in a primary identifier.
- This data item is already used in a primary identifier
- Could not find a valid gem 'rails' (>= 0), here is why
- YOU SAY "THE RULE IS HERE",BUT I SAY "WHY?"
- This Is Why They Call It a Weakly-Ordered CPU
- hdu1231 最大连续子序列
- 1013:摆积木
- Linux从用户层到内核层系列 - TCP/IP协议栈部分系列11: 再话Linux系统调用
- Firebug使用之二--Command Line
- 浙大研究生复试上机考试2005——畅通工程
- Wdk FAQ : [FLTFL_OPERATION_REGISTRATION_SKIP_PAGING_IO] Why is this flag used here? (minifilter)
- java入门学习(八)数据类型之四类八种基础类型
- 1012:外币兑换
- u-boot简介
- cocos2d-x学习笔记—图片按钮
- C++四种强制转换
- 1021:恶搞指数
- 域环境入侵笔记
- I2C总线 ----LM75的读写