Is it ok to pend create/cleanup/close?

NTDEV
1

I remember that I have read somewhere (forgot where exactly) that you should avoid pending create/close/cleanup IRPs. Can anyone confirm if this is true?

Thank you.

2

Vista and later support cancelable creates which were pended, so pending creates is fine. Pending cleanup and close irps does not make much sense because they are sent synchronously be the io manager. What type of driver is this and why do you want to pend these irps?

d

tiny phone keyboard + fat thumbs = you do the muth

-----Original Message-----
From: xxxxx@yahoo.com
Sent: Monday, January 25, 2010 8:13 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] Is it ok to pend create/cleanup/close?

I remember that I have read somewhere (forgot where exactly) that you should avoid pending create/close/cleanup IRPs. Can anyone confirm if this is true?

Thank you.

—
NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

3

My question is mainly about general driver programming best practices, but I’m writing a file-system mini-filter and I might need to pend create IRPs for some files which must be scanned first by a user-mode application.

4

FS drivers follow a bit of a different set of rules than non FS drivers do. You should really be explicit up front about what type of model you are asking about. NTFSD is really a more appropriate forum for FS related questions. Pending creates in the FS world takes on more significant meaning since file systems are typically very sensitive about what context the create is processed in, you need to be careful about pending creates vs synchronously blocking them.

d

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@yahoo.com
Sent: Monday, January 25, 2010 8:20 AM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] Is it ok to pend create/cleanup/close?

My question is mainly about general driver programming best practices, but I’m writing a file-system mini-filter and I might need to pend create IRPs for some files which must be scanned first by a user-mode application.

NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

5

Thanks Doron.
I’ll post this question on ntfsd also.