Driver Problems? Questions? Issues?
Put OSR's experience to work for you! Contact us for assistance with:
  • Creating the right design for your requirements
  • Reviewing your existing driver code
  • Analyzing driver reliability/performance issues
  • Custom training mixed with consulting and focused directly on your specific areas of interest/concern.
Check us out. OSR, the Windows driver experts.

OSR Seminars


Go Back   OSR Online Lists > ntfsd
Welcome, Guest
You must login to post to this list
  Message 1 of 2  
25 Dec 17 23:11
clark stone
xxxxxx@hotmail.com
Join Date: 09 Nov 2017
Posts To This List: 5
notepad pagging write on remote file when disabled local buffering

In win10,my minifilter have disabled local buffering(by IOCTL_LMR_DISABLE_LOCAL_BUFFERING or oplock break),I observed a strange situation: There is a test.text on \\192.168.2.222\test,and the length of test.text is 0x2A.I opened the test.txt by notepad,and append some text,and then close it(save the file). 1.notepad cached write (offset:0x0,length:0x4B). 2.notepad paging write (offset:0x0,length:0x1000).and the top-level IRP is not NULL,the top level IRP is a 64bit pointer.(I think it is a cleanup IRP). 3.notepad cleanup. Anybody can explain it? 1.When notepad cached write,because I have disabled local buffering,why this cached write does not write to the remote side? In remote(192.168.2.222),I can't observed the write. 2.I have disabled local buffering,why the cleanup will issued nested paging write?
  Message 2 of 2  
27 Dec 17 04:02
Gabriel Bercea
xxxxxx@gmail.com
Join Date: 03 Mar 2008
Posts To This List: 320
notepad pagging write on remote file when disabled local buffering

Well it is pbably because notepad creates a section of the file and uses that to write to it. Hence the scenario you just described. Unless notepad uses FILE_FLAG_NO_BUFFERING you will see cached writes. The control code you mention has nothing to do with this or at least that's how I understand on what MSFT says about it. You should not confuse what a redirector does internally after receiving a CTL code like this, with general FS caching mechanisms. I believe that what you expected to see would have been the result of opening the file with no intermediate buffering flag. Test this with FileTest utility and see for yourself. Gabriel www.kasardia.com
Posting Rules  
You may not post new threads
You may not post replies
You may not post attachments
You must login to OSR Online AND be a member of the ntfsd list to be able to post.

All times are GMT -5. The time now is 00:35.


Copyright ©2015, OSR Open Systems Resources, Inc.
Based on vBulletin Copyright ©2000 - 2005, Jelsoft Enterprises Ltd.
Modified under license