Message 2 of 3
20 Mar 17 13:52
Join Date: 23 Feb 2011
Posts To This List: 164
How to flush memory mapped files?
Read the archives, there is no way to guarantee a flush. Welcome to the
challenges of encryption drivers.
Windows Driver Consulting
[mailto:email@example.com] On Behalf Of
Sent: Monday, March 20, 2017 1:48 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] How to flush memory mapped files?
Dear all, it has been a long time since I asked the last question few months
Now I encounter a new problem:
I build an encryption filter driver with Isolation Filter framework, my
filter driver maintains the memory/cache for white-list programs, and the
programs-not-in-white-list just use the memory/cache of system, this design
just worked well for most scenes. But for notepad.exe, my filter driver went
into a wrong way, after writing some text and save the file, I found that
the content in the file doesn't changed(I'm quite sure I have changed the
content of that txt).
In order to guarantee that programs-not-in-white-list can get the right and
up-to-date data, I think my filter driver should flush the memory mapped
files into the disk, but I didn't find a way to do so, is there any
functions could flush the memory mapped files into the disk?
NTFSD is sponsored by OSR
MONTHLY seminars on crash dump analysis, WDF, Windows internals and software
To unsubscribe, visit the List Server section of OSR Online at