Driver Problems? Questions? Issues?
Put OSR's experience to work for you! Contact us for assistance with:
  • Creating the right design for your requirements
  • Reviewing your existing driver code
  • Analyzing driver reliability/performance issues
  • Custom training mixed with consulting and focused directly on your specific areas of interest/concern.
Check us out. OSR, the Windows driver experts.

Monthly Seminars at OSR Headquarters

East Coast USA
Windows Internals and SW Drivers, Dulles (Sterling) VA, 9 April 2018

Writing WDF Drivers I: Core Concepts, Manchester, NH, 7 May 2018

Kernel Debugging & Crash Analysis for Windows, Dulles (Sterling), VA, 21 May 2018

Go Back   OSR Online Lists > ntfsd
Welcome, Guest
You must login to post to this list
  Message 1 of 3  
07 Dec 17 11:45
Peter Scott
Join Date: 17 Feb 2012
Posts To This List: 683
Re[2]: How to filter the request in MUP?

What do you mean by 'a fake one'? Are you filtering network attachments in your InstanceSetup callback? Pete -- Kernel Drivers Windows File System and Device Driver Consulting 866.263.9295 ------ Original Message ------ From: "" <> To: "Windows File Systems Devs Interest List" <> Sent: 12/7/2017 9:28:59 AM Subject: RE:[ntfsd] How to filter the request in MUP? >The FO(ffffbe058fd0aa10) indicated is just a fake one, the real file >object is owned by my encryption filter. If this file located in the >local file system things all goes well, but when the file is located in >the network position, my encryption filter seems can not catch the >request, so it encounter the MUP_BUGCHECK_NO_FILECONTEXT. How can my >encryption filter catch the request before it go into the mup? I tried >IRP_MJ_QUERY_VOLUME_INFORMATION, but it seems didn't work. > >--- >NTFSD is sponsored by OSR <...excess quoted lines suppressed...>
  Message 2 of 3  
07 Dec 17 11:54
Hunter Wang
Join Date: 20 Mar 2017
Posts To This List: 9
Re[2]: How to filter the request in MUP?

I mean the file object indicated is not really created, my encryption filter create a file object in the pre-create routine and just return STATUS_SUCCESS to the upper driver. How to filter the network attachments in InstanceSetup callback, that's exactly my question.
  Message 3 of 3  
07 Dec 17 12:10
Hunter Wang
Join Date: 20 Mar 2017
Posts To This List: 9
Re[2]: How to filter the request in MUP?

In filespy, I could see my encryption filter attach to the mup device, it means my encryption filter has successfully filter the network attachments right? My encryption filter could catch the request(IRP_MJ_CREATE) towards file(\Device\mup\test\ccedr.txt), it also means that my encryption filter is filtering the network requests, is that right? But it's obvious that the BSOD info says my encryption filter driver didn't catch one of the requests towards the network file, or else it would work well without BSOD, how could this happen?
Posting Rules  
You may not post new threads
You may not post replies
You may not post attachments
You must login to OSR Online AND be a member of the ntfsd list to be able to post.

All times are GMT -5. The time now is 10:44.

Copyright ©2015, OSR Open Systems Resources, Inc.
Based on vBulletin Copyright ©2000 - 2005, Jelsoft Enterprises Ltd.
Modified under license