What do you mean by ‘a fake one’?
Are you filtering network attachments in your InstanceSetup callback?
Pete
–
Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295
------ Original Message ------
From: “xxxxx@serpurity.com”
To: “Windows File Systems Devs Interest List”
Sent: 12/7/2017 9:28:59 AM
Subject: RE:[ntfsd] How to filter the request in MUP?
>The FO(ffffbe058fd0aa10) indicated is just a fake one, the real file
>object is owned by my encryption filter. If this file located in the
>local file system things all goes well, but when the file is located in
>the network position, my encryption filter seems can not catch the
>request, so it encounter the MUP_BUGCHECK_NO_FILECONTEXT. How can my
>encryption filter catch the request before it go into the mup? I tried
>IRP_MJ_QUERY_VOLUME_INFORMATION, but it seems didn’t work.
>
>—
>NTFSD is sponsored by OSR
>
>
>MONTHLY seminars on crash dump analysis, WDF, Windows internals and
>software drivers!
>Details at http:
>
>To unsubscribe, visit the List Server section of OSR Online at
>http:</http:></http:>