Do mini-filter functions need APCs enabled?

Posted by botismarius on Stack Overflow See other posts from Stack Overflow or by botismarius
Published on 2010-05-04T11:33:01Z Indexed on 2010/05/04 11:38 UTC
Read the original article Hit count: 204

Filed under:

driver

|

mini-filter

Hello,

Many Zw* functions that work with files (such as ZwCreateFile) need to be called at PASSIVE_LEVEL with APCs enabled: http://msdn.microsoft.com/en-us/library/ff566424%28VS.85%29.aspx. This is because, internally, I/O operations are asynchronously and the completion of an operation is delivered through an APC (correct me if I'm wrong).

However, the documentation for similar functions from a mini-filter (such as FltCreateFile, FltReadFile, etc) does not specify that APCs should be enabled. Is it safe to call FltCreateFile/FltReadFile with APCs disabled?

Thanks!

© Stack Overflow or respective owner

Related posts about driver

How do I remove a root kit from Windows XP?

as seen on Super User - Search for 'Super User'
I was looking for root kits following these instructions http://computersight.com/software/how-to-manually-remove-rootkit/ and saw this in my boot log: Loaded driver \SystemRoot\System32\Drivers\awhk9fmc.SYS I tried to search for that filename in Google but there was absolutely nothing found. I… >>> More
Can't log in to GNOME after upgrade (raring -> saucy)

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I've just upgraded my ubuntu (raring to saucy) and I now can't log in to GNOME. As opposed to virtual consoles (Ctrl-Alt-F1, for example). I set it up to log in automatically. But it asks for password now. I type in the password, press Enter, the screen blinks and here I am again at the login screen… >>> More
BSOD Before Windows Will Loads - Graphics Related

as seen on Super User - Search for 'Super User'
Alright deep breath here: (Windows 7 Home Premium 64 bit btw) Today I installed Star Craft 2 Beta. After trying to log in, it had some issues where it said my device stopped working (referring to my video device I have to imagine). After I force quit the game there were some random "hot" (various… >>> More
OS X 10.9 Mavericks Kernel Panics out of the box

as seen on Super User - Search for 'Super User'
OS X Kernel panics after a fresh install of OS X 10.9 on a 17" Macbook Pro. Anonymous UUID: D002464D-24B7-C2B5-3D83-1C0B02873B29 Wed Oct 30 11:08:17 2013 panic(cpu 1 caller 0xffffff8006edc19e): Kernel trap at 0xffffff7f88e0a96c, type 14=page fault, registers: CR0: 0x000000008001003b, CR2:… >>> More
Which Xorg driver (not kernel driver) to use with GMA500/Poulsbo video hardware in 12.04

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have a Asus EeePC with a GMA500 video card. I followed the instructions on https://wiki.ubuntu.com/HardwareSupportComponentsVideoCardsPoulsbo/, which made the netbook boot correctly. Without any xorg.conf file, Xorg uses the VESA driver, which is quite slow. Manually specifying fbdev as driver in… >>> More

Related posts about mini-filter

Do mini-filter functions need APCs enabled?

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello, Many Zw* functions that work with files (such as ZwCreateFile) need to be called at PASSIVE_LEVEL with APCs enabled: http://msdn.microsoft.com/en-us/library/ff566424%28VS.85%29.aspx. This is because, internally, I/O operations are asynchronously and the completion of an operation is delivered… >>> More
windows I/O manager - IRP's classification in read-like and write-like

as seen on Stack Overflow - Search for 'Stack Overflow'
I am writing a windows filesystem minifilter driver that must fail IRP's in a preoperation callback. How can I find out from the callback parameters if the operation is read-like ( only reads data ) or it's write-like ( modifies data on the disk - write, delete etc ) ? I'm thinking on: Data->Iopb->TargetFileObject->ReadAccess… >>> More
windows kernel mode IOCTL returns random results

as seen on Stack Overflow - Search for 'Stack Overflow'
I use the following code to fetch PSTORAGE_HOTPLUG_INFO capabilities from disks via IOCTL in a minifilter driver, but the returning hotplugInfo structure has all the fields set to random nonzero values on subsequent executions. What am I doing wrong? RESULT: 00000014 0.00046322 IOCTL Volume Media… >>> More