阅读:1355回复:3
请问要如何打开filter driver
filter driver中如何处理IRP_MJ_READ:
1,如果直接返回成功会导致重启 2,如果忽律堆栈并IoCallDriver,会在AP用CreateFile打开filter driver时重启 |
|
沙发#
发布于:2008-04-07 10:32
filter driver要如何区分IRP_MJ_READ是AP直接用CreateFile打开filter driver,还是因为AP打开function driver而收到IRP_MJ_READ?
|
|
板凳#
发布于:2008-04-07 13:45
你没complete request就直接返回成功了?当然要重启,因为read会先lock page,complete时unlock
|
|
|
地板#
发布于:2008-04-07 14:56
抱歉,是IRP_MJ_CREATE:. complete request的话直接重启.
我是要通过IOCTL 直接跟Filter driver通讯 |
|