noob queston

If I am making a device FILE_DEVICE_FILE what will I get in IRP_MJ_READ
, IRP_MJ_WRITE functions I mean what will the Irp structure hold. (the
read buffer for IRP_MJ_READ and the write buffer for the IRP_MJ_WRITE)
and how can I stop these operations from happening the read write close
or open functions without hooking?

Don
Fri Sep 09 08:48:36 CDT 2005

You can't easily stop these at read/write time. Instead, catch the
IRP_MJ_CREATE and determine if the program doing the open should be allowed
to read or write, if the program is asking for more than you want to give
it, fail the open.

Note, to do this correctly requires the IFS kit, either buy it, or get the
WDK beta which includes it for free. Also, file system filters are some of
the toughest things to write in Windows, at your level of questions assume
18 months at least till a stable driver.


--
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply



"euacela" <eu_acela@yahoo.com> wrote in message
news:1126273219.767871.149390@g44g2000cwa.googlegroups.com...
> If I am making a device FILE_DEVICE_FILE what will I get in IRP_MJ_READ
> , IRP_MJ_WRITE functions I mean what will the Irp structure hold. (the
> read buffer for IRP_MJ_READ and the write buffer for the IRP_MJ_WRITE)
> and how can I stop these operations from happening the read write close
> or open functions without hooking?
>