![]() |
|
|||||||
| Notices |
![]() |
|
|
Thread Tools | Display Modes |
|
|
#1 |
|
Newbie
Join Date: Jun 2009
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
![]() OS:
|
How "IRP_MJ_CLOSE" come out when i call "ReadFile"
HI, everbody:
I have wrote a filter file system driver to print all the IRP sent to a certain disk, when i call the WinAPI "ReadFile" in user mode, i catch "IRP_MJ_CLOSE" and then "IRP_MJ_READ", when i call "CloseHandle", i catch "IRP_MJ_CLEANUP", the question is that how do "IRP_MJ_CLOSE" come out when i call "ReadFile" ? "Receipt of the IRP_MJ_CLEANUP request indicates that the *handle*From the WDK documentation for IRP_MJ_CLEANUP: reference count on a file object has reached zero." "Receipt of the IRP_MJ_CLOSE request indicates that the referenceFrom the WDK documentation for IRP_MJ_CLOSE: count on a file object has reached zero." Is the difference abvoe between "handle reference count" and "reference count" meaningful? If so, what does that mean? |
|
|
|
![]() |
| Tags |
| irp_mj_close fsd |
| Thread Tools | |
| Display Modes | |
|
|
< Windows Help - MS Office Help - Hardware Support >
| New To Site? | Need Help? |