Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update nf-fltkernel-fltcreatefileex.md #423

Closed
wants to merge 1 commit into from
Closed

Update nf-fltkernel-fltcreatefileex.md #423

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
2 changes: 2 additions & 0 deletions wdk-ddi-src/content/fltkernel/nf-fltkernel-fltcreatefileex.md
View file
Open in desktop
Expand Up @@ -892,6 +892,8 @@ Any <i>FileHandle</i> that is obtained from <b>FltCreateFileEx</b> must eventual

Driver routines that do not run in the system process context must set the OBJ_KERNEL_HANDLE attribute for the <i>ObjectAttributes</i> parameter of <b>FltCreateFileEx</b>. Setting this attribute restricts the use of the handle that is returned by <b>FltCreateFileEx</b> to processes running in kernel mode. Otherwise, the handle can be accessed by the process in whose context the driver is running.

<div class="alert"><b>Note</b> Before calling this routine, call <a href="https://msdn.microsoft.com/library/windows/hardware/ff548405">IoGetTopLevelIrp</a>. If <b>IoGetTopLevelIrp</b> returns a non-<b>NULL</b> value, do not call the routine as this can cause a system deadlock.</div>

Certain <i>DesiredAccess</i> flags and combinations of flags have the following effects:

<ul>
Expand Down