开发者

Do mini-filter functions need APCs enabled?

开发者 https://www.devze.com 2022-12-29 06:13 出处：网络

Many Zw* functions that work with files (such as ZwCreateFile) need to be called at PASSIVE_LEVEL with APCs enabled: http://msdn.microsoft.com/en-us/library/ff566424%28VS.85%29.aspx. This is because,

相关专题：device-driver driver kernel wdk

Many Zw* functions that work with files (such as ZwCreateFile) need to be called at PASSIVE_LEVEL with APCs enabled: http://msdn.microsoft.com/en-us/library/ff566424%28VS.85%29.aspx. This is because, internally, I/O operations are asynchronous开发者_StackOverflowly and the completion of an operation is delivered through an APC (correct me if I'm wrong).

However, the documentation for similar functions from a mini-filter (such as FltCreateFile, FltReadFile, etc) does not specify that APCs should be enabled. Is it safe to call FltCreateFile/FltReadFile with APCs disabled?

Thanks!

You can call ZwCreateFile and FltCreateFile only at PASSIVE_LEVEL and with special kernel APCs enabled (normal kernel APCs can be disabled).