Minifilter Memory mapped files
in [Win32 Kernel]
|
From: Lokanadham on 4 Sep 2006 02:02 Hi, I am writing a filter driver that will encrypt/decrypt the file. The problem i am facing is when some application uses memory mapped files like MS Word or Wordpad to read the file. I cannot intercept the read call for this kind of files, no IRP_MJ_READ for this kinda files. Is there something special i have to do for this kind of memory mapped files. Thanks Lokanadham R
From: Don Burn on 4 Sep 2006 08:47 Go to http://www.osronline.com and sign up for the NTFSD list. Then search the archives of that list, it has been covered extensively. -- Don Burn (MVP, Windows DDK) Windows 2k/XP/2k3 Filesystem and Driver Consulting http://www.windrvr.com Remove StopSpam from the email to reply "Lokanadham" <lokanadham.r(a)gmail.com> wrote in message news:1157349747.906786.132610(a)p79g2000cwp.googlegroups.com... > Hi, > > I am writing a filter driver that will encrypt/decrypt the file. The > problem i am facing is when some application uses memory mapped files > like MS Word or Wordpad to read the file. I cannot intercept the read > call for this kind of files, no IRP_MJ_READ for this kinda files. Is > there something special i have to do for this kind of memory mapped > files. > > > Thanks > Lokanadham R >
From: Lokanadham on 5 Sep 2006 01:21 Thanks for Replay Don Burn, i don it before, but i not received any information regarding this memory mapped files, Thanks and regards, Lokanadham R Don Burn wrote: > Go to http://www.osronline.com and sign up for the NTFSD list. Then search > the archives of that list, it has been covered extensively. > > > > -- > Don Burn (MVP, Windows DDK) > Windows 2k/XP/2k3 Filesystem and Driver Consulting > http://www.windrvr.com > Remove StopSpam from the email to reply > > > > "Lokanadham" <lokanadham.r(a)gmail.com> wrote in message > news:1157349747.906786.132610(a)p79g2000cwp.googlegroups.com... > > Hi, > > > > I am writing a filter driver that will encrypt/decrypt the file. The > > problem i am facing is when some application uses memory mapped files > > like MS Word or Wordpad to read the file. I cannot intercept the read > > call for this kind of files, no IRP_MJ_READ for this kinda files. Is > > there something special i have to do for this kind of memory mapped > > files. > > > > > > Thanks > > Lokanadham R > >
From: Lokanadham on 7 Sep 2006 00:27 When a program like notepad, uses Memory Mapped files to read content from a file, our mini filter should intercept those calls and then change the contents in memory that are received by notepad. Is it possible yes/no if yes, then how? regards, Lokanadham R Lokanadham wrote: > Thanks for Replay Don Burn, > > i don it before, but i not received any information regarding this > memory mapped files, > > Thanks and regards, > Lokanadham R > Don Burn wrote: > > Go to http://www.osronline.com and sign up for the NTFSD list. Then search > > the archives of that list, it has been covered extensively. > > > > > > > > -- > > Don Burn (MVP, Windows DDK) > > Windows 2k/XP/2k3 Filesystem and Driver Consulting > > http://www.windrvr.com > > Remove StopSpam from the email to reply > > > > > > > > "Lokanadham" <lokanadham.r(a)gmail.com> wrote in message > > news:1157349747.906786.132610(a)p79g2000cwp.googlegroups.com... > > > Hi, > > > > > > I am writing a filter driver that will encrypt/decrypt the file. The > > > problem i am facing is when some application uses memory mapped files > > > like MS Word or Wordpad to read the file. I cannot intercept the read > > > call for this kind of files, no IRP_MJ_READ for this kinda files. Is > > > there something special i have to do for this kind of memory mapped > > > files. > > > > > > > > > Thanks > > > Lokanadham R > > >
From: David J. Craig on 7 Sep 2006 01:39 Why are you asking in a win32 group? Are file systems somehow connected to win32? There are no MS groups for file systems or file systems filters. Try OSR. "Lokanadham" <lokanadham.r(a)gmail.com> wrote in message news:1157603242.434578.308060(a)b28g2000cwb.googlegroups.com... > When a program like notepad, uses Memory Mapped files to read content > from a file, our mini filter should intercept those calls and then > change the contents in memory that are received by notepad. Is it > possible yes/no if yes, then how? > > regards, > Lokanadham R > > > Lokanadham wrote: >> Thanks for Replay Don Burn, >> >> i don it before, but i not received any information regarding this >> memory mapped files, >> >> Thanks and regards, >> Lokanadham R >> Don Burn wrote: >> > Go to http://www.osronline.com and sign up for the NTFSD list. Then >> > search >> > the archives of that list, it has been covered extensively. >> > >> > >> > >> > -- >> > Don Burn (MVP, Windows DDK) >> > Windows 2k/XP/2k3 Filesystem and Driver Consulting >> > http://www.windrvr.com >> > Remove StopSpam from the email to reply >> > >> > >> > >> > "Lokanadham" <lokanadham.r(a)gmail.com> wrote in message >> > news:1157349747.906786.132610(a)p79g2000cwp.googlegroups.com... >> > > Hi, >> > > >> > > I am writing a filter driver that will encrypt/decrypt the file. The >> > > problem i am facing is when some application uses memory mapped files >> > > like MS Word or Wordpad to read the file. I cannot intercept the read >> > > call for this kind of files, no IRP_MJ_READ for this kinda files. Is >> > > there something special i have to do for this kind of memory mapped >> > > files. >> > > >> > > >> > > Thanks >> > > Lokanadham R >> > > >
|
Pages: 1 Prev: USB disk letter and properties Next: loadlibrary mfc exe |