FltRequestFileInfoOnCreateCompletion - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// fltkernel.h
NTSTATUS FLTAPI FltRequestFileInfoOnCreateCompletion(
PFLT_FILTER Filter,
PFLT_CALLBACK_DATA Data,
ULONG InfoClassFlags
);
View the official Windows Driver Kit DDI referenceNo description available.
A minifilter calls FltRequestFileInfoOnCreateCompletion during file pre-create to request that the file system stores file information for retrieval during post create.
FilterOpaque filter pointer that uniquely identifies the minifilter driver.
DataPointer to the FLT_CALLBACK_DATA callback data representing the I/O create operation.
InfoClassFlagsFlag bitmask indicating the type of file information that the file system should store for retrieval during post create. Can be any combination of the following flags:
| Flag | Meaning |
|---|---|
| QoCFileStatInformation (0x00000001) | If set, the file system will store file stat information in a QUERY_ON_CREATE_FILE_STAT_INFORMATION structure for retrieval. |
| QoCFileLxInformation (0x00000002) | If set, the file system will store extended Linux-like information in a QUERY_ON_CREATE_FILE_LX_INFORMATION structure for retrieval. |
| QoCFileEaInformation (0x00000004) | If set, the file system will store extended attributes (EA) in a QUERY_ON_CREATE_EA_INFORMATION structure for retrieval. |
| QoCFileUsnInformation (0x00000008) | If set, the file system will store USN information in a QUERY_ON_CREATE_USN_INFORMATION structure for retrieval. |
FltRequestFileInfoOnCreateCompletion can return one of the following values:
| Return code | Description |
|---|---|
| STATUS_SUCCESS | The file system successfully stored the requested file information. |
| STATUS_INSUFFICIENT_RESOURCES | FltRequestFileInfoOnCreateCompletion was unable to allocate sufficient memory in which to store the requested file information. |
| STATUS_INVALID_PARAMETER_2 | The provided callback data object was not an IRP-based create operation. |
The minifilter can retrieve the file information by calling FltRetrieveFileInfoOnCreateCompletionEx or FltRetrieveFileInfoOnCreateCompletion during post create. A minifilter's performance is typically better when it requests and retrieves file information in this manner, rather than querying file information at a later time.
FltRetrieveFileInfoOnCreateCompletion
FltRetrieveFileInfoOnCreateCompletionEx