Why do some structures end with an array of size 1?

from:https://blogs.msdn.microsoft.com/oldnewthing/20040826-00/?p=38043/ Some Windows structures are variable-sized, beginning with a fixed header,...

2016-09-30 11:48:35

阅读数 441

评论数 0

minifilter -- User Mode Communication

Filter Communication Port Object To implement security and enable multiplecommunication channels, a new object has been introduced called a minifilt...

2016-09-29 17:05:59

阅读数 491

评论数 0


树的表示方法有双亲表示法、孩子表示法、双亲孩子表示法、孩子兄弟表示法,其中前三种基于数组,最后一种基于链表。我定义的数节点数据结构为 typedef struct _TREENODE { char val; _TREENODE* Parent; _TREENODE* Child; _TR...

2016-09-28 17:12:31

阅读数 315

评论数 0

Filter Initiated I/O

Certain minifilters need to perform I/O of theirown.  This I/O is only seen byminifilters below the current minifilter in the minifilter stack of the...

2016-09-27 20:36:24

阅读数 446

评论数 0

Minifilter - File Name Support

The Filter Manager provides library routinesthat retrieve the name of the object in the current operation through lookingat the operation parameters ...

2016-09-25 23:24:34

阅读数 711

评论数 0

String buffers and IRQL

from https://blogs.msdn.microsoft.com/doronh/2006/03/03/string-buffers-and-irql/ If you look at the docs for many Rtl string functions, you will...

2016-09-23 21:59:15

阅读数 248

评论数 0


事先声明,本文大部分为拷贝内容,本文的目的是验证这些内容。 根据windows核心编程所述,线程调用一个与图形用户界面有关的函数(例如检查它的消息队列或建立一个窗口),系统就会为该线程分配一些另外的资源,以便它能够执行与用户界面有关的任务。特别是,系统分配一个THREADINFO结构,并将这个数据...

2016-09-22 21:55:04

阅读数 197

评论数 0

Modifying the Parameters for an I/O Operation

A minifilter driver can modify the parameters for an I/O operation. For example, a minifilter driver's preoperation callback routine can redirect an...

2016-09-16 11:51:19

阅读数 281

评论数 0

Writing Postoperation Callback Routines

Like a completion routine, a postoperation callback routine is called at IRQL <= DISPATCH_LEVEL, in an arbitrary thread context. Because it can b...

2016-09-14 17:41:24

阅读数 567

评论数 0

Writing Preoperation and Postoperation Callback Routines

In its DriverEntry routine, a minifilter driver can register up to one preoperation callback routine and up to one postoperation callback routine for...

2016-09-14 00:02:42

阅读数 707

评论数 0

Writing a FilterUnloadCallback Routine for a Minifilter Driver

A file system minifilter driver can optionally register a PFLT_FILTER_UNLOAD_CALLBACK-typed routine as the minifilter driver's FilterUnloadCallback ...

2016-09-12 22:34:03

阅读数 542

评论数 0

取消 删除