FltQueryInformationByName function

Download EaseFilter Filter Driver SDK Setup File
Download EaseFilter Filter Driver SDK Zip File

NTSTATUS FLTAPI FltQueryInformationByName(
  PFLT_FILTER               Filter,
  PFLT_INSTANCE             Instance,
  POBJECT_ATTRIBUTES        ObjectAttributes,
  PIO_STATUS_BLOCK          IoStatusBlock,
  PVOID                     FileInformation,
  ULONG                     Length,
  FILE_INFORMATION_CLASS    FileInformationClass,
  PIO_DRIVER_CREATE_CONTEXT DriverContext
);

Parameters

Filter

Specifies the filter that is initiating this operation.

Instance

Specifies the instance towards which the create is targeted.

ObjectAttributes

Specifies the attributes to be used for the file object (for example, its name, SECURITY_DESCRIPTOR, etc.).

IoStatusBlock

The address of the caller's I/O status block.

FileInformation

A buffer to receive the requested information returned about the file.

Length

The length, in bytes, of the FileInformation buffer.

FileInformationClass

Specifies the type of information that should be returned about the file.

DriverContext

A pointer to the driver's context space.

Return value

Returns STATUS_SUCCESS if the operation is successful. Otherwise, returns an appropriate NTSTATUS error code.

Remarks

This function returns requested information about a file without opening the actual file. The information returned is determined by the FileInformationClass that is specified, and it is placed into the caller's FileInformation buffer.

If Instance is non-NULL then the create will be targeted to the specified instance, calling all filters below the current filter before sending the I/O down. If Instance is NULL, the I/O will be always sent to the top of the filter stack.

Requirements