Given a pointer to a pinned buffer control block (BCB) for a file, the CcGetFileObjectFromBcb routine returns a pointer to the file object that the cache manager is using for that file.
NTKERNELAPI PFILE_OBJECT CcGetFileObjectFromBcb( PVOID Bcb );
Pointer to the pinned BCB.
Pointer to the file object, or NULL if the file is not cached or is no longer cached.
The file object pointer is guaranteed to remain valid as long as the BCB exists.
|Header||ntifs.h (include Ntifs.h)|