FltRequestFileInfoOnCreateCompletion function (fltkernel.h)

Article
04/01/2021

A minifilter calls FltRequestFileInfoOnCreateCompletion during file pre-create to request that the file manager store file information for retrieval during post create.

Syntax

NTSTATUS FLTAPI FltRequestFileInfoOnCreateCompletion(
  PFLT_FILTER        Filter,
  PFLT_CALLBACK_DATA Data,
  ULONG              InfoClassFlags
);

Parameters

Filter

Opaque filter pointer that uniquely identifies the minifilter driver.

Data

Pointer to the FLT_CALLBACK_DATA callback data representing the I/O create operation.

InfoClassFlags

Flag bitmask indicating the type of file information that the file system should store for retrieval during post create. Can be any combination of the following flags:

Flag	Meaning
QoCFileStatInformation (0x00000001)	If set, the file system will store file stat information in a QUERY_ON_CREATE_FILE_STAT_INFORMATION structure for retrieval.
QoCFileLxInformation (0x00000002)	If set, the file system will store extended Linux-like information in a QUERY_ON_CREATE_FILE_LX_INFORMATION structure for retrieval.
QoCFileEaInformation (0x00000004)	If set, the file system will store extended attributes (EA) in a QUERY_ON_CREATE_EA_INFORMATION structure for retrieval.

Return value

FltRequestFileInfoOnCreateCompletion can return one of the following values:

Return code	Description
STATUS_SUCCESS	The file system successfully stored the requested file information.
STATUS_INSUFFICIENT_RESOURCES	FltRequestFileInfoOnCreateCompletion was unable to allocate sufficient memory in which to store the requested file information.
STATUS_INVALID_PARAMETER_2	The provided callback data object was not an IRP-based create operation.

Remarks

The minifilter can retrieve the file information by calling FltRetrieveFileInfoOnCreateCompletionEx or FltRetrieveFileInfoOnCreateCompletion during post create. A minifilter's performance is typically better when it requests and retrieves file information in this manner, rather than querying file information at a later time.

Requirements

Requirement	Value
Header	fltkernel.h (include Fltkernel.h)