Edit

FILE_FS_DRIVER_PATH_INFORMATION structure (ntifs.h)

  • Article

The FILE_FS_DRIVER_PATH_INFORMATION structure is used to query whether a given driver is in the I/O path for a file system volume.

Syntax

typedef struct _FILE_FS_DRIVER_PATH_INFORMATION {
  BOOLEAN DriverInPath;
  ULONG   DriverNameLength;
  WCHAR   DriverName[1];
} FILE_FS_DRIVER_PATH_INFORMATION, *PFILE_FS_DRIVER_PATH_INFORMATION;

Members

DriverInPath

Receives TRUE if the driver is in the I/O path for the file system volume, FALSE otherwise.

DriverNameLength

Caller-supplied length of the driver name string.

DriverName[1]

Caller-supplied Unicode string containing the name of the driver.

Remarks

To perform this query, call FltQueryVolumeInformation or ZwQueryVolumeInformationFile, passing FileFsDriverPathInformation as the value of FileInformationClass and passing a caller-allocated, FILE_FS_DRIVER_PATH_INFORMATION-structured buffer as the value of FileInformation.

This information is file system-independent. Thus the call to FltQueryVolumeInformation or ZwQueryVolumeInformationFile does not cause an IRP to be sent to the file system.

No specific access rights are required to query this information. Thus this information is available as long as the volume is accessed through an open handle to the volume itself, or to a file or directory on the volume.

The size of the buffer passed in the FileInformation parameter to FltQueryVolumeInformation or ZwQueryVolumeInformationFile must be at least sizeof (FILE_FS_DRIVER_PATH_INFORMATION).

This structure must be aligned on a LONGLONG (8-byte) boundary.

Requirements

Requirement Value
Header ntifs.h (include Ntifs.h, Fltkernel.h)

See also

FltQueryVolumeInformation

ZwQueryVolumeInformationFile