FLT_IS_FS_FILTER_OPERATION macro

아티클
08/03/2017
읽는 데 2분 걸림

The FLT_IS_FS_FILTER_OPERATION macro determines whether the given callback data structure represents a file system filter (FSFilter) callback operation.

Syntax

BOOLEAN FLT_IS_FS_FILTER_OPERATION(
  [in] PFLT_CALLBACK_DATA Data
);

Parameters

Data [in]
A pointer to a callback data (FLT_CALLBACK_DATA) structure.

Return value

FLT_IS_FS_FILTER_OPERATION returns a nonzero value if the FLTFL_CALLBACK_DATA_FS_FILTER_OPERATION flag is set in the callback data structure. Otherwise, it returns zero.

Remarks

The FLT_IS_FS_FILTER_OPERATION macro checks whether the FLTFL_CALLBACK_DATA_FS_FILTER_OPERATION bit is set in the Flags member of the FLT_CALLBACK_DATA structure that the Data parameter points to. If this flag is set, the callback data structure represents one of the following file system filter (FSFilter) callback operations:

IRP_MJ_ACQUIRE_FOR_CC_FLUSH

IRP_MJ_ACQUIRE_FOR_MOD_WRITE

IRP_MJ_ACQUIRE_FOR_SECTION_SYNCHRONIZATION

IRP_MJ_RELEASE_FOR_CC_FLUSH

IRP_MJ_RELEASE_FOR_MOD_WRITE

IRP_MJ_RELEASE_FOR_SECTION_SYNCHRONIZATION

For information about specific FSFilter callback operations, see the reference entry for FsRtlRegisterFileSystemFilterCallbacks. Note that in the legacy filter driver model, filters used FsRtlRegisterFileSystemFilterCallbacks to register callback functions for various FSFilter callback operations. However, FsRtlRegisterFileSystemFilterCallbacks is not used in the minifilter driver model, and minifilter drivers should never call it.

Note The return type of FLT_IS_FS_FILTER_OPERATION is of the same type as the Flags member of the FLT_CALLBACK_DATA structure.

Requirements

Target platform	Desktop
Header	Fltkernel.h (include Fltkernel.h)