Developing a File System filter Driver

[noe]

Hello all devs!!

I’m a student and I’m developing my Final Project in the University. I
have to develop a driver for Windows XP that work so:
I have a file in the HD (NTFS file system) of my PC and I want to copy it
to the floppy disk (FAT16 file system). But I need that the file data in
the floppy disk is modified (added 1 respect to the original value).
For example:

I have-> HD file data: ‘hello’
I need to obtain -> Floppy file data: ‘ifmmp’

I know I have to write a File System Filter Driver.
I’m working about the sample code ‘sfilter.c’ of IFS Kit.
I think that one of the routines which will be modified is this:

BOOLEAN
SfFastIoRead (IN PFILE_OBJECT FileObject, IN PLARGE_INTEGER FileOffset,
IN ULONG Length, IN BOOLEAN Wait, IN ULONG LockKey, OUT PVOID Buffer,
OUT PIO_STATUS_BLOC K IoStatus, IN PDEVICE_OBJECT DeviceObject)

{
PDEVICE_OBJECT nextDeviceObjec t;
PFAST_IO_DISPAT CH fastIoDispatch;

PAGED_CODE();
VALIDATE_IRQL(I rp);

if (DeviceObject->DeviceExtensio n) {

ASSERT(IS_MY_DE VICE_OBJECT( DeviceObject ));

//
// Pass through logic for this type of Fast I/O
//

nextDeviceObjec t = ((PSFILTER_DEVI CE_EXTENSION)
DeviceObject->DeviceExtensio n)->AttachedToDevi ceObject;
ASSERT(nextDevi ceObject);

fastIoDispatch = nextDeviceObjec t->DriverObject->FastIoDispatch ;

if (VALID_FAST_IO_ DISPATCH_HANDLE R( fastIoDispatch, FastIoRead ))
{

return (fastIoDispatch->FastIoRead)(
FileObject,
FileOffset,
Length,
Wait,
LockKey,
Buffer,
IoStatus,
nextDeviceObjec t );
}
}
return FALSE;
}

I suppose what I have to modify is the parameter “buffer” but I’m not sure
and I don’t know how I have to do.

It’s the first time I face a problem so serious because I have never
worked with drivers.
Please, could you help me?
Thanks a lot

[Dan Pop]

In <69************ *************** ***@localhost.t alkaboutprogram ming.com> "noe" <no*****@mixmai l.com> writes:

BOOLEAN
SfFastIoRead (IN PFILE_OBJECT FileObject, IN PLARGE_INTEGER FileOffset,
IN ULONG Length, IN BOOLEAN Wait, IN ULONG LockKey, OUT PVOID Buffer,
OUT PIO_STATUS_BLOC K IoStatus, IN PDEVICE_OBJECT DeviceObject)

{
PDEVICE_OBJECT nextDeviceObjec t;
PFAST_IO_DISPAT CH fastIoDispatch;

PAGED_CODE();
VALIDATE_IRQL(I rp);

if (DeviceObject->DeviceExtensio n) {

ASSERT(IS_MY_DE VICE_OBJECT( DeviceObject ));

//
// Pass through logic for this type of Fast I/O
//

nextDeviceObjec t = ((PSFILTER_DEVI CE_EXTENSION)
DeviceObject->DeviceExtensio n)->AttachedToDevi ceObject;
ASSERT(nextDevi ceObject);

fastIoDispatch = nextDeviceObjec t->DriverObject->FastIoDispatch ;

if (VALID_FAST_IO_ DISPATCH_HANDLE R( fastIoDispatch, FastIoRead ))
{

return (fastIoDispatch->FastIoRead)(
FileObject,
FileOffset,
Length,
Wait,
LockKey,
Buffer,
IoStatus,
nextDeviceObjec t );
}
}
return FALSE;
}

Please do not post garbage to this newsgroup. If I try to compile your
code, this is what I get:

fangorn:~/tmp 177> gcc -c test.c
test.c:2: error: parse error before "SfFastIoRe ad"
test.c:2: error: parse error before "PFILE_OBJE CT"
test.c: In function `SfFastIoRead':
test.c:7: error: `PDEVICE_OBJECT ' undeclared (first use in this function)
test.c:7: error: (Each undeclared identifier is reported only once
test.c:7: error: for each function it appears in.)
test.c:7: error: parse error before "nextDeviceObje ct"
test.c:8: error: `PFAST_IO_DISPA TCH' undeclared (first use in this function)
test.c:11: error: `Irp' undeclared (first use in this function)
test.c:13: error: `DeviceObject' undeclared (first use in this function)
test.c:21: error: `nextDeviceObje ct' undeclared (first use in this function)
test.c:21: error: `PSFILTER_DEVIC E_EXTENSION' undeclared (first use in this function)
test.c:22: error: parse error before "DeviceObje ct"
test.c:25: error: `fastIoDispatch ' undeclared (first use in this function)
test.c:27: error: `FastIoRead' undeclared (first use in this function)
test.c:31: error: `FileObject' undeclared (first use in this function)
test.c:32: error: `FileOffset' undeclared (first use in this function)
test.c:33: error: `Length' undeclared (first use in this function)
test.c:34: error: `Wait' undeclared (first use in this function)
test.c:35: error: `LockKey' undeclared (first use in this function)
test.c:36: error: `Buffer' undeclared (first use in this function)
test.c:37: error: `IoStatus' undeclared (first use in this function)
test.c:41: error: `FALSE' undeclared (first use in this function)

Furthermore, none of these diagnostics could be fixed by the inclusion of
any standard header, so your code is beyond any hope in this newsgroup.

Dan
--
Dan Pop
DESY Zeuthen, RZ group
Email: Da*****@ifh.de

[noe]

Obviously it's only a part of the sample code. If you want to see the
complete code you have to check "sfilter.c" from the samples of IFS Kit.

[Mark A. Odell]

"noe" <no*****@mixmai l.com> wrote in
news:f4******** *************** *******@localho st.talkaboutpro gramming.com:

Obviously it's only a part of the sample code. If you want to see the
complete code you have to check "sfilter.c" from the samples of IFS Kit.

So what? This is system specific stuff - off-topic here.

--
- Mark ->
--

[Jack Klein]

On Wed, 26 May 2004 11:54:02 -0400, "noe" <no*****@mixmai l.com> wrote
in comp.lang.c:

Hello all devs!!

I’m a student and I’m developing my Final Project in the University. I
have to develop a driver for Windows XP that work so:
I have a file in the HD (NTFS file system) of my PC and I want to copy it
to the floppy disk (FAT16 file system). But I need that the file data in
the floppy disk is modified (added 1 respect to the original value).
For example:

I have-> HD file data: ‘hello’
I need to obtain -> Floppy file data: ‘ifmmp’

[snip vast amounts of off-topic code that look more like Visual Basic
than C]

There is no need whatsoever for this to be a driver program. Plain
old ordinary C FILE * streams will do this quite nicely.

#include <stdio.h>
#include <stdlib.h>

int main(void)
{
FILE *fin, *fout;
int ch;

fin = fopen("source_f ile_name", "r");
fout = fopen("destinat ion_file_name", "w");

if (!fin || !fout)
{
puts("error opening files!");
return EXIT_FAILURE;
}

while ((ch = fgetc(fin)) != EOF)
{
fputc(ch + 1, fout);
}
fclose(fin);
fclose(fout);
return EXIT_SUCCESS;
}

--
Jack Klein
Home: http://JK-Technology.Com
FAQs for
comp.lang.c http://www.eskimo.com/~scs/C-faq/top.html
comp.lang.c++ http://www.parashift.com/c++-faq-lite/
alt.comp.lang.l earn.c-c++
http://www.contrib.andrew.cmu.edu/~a...FAQ-acllc.html

[Dan Pop]

In <f4************ *************** ***@localhost.t alkaboutprogram ming.com> "noe" <no*****@mixmai l.com> writes:

Obviously it's only a part of the sample code. If you want to see the
complete code you have to check "sfilter.c" from the samples of IFS Kit.

1. How can you expect any advice without posting the complete code?

2. My point was that the code is not written in portable C, so you have
posted it in the wrong newsgroup.

Dan
--
Dan Pop
DESY Zeuthen, RZ group
Email: Da*****@ifh.de

[Dan Pop]

In <n8************ *************** *****@4ax.com> Jack Klein <ja*******@spam cop.net> writes:

On Wed, 26 May 2004 11:54:02 -0400, "noe" <no*****@mixmai l.com> wrote
in comp.lang.c:

Hello all devs!!

I’m a student and I’m developing my Final Project in the University. I
have to develop a driver for Windows XP that work so:
I have a file in the HD (NTFS file system) of my PC and I want to copy it
to the floppy disk (FAT16 file system). But I need that the file data in
the floppy disk is modified (added 1 respect to the original value).
For example:

I have-> HD file data: ‘hello’
I need to obtain -> Floppy file data: ‘ifmmp’

[snip vast amounts of off-topic code that look more like Visual Basic
than C]

There is no need whatsoever for this to be a driver program. Plain
old ordinary C FILE * streams will do this quite nicely.

Not if you want the filtering to happen *transparently* . If the filter
must be hooked into the OS, it must fit into the hooks provided for this
purpose. This is what makes the post off topic here. Once the OS
interfacing issues are understood, the actual filtering is one of the
most trivial things one can imagine.

Dan
--
Dan Pop
DESY Zeuthen, RZ group
Email: Da*****@ifh.de

[RoSsIaCrIiLoIA]

On Wed, 26 May 2004 -0500, Jack Klein <ja*******@spam cop.net> wrote:

#include <stdio.h>
#include <stdlib.h>

int main(void)
{
FILE *fin, *fout;
int ch;

fin = fopen("source_f ile_name", "r");
fout = fopen("destinat ion_file_name", "w");

if (!fin || !fout)
{
puts("error opening files!");
return EXIT_FAILURE;
}

if fin==NULL and fout!=NULL and no exit()
does it mean that "fout" is open afther the end of
the programme?

[Michael Fyles]

RoSsIaCrIiLoIA <[e-mail]> wrote:

On Wed, 26 May 2004 -0500, Jack Klein <ja*******@spam cop.net> wrote:

#include <stdio.h>
#include <stdlib.h>

int main(void)
{
FILE *fin, *fout;
int ch;

fin = fopen("source_f ile_name", "r");
fout = fopen("destinat ion_file_name", "w");

if (!fin || !fout)
{
puts("error opening files!");
return EXIT_FAILURE;
}

if fin==NULL and fout!=NULL and no exit()
does it mean that "fout" is open afther the end of
the programme?

No, returning from main does the same thing as calling exit.

--
Michael