Add missing fields in FLT_PARAMETERS.AcquireForSectionSynchronization#4038
Add missing fields in FLT_PARAMETERS.AcquireForSectionSynchronization#4038cgallred wants to merge 2 commits into
Conversation
|
@cgallred : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. |
|
Learn Build status updates of commit ba3a49f: ✅ Validation status: passed
For more details, please refer to the build report. |
|
Can you review the proposed changes? IMPORTANT: When the changes are ready for publication, adding a #label:"aq-pr-triaged" |
prmerger-automator
Bot
added
the
aq-pr-triaged
There was a problem hiding this comment.
Pull request overview
Updates the WDK IFS reference documentation for FLT_PARAMETERS.AcquireForSectionSynchronization to reflect newly documented input fields provided during IRP_MJ_ACQUIRE_FOR_SECTION_SYNCHRONIZATION.
Changes:
- Adds the missing
FlagsandAllocationAttributesmembers to the documentedAcquireForSectionSynchronizationparameter block. - Documents the
Flagsbitmask (including last-access/last-write update suppression flags) and describesAllocationAttributesasSEC_XXXallocation attributes.
|
Learn Build status updates of commit 668e69d: ✅ Validation status: passed
For more details, please refer to the build report. |
@lorihollasch the note about
SEC_IMAGE_NO_EXECUTEin the new AllocationAttributes member description is a bit incomplete. I'm working on adding a new flag for the Flags field that will tell filters whether aSEC_IMAGEsection is no-execute. Once that ships and is backported to Germanium branches, Flags will have an additional value:FS_FILTER_SECTION_SYNC_IN_FLAG_IMAGE_NO_EXECUTE (0x00000004).The way the memory manager works it isn't possible to pass
SEC_IMAGE_NO_EXECUTEto the minifilters, hence the new flag.