0

While learning Minifilter development by reading MS Doc "Writing Preoperation and Postoperation Callback Routines" article, a sentence was confusing me:

When all minifilter drivers in the minifilter driver instance stack have processed the I/O operation--unless a minifilter driver has completed the I/O operation--the filter manager sends the operation to legacy filters and the file system.

At first glance, I would tell that

a minifilter driver has completed the I/O operation

would mean that the minifilter driver can interrupt/stop the I/O operation and clean the I/O operation from the I/O call stack. Is it correct? If not, can you explain the difference between these two terms?

Baskman
  • 75
  • 9

0 Answers0