FsRtlNotifyFullReportChange function (ntifs.h)
The FsRtlNotifyFullReportChange routine completes pending notify change IRPs.
Syntax
void FsRtlNotifyFullReportChange(
[in] PNOTIFY_SYNC NotifySync,
[in] PLIST_ENTRY NotifyList,
[in] PSTRING FullTargetName,
[in] USHORT TargetNameOffset,
[in, optional] PSTRING StreamName,
[in, optional] PSTRING NormalizedParentName,
[in] ULONG FilterMatch,
[in] ULONG Action,
[in, optional] PVOID TargetContext
);
Parameters
[in] NotifySync
A pointer to an opaque synchronization object for the current volume.
[in] NotifyList
A pointer to the head of a notify list. Each element in the list is an opaque notify structure.
[in] FullTargetName
A pointer to an ANSI or Unicode string that contains the full pathname of the file.
[in] TargetNameOffset
Offset within the FullTargetName string of the final component of the name.
[in, optional] StreamName
Optional pointer to an ANSI or Unicode string that contains a stream name to store with the file name.
[in, optional] NormalizedParentName
Optional pointer to an ANSI or Unicode string that contains the same path as in the FullTargetName string, but with all short names replaced by the corresponding long names.
[in] FilterMatch
A bitmask of flags to be compared with the completion filter in the notify structure. If any of the corresponding bits in the completion filter are set, then a notify condition exists. For possible flag values, see the CompletionFilter parameter of FsRtlNotifyFullChangeDirectory.
[in] Action
Specifies the action code to store in the user's buffer if present. The action code can be one of the values described following.
| Action Code | Meaning |
|---|---|
| FILE_ACTION_ADDED | A new file or subdirectory has been created. |
| FILE_ACTION_REMOVED | A file or subdirectory has been deleted. |
| FILE_ACTION_MODIFIED | A file or subdirectory has been modified (but not created or deleted). |
| FILE_ACTION_RENAMED_OLD_NAME | This is the old name of a file that has been renamed. |
| FILE_ACTION_RENAMED_NEW_NAME | This is the new name of a file that has been renamed. |
| FILE_ACTION_ADDED_STREAM | A new stream has been opened. |
| FILE_ACTION_REMOVED_STREAM | A stream has been closed. |
| FILE_ACTION_MODIFIED_STREAM | A stream has been modified (but not opened or closed). |
| FILE_ACTION_REMOVED_BY_DELETE | An object ID has been removed from the index by a delete file operation. |
| FILE_ACTION_ID_NOT_TUNNELLED | An object ID for a file could not be tunneled because its object ID matched the ID of an already existing file. |
| FILE_ACTION_TUNNELLED_ID_COLLISION | An object ID for a file could not be tunneled because the file already has an object ID. |
[in, optional] TargetContext
Context pointer to pass to the file system if performing a traverse check in the case of a tree being watched. For more information, see the TraverseCallback parameter of FsRtlNotifyFullChangeDirectory.
Return value
None
Remarks
FsRtlNotifyFullReportChange is called by a file system when a file is modified so that pending notify change IRPs can be completed.
FsRtlNotifyFullReportChange looks for a notify structure in the notify list that matches the specified filter and pathname. If a match is found, FsRtlNotifyFullReportChange completes all pending IRPs for the notify structure.
Requirements
| Requirement | Value |
|---|---|
| Target Platform | Universal |
| Header | ntifs.h (include Ntifs.h) |
| Library | NtosKrnl.lib |
| DLL | NtosKrnl.exe |
| IRQL | PASSIVE_LEVEL |
| DDI compliance rules | HwStorPortProhibitedDDIs(storport), PowerIrpDDis(wdm) |