Skip to content

Add missing fields in FLT_PARAMETERS.AcquireForSectionSynchronization #4038

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
cgallred wants to merge 2 commits into
base: staging
Choose a base branch
from
Open

Add missing fields in FLT_PARAMETERS.AcquireForSectionSynchronization #4038

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ba3a49f
Add missing fields in FLT_PARAMETERS.AcquireForSectionSynchronization
cgallred Apr 28, 2026
668e69d
Address PR feedback
cgallred Apr 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions ...er-docs-pr/ifs/flt-parameters-for-irp-mj-acquire-for-section-synchronization.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,8 @@ typedef union _FLT_PARAMETERS {
FS_FILTER_SECTION_SYNC_TYPE SyncType;
ULONG PageProtection;
PFS_FILTER_SECTION_SYNC_OUTPUT OutputInformation;
ULONG Flags;
ULONG AllocationAttributes;
} AcquireForSectionSynchronization;
...    ;
} FLT_PARAMETERS, *PFLT_PARAMETERS;
Expand All @@ -40,6 +42,18 @@ typedef union _FLT_PARAMETERS {

- **OutputInformation**: A [**FS_FILTER_SECTION_SYNC_OUTPUT**](/windows-hardware/drivers/ddi/ntifs/ns-ntifs-_fs_filter_section_sync_output) structure that specifies information describing the attributes of the section that is being created.

- **Flags**: Bitmask of flags providing additional information or instructions about the section.

Comment thread
cgallred marked this conversation as resolved.
| Flag | Meaning |
|------|----------|
| FS_FILTER_SECTION_SYNC_IN_FLAG_DONT_UPDATE_LAST_ACCESS<br>0x00000001 | Specifies that the file system shouldn't update the last access time for access to the file through the section that's being created. |
| FS_FILTER_SECTION_SYNC_IN_FLAG_DONT_UPDATE_LAST_WRITE<br>0x00000002 | Specifies that the file system shouldn't update the last write time for modifications to the file through the section that's being created. |

- **AllocationAttributes**: Specifies a bitmask of SEC_XXX flags that determines the allocation attributes of the section. For a description of these flags, see [**CreateFileMapping**](/windows/win32/api/winbase/nf-winbase-createfilemappinga).
Comment thread
cgallred marked this conversation as resolved.
Outdated

Note that **SEC_IMAGE_NO_EXECUTE** will not appear in this field. All image sections are indicated by the flag **SEC_IMAGE**.
Comment thread
cgallred marked this conversation as resolved.
Outdated


## Remarks

The [**FLT_PARAMETERS**](/windows-hardware/drivers/ddi/fltkernel/ns-fltkernel-_flt_parameters) structure for IRP_MJ_ACQUIRE_FOR_SECTION_SYNCHRONIZATION operations contains the parameters for an **AcquireForSectionSynchronization** operation represented by a callback data ([**FLT_CALLBACK_DATA**](/windows-hardware/drivers/ddi/fltkernel/ns-fltkernel-_flt_callback_data)) structure. It is contained in an FLT_IO_PARAMETER_BLOCK structure.
Expand Down