I didn't try myself, but I think we have everything to implement it, like this:
GetFileInformationByHandleEx with FileNameInfo -> GetVolumePathNameW -> GetVolumeInformationW.
If this works for affected application I think it's better to implement it instead of getting in a stub, to find out later that it's not enough.
On 27.04.2016 09:40, Nikolay Sivov wrote:
I didn't try myself, but I think we have everything to implement it, like this:
GetFileInformationByHandleEx with FileNameInfo -> GetVolumePathNameW -> GetVolumeInformationW.
If this works for affected application I think it's better to implement it instead of getting in a stub, to find out later that it's not enough.
Actually, the proper way would be to move the code from kernel32 to ntdll, and then call NtQueryVolumeInformationFile() which takes a HANDLE argument.
On 28.04.2016 6:54, Sebastian Lackner wrote:
On 27.04.2016 09:40, Nikolay Sivov wrote:
I didn't try myself, but I think we have everything to implement it, like this:
GetFileInformationByHandleEx with FileNameInfo -> GetVolumePathNameW -> GetVolumeInformationW.
If this works for affected application I think it's better to implement it instead of getting in a stub, to find out later that it's not enough.
Actually, the proper way would be to move the code from kernel32 to ntdll, and then call NtQueryVolumeInformationFile() which takes a HANDLE argument.
Even better.
-
Nikolay Sivov -
Sebastian Lackner