The FsRtlNotifyFullReportChange routine completes pending notify change IRPs.
VOID FsRtlNotifyFullReportChange( _In_ PNOTIFY_SYNC NotifySync, _In_ PLIST_ENTRY NotifyList, _In_ PSTRING FullTargetName, _In_ USHORT TargetNameOffset, _In_opt_ PSTRING StreamName, _In_opt_ PSTRING NormalizedParentName, _In_ ULONG FilterMatch, _In_ ULONG Action, _In_opt_ PVOID TargetContext );
- NotifySync [in]
A pointer to an opaque synchronization object for the current volume.
- NotifyList [in]
A pointer to the head of a notify list. Each element in the list is an opaque notify structure.
- FullTargetName [in]
A pointer to an ANSI or Unicode string that contains the full pathname of the file.
- TargetNameOffset [in]
Offset within the FullTargetName string of the final component of the name.
- StreamName [in, optional]
Optional pointer to an ANSI or Unicode string that contains a stream name to store with the file name.
- NormalizedParentName [in, optional]
Optional pointer to an ANSI or Unicode string that contains the same path as in the FullTargetName string, but with all short names replaced by the corresponding long names.
- FilterMatch [in]
A bitmask of flags to be compared with the completion filter in the notify structure. If any of the corresponding bits in the completion filter are set, then a notify condition exists. For possible flag values, see the CompletionFilter parameter of FsRtlNotifyFullChangeDirectory.
- Action [in]
Specifies the action code to store in the user's buffer if present. The action code can be one of the values described following.
Action Code Meaning
A new file or subdirectory has been created.
A file or subdirectory has been deleted.
A file or subdirectory has been modified (but not created or deleted).
This is the old name of a file that has been renamed.
This is the new name of a file that has been renamed.
A new stream has been opened.
A stream has been closed.
A stream has been modified (but not opened or closed).
An object ID has been removed from the index by a delete file operation.
An object ID for a file could not be tunneled because its object ID matched the ID of an already existing file.
An object ID for a file could not be tunneled because the file already has an object ID.
- TargetContext [in, optional]
Context pointer to pass to the file system if performing a traverse check in the case of a tree being watched. For more information, see the TraverseCallback parameter of FsRtlNotifyFullChangeDirectory.
FsRtlNotifyFullReportChange is called by a file system when a file is modified so that pending notify change IRPs can be completed.
FsRtlNotifyFullReportChange looks for a notify structure in the notify list that matches the specified filter and pathname. If a match is found, FsRtlNotifyFullReportChange completes all pending IRPs for the notify structure.