基于IRP的Windows设备驱动程序文件操作的实现

Realization on Operation for Windows Device Drivers Based on IRP

文件是数据存储的基础,处于Windows操作系统内核中的设备驱动程序,对文件系统的访问不像应用程序那样方便。文章介绍了Windows设备驱动程序通过建立自定义I/O请求包(IRP),并将IRP发送到文件系统驱动程序的方式,实现对文件的内核级操作的方法,该方法可实现文件建立、读、写、删除和改名等功能。文章给出了基于微软设备驱动程序开发工具实现的IRP包的建立、发送和完成的源码。

Files are the basis of data memorizing, the device drivers in the windows accessing system are not as convenient as visiting the document systems. To realize the operation on the extreme kernel of the document, this paper introduces how to deve the device, send IRP to document system drivers through I/O package, which includes the functions of setting up, reading, writing, deleting and renaming the files. And it also works out the source codes of IRP package＇s establishment, sending, and completing, which is based on development of the microsoft device drivers.