none
Registry Key Value LowerFilters for Disk Filter Driver on Windows server 2012 R2 RRS feed

  • Question

  • I'm writing Filter Driver Installer for Disk Drive.

    On Windows Server 2012 R2, the default Registry Key Value LowerFilters for DiskDirve Class is 0x00 0x00.

    The value type is REG_MULTI_SZ.

    Does that Key value mean ANSI null null ?

    Please let me know ASAP.

     

    VS2012 + Install Sheild

    Wednesday, May 7, 2014 4:15 AM

Answers

  • it is Unicode, not ansi. Multi sz means a single buffer containing multiple null terminated strings whose end is indicated by two consecutive null characters.

    d -- This posting is provided "AS IS" with no warranties, and confers no rights.

    Wednesday, May 7, 2014 2:08 PM

All replies

  • it is Unicode, not ansi. Multi sz means a single buffer containing multiple null terminated strings whose end is indicated by two consecutive null characters.

    d -- This posting is provided "AS IS" with no warranties, and confers no rights.

    Wednesday, May 7, 2014 2:08 PM
  • Thank you for your quickly reply, Doron-san.

    I know Multi sz's Data end is two null characters.

    But on Windows Server 2012 R2, Default(Just after Installed OS) Registry Key Value LowerFilters for DiskDirve Class has Only One 0x00 pair.

    LowerFilter's data type is  REG_MULTI_SZ.

    From http://support.microsoft.com/kb/101230/en-us

    > REG_MULTI_SZ
    > This is a multiple string. Values that contain lists or multiple values
    > in human readable text are usually this type.
    > Entries are separated by NULL characters.
    > For example, the following value entry specifies the binding rules for a
    > network transport:

    I think "usually this type" includes some exceptional case.

    If that is not right, the default value is wrong and Windows Sever 2012 R2 has a BUG.


    VS2012 + Install Sheild

    Wednesday, May 7, 2014 11:32 PM
  • are you looking at the value with regedit or in code? Regardless, the is doesn't sanitize the buffer that is written against the type, it is easy to be not the correct underlying format

    d -- This posting is provided "AS IS" with no warranties, and confers no rights.

    Thursday, May 8, 2014 12:39 AM
  • I'm looking at the value in Code using C++ CRegKey class methods.

    VS2012 + Install Sheild

    Thursday, May 8, 2014 2:07 AM
  • I would like to confirm about "underlying format."

    Do you mean the format is about general MULTI-SZ string or about Default Registry Key Value for LowerFilters on Windows Server 2012 R2 ?  


    VS2012 + Install Sheild

    Thursday, May 8, 2014 2:35 AM