FsRtlNotifyCleanup function (ntifs.h)

Article
02/22/2024

When the last handle to a file object is released, the FsRtlNotifyCleanup routine removes the file object's notify structure, if present, from the specified notify list.

Syntax

void FsRtlNotifyCleanup(
  [in] PNOTIFY_SYNC NotifySync,
  [in] PLIST_ENTRY  NotifyList,
  [in] PVOID        FsContext
);

Parameters

[in] NotifySync

A pointer to an opaque synchronization object for NotifyList.

[in] NotifyList

A pointer to the head of a notify list. Each element in the list is an opaque notify structure.

[in] FsContext

A unique value assigned by the file system to identify a notify structure as belonging to a particular file object.

Return value

None

Remarks

If a notify structure is found that matches FsContext, FsRtlNotifyCleanup completes all IRPs that are queued in the notify structure. When all the IRPs are completed, FsRtlNotifyCleanup removes the notify structure from the notify list and deallocates it.

Requirements

Requirement	Value
Target Platform	Universal
Header	ntifs.h (include Ntifs.h)
Library	NtosKrnl.lib
DLL	NtosKrnl.exe
IRQL	<= APC_LEVEL