Strange program behavior in passthrough file system about winfsp HOT 3 CLOSED

Thanks for the bug report, @efeat.

Let me confirm that I understand what you are saying: this problem happens when passthrough is run on Win7 against your private build of WinFsp from commit fa652cd. Is this correct?

You are not somehow running passthrough against RC1 are you? [In fact you should not be able to build it against RC1, because the definition of ReadDirectory changed (regrettably).]

Can you please confirm for me that the problem happens when run against the officially released RC2?

https://github.com/billziss-gh/winfsp/releases/download/v1.0RC2/winfsp-1.0.17039.msi

Here are the passthrough logs for the calc.exe program only on Win 7:
passthrough-x64.log.zip

Excellent! Thank you for those.

from winfsp.

Ok, I just did some more testing and I am now suspecting some kind of security issue.

The following tests were run on Windows 7 Enterprise (Version 6.1, Build 7601 Service Pack 1).

When running passthrough from the command line under a normal account:

I get:

I also observe a bunch of failed QuerySecurity on the logs (c0000022 is STATUS_ACCESS_DENIED -- these obviously come from NTFS that passthrough uses as its storage medium):

passthrough-x64[TID=1c6c]: FFFFFA800DB05010: >>QuerySecurity 0000000000000000:00000000002984B0
passthrough-x64[TID=1c6c]: FFFFFA800DB05010: <<QuerySecurity IoStatus=c0000022[0]
passthrough-x64[TID=1c6c]: FFFFFA800DB05010: >>QuerySecurity 0000000000000000:00000000002984B0
passthrough-x64[TID=1c6c]: FFFFFA800DB05010: <<QuerySecurity IoStatus=c0000022[0]
passthrough-x64[TID=1c6c]: FFFFFA800DB05010: >>QuerySecurity 0000000000000000:00000000002984B0
passthrough-x64[TID=1c6c]: FFFFFA800DB05010: <<QuerySecurity IoStatus=c0000022[0]
passthrough-x64[TID=1c6c]: FFFFFA800DB0A220: >>QuerySecurity 0000000000000000:00000000002984B0
passthrough-x64[TID=1c6c]: FFFFFA800DB0A220: <<QuerySecurity IoStatus=c0000022[0]

OTOH, if I map a drive from the Explorer which runs passthrough under the SYSTEM account:

I get:

So in this case it works.

The SYSTEM account has the backup/restore privileges and is able to open files and query security for all accounts.

EDIT: The STATUS_ACCESS_DENIED is probably because the handles were open with ACCESS_SYSTEM_SECURITY and this is not handled properly. I am investigating.

from winfsp.

I am closing this issue due to inactivity.

from winfsp.