tags:

views:

54

answers:

0

Let's say I have a handle. How do I get the access mask of that handle? I need to check if the access mask is 0x001a019f, which indicates the handle is that of a blocking pipe.

If it helps, this is a post related to this post. In short, since I'm hooking ntdll.dll's NtCreateFile(), I need to filter out some file handles, since resolving certain handle->filename results in hanging (because the handle resolves to a blocking pipe).