Re: [sleuthkit-developers] win32 device opening

[Michael C. <scu...@gm...>]

Hi Brian,

  I normally do this:

device_handle = CreateFileA(image, GENERIC_READ | GENERIC_WRITE,
                                FILE_SHARE_READ | FILE_SHARE_WRITE,
                                NULL, OPEN_EXISTING, 0, NULL);

To get write access to the raw device. Im not sure what it means to
specify FILE_SHARE_WRITE without specifying GENERIC_WRITE.  The code
that  I got it from was running fine on WinXP - not tested on Vista.
Why would sk need to open with FILE_SHARE_WRITE anyway?

It may also be possible that another program has the raw device
already open for writing without sharing permitted.

Hope this helps,

Michael.

On Tue, Oct 28, 2008 at 4:46 AM, Brian Carrier <ca...@sl...> wrote:
> Any win32 developers know why TSK is getting a sharing error (0x20)
> with this statement:
>
> raw_info->fd = CreateFile(image, GENERIC_READ,
>                     FILE_SHARE_READ | FILE_SHARE_WRITE, 0,
> OPEN_EXISTING, 0, 0);
>
> when trying to open "\\.\PhysicalDrive0" ?
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> sleuthkit-developers mailing list
> sle...@li...
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers
>