Windows 10 1903 deletes a file with open handles by moving it into $Extend\$Deleted until the last handle closes, so the next snapshot of a watched file that a title (or the test) deleted saw a new path, tried to watch that directory's changes, got ERROR_ACCESS_DENIED and threw from the watch thread, which aborts the process; the path change was also reported as NOTE_RENAME next to NOTE_DELETE. A snapshot with a pending delete or no links now reports NOTE_DELETE alone and drops the parent directory watch instead of replacing it, as the file has no directory to be renamed or removed from any more. |
||
|---|---|---|
| .. | ||
| src | ||
| Equeue.cpp | ||
| Equeue.hpp | ||