"Christopher Faylor" <[EMAIL PROTECTED]> wrote: > > Hmm. Interesting. It seems like -E and -X should just be defaulting > to doing query_open. I think that the only reason that query_open > is not the default is that the file has to be opened for reading if > the executable state is not known. > > Or, maybe it's actually possible not to do an open at all in those > cases. > > Hmm, again. > > cgf >
A (possibly related) note, it occurred to me the other day (as I looked at some strace output) that opening the file during stat() --- so that you can call GetFileInformationByHandle() --- will be slow if you've got an anti-virus program running since they tend to intercept file opens. Then again, I don't understand enough about cygwin *or* win32 to understand whether you can get the same information without opening the file. Thus it might be a win to avoid opening the file if possible on ntsf too (w/ ntsec). // Conrad
