// ntdddump.h

typedef struct _FILTER_EXTENSION {
  FILTER_DUMP_TYPE    DumpType;
  PDEVICE_OBJECT      DeviceObject;
  DISK_GEOMETRY       Geometry;
  LARGE_INTEGER       DiskSize;
  DISK_PARTITION_INFO PartitionInfo;
  PVOID               DumpData;
  ULONG               Size;
  ULONG               Flags;
} FILTER_EXTENSION, *PFILTER_EXTENSION;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ns-ntdddump-_filter_extension)

_FILTER_EXTENSION structure

Description

The crash dump driver passes a pointer to a FILTER_EXTENSION structure when the filter driver callback routines are called.

Members

`DumpType`

This parameter indicates the type of dump that this instance of the filter driver is loaded on.

`DeviceObject`

A pointer to the device object of the dump volume. This pointer points to the top of the dump volume stack.

`Geometry`

The disk geometry of the dump device in DISK_GEOMETRY format.

`DiskSize`

Size of the disk.

`PartitionInfo`

The partition information in DISK_PARTITION_INFO format.

`DumpData`

A pointer to the context data that is provided by the filter driver in FILTER_INITIALIZATION_DATA.

FILTER_EXTENSION - NtDoc