FltGetEcpListFromCallbackData - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// fltkernel.h
NTSTATUS FLTAPI FltGetEcpListFromCallbackData(
[in] PFLT_FILTER Filter,
PFLT_CALLBACK_DATA CallbackData,
[out] PECP_LIST *EcpList
);
View the official Windows Driver Kit DDI referenceNo description available.
The FltGetEcpListFromCallbackData routine returns a pointer to an extra create parameter context structure (ECP) list that is associated with a given create operation callback-data object.
Filter [in]An opaque filter pointer to the minifilter driver. This pointer uniquely identifies the minifilter driver and remains constant as long as the minifilter driver is loaded.
CallbackDataA pointer to a callback-data object of type FLT_CALLBACK_DATA, which represents the create operation.
EcpList [out]Receives a pointer to the ECP list that is associated with the CallbackData callback-data object.
FltGetEcpListFromCallbackData returns one of the following NTSTATUS values:
| Return code | Description |
|---|---|
| STATUS_SUCCESS | EcpList received a pointer to the ECP list that is associated with the given callback-data object. If the callback-data object has no associated ECP, STATUS_SUCCESS is returned and EcpList is NULL. |
| STATUS_INVALID_PARAMETER | The given callback-data object was not an IRP-based create operation. In this case, EcpList is undefined. |
To attach an ECP list to a callback-data object, use the FltSetEcpListIntoCallbackData routine.
FltAllocateExtraCreateParameter
FltAllocateExtraCreateParameterFromLookasideList
FltAllocateExtraCreateParameterList
FltDeleteExtraCreateParameterLookasideList
FltFreeExtraCreateParameterList
FltGetNextExtraCreateParameter
FltInitExtraCreateParameterLookasideList