FltGetNextExtraCreateParameter - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// fltkernel.h
NTSTATUS FLTAPI FltGetNextExtraCreateParameter(
[in] PFLT_FILTER Filter,
[in] PECP_LIST EcpList,
[in, optional] PVOID CurrentEcpContext,
[out, optional] LPGUID NextEcpType,
[out, optional] PVOID *NextEcpContext,
[out, optional] ULONG *NextEcpContextSize
);
View the official Windows Driver Kit DDI referenceNo description available.
The FltGetNextExtraCreateParameter routine returns a pointer to the next (or first) extra create parameter context structure (ECP) in a given ECP list.
Filter [in]Opaque filter pointer to the minifilter driver. This pointer uniquely identifies the minifilter driver and remains constant as long as the minifilter driver is loaded.
EcpList [in]Pointer to the ECP list to examine.
CurrentEcpContext [in, optional]Optional pointer to an ECP in the given ECP list. If present, FltGetNextExtraCreateParameter returns the ECP after the CurrentEcpContext ECP. If CurrentEcpContext is NULL, FltGetNextExtraCreateParameter returns the first ECP in the list.
NextEcpType [out, optional]Optional parameter that receives a pointer to the GUID of the returned ECP.
NextEcpContext [out, optional]Optional parameter that receives a pointer to the returned ECP.
NextEcpContextSize [out, optional]Optional parameter that receives the size, in bytes, of the returned ECP.
FltGetNextExtraCreateParameter returns one of the following NTSTATUS values:
| Return code | Description |
|---|---|
| STATUS_SUCCESS | An ECP was found in the EcpList ECP list. |
| STATUS_NOT_FOUND | The EcpList ECP list is empty or CurrentEcpContext is the last ECP in the list that is, there is no next ECP list element). Additionally, NextEcpContext is set to NULL and NextEcpContextSize is set to zero. |
| STATUS_INVALID_PARAMETER | The EcpList parameter is NULL. |
This routine is available starting with Windows Vista.
TheFltGetNextExtraCreateParameter routine processes an ECP list in a non-circular manner. That is, if the ECP pointed to by the CurrentEcpContext parameter is the last ECP element in the ECP list, there is no "next" ECP in the list and the routine returns STATUS_NOT_FOUND.
FltAllocateExtraCreateParameter
FltAllocateExtraCreateParameterFromLookasideList
FltAllocateExtraCreateParameterList
FltFreeExtraCreateParameterList