FltPrepareToReuseEcp - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// fltkernel.h
VOID FLTAPI FltPrepareToReuseEcp(
[in] PFLT_FILTER Filter,
[in] PVOID EcpContext
);
View the official Windows Driver Kit DDI referenceNo description available.
The FltPrepareToReuseEcp routine resets an extra create parameter (ECP) context structure, which prepares it for reuse.
Filter [in]An opaque filter pointer for the minifilter driver. This pointer uniquely identifies the minifilter driver and remains constant as long as the minifilter driver is loaded.
EcpContext [in]A pointer to the ECP to prepare for reuse.
None.
The FltPrepareToReuseEcp allows reuse of an ECP used in a previous create request. This prevents having to initialize a new ECP with the same information.
The target of an ECP uses FltAcknowledgeEcp to mark the ECP as acknowledged. This indicates that the ECP was discovered and processed. To reuse a previously acknowledged ECP, such as in processing a reparse, a driver can use FltPrepareToReuseEcp to clear the acknowledged state from the ECP before sending it in another create request.
FltlInsertExtraCreateParameter