PPHYSICAL_COUNTER_EVENT_BUFFER_OVERFLOW_HANDLER - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// ntddk.h
PPHYSICAL_COUNTER_EVENT_BUFFER_OVERFLOW_HANDLER PphysicalCounterEventBufferOverflowHandler;
VOID PphysicalCounterEventBufferOverflowHandler(
PVOID EventBuffer,
SIZE_T EntrySize,
SIZE_T NumberOfEntries,
HANDLE OwningHandle
)
{...}
View the official Windows Driver Kit DDI referenceNo description available.
The PPHYSICAL_COUNTER_OVERFLOW_HANDLER is implemented by the client driver to handle event buffer overflows from the counters resources acquired through the HalAllocateHardwareCounters routine.
EventBufferProvides a pointer to the event buffer containing the event entries.
EntrySizeProvides the size of an individual event entry.
NumberOfEntriesProvides the number of entries available.
OwningHandleProvides the HANDLE corresponding to the resource set the event buffer belongs to.
Register your implementation of this callback function by calling HalAllocateHardwareCounters with a structure of type PHYSICAL_COUNTER_RESOURCE_LIST. In the PHYSICAL_COUNTER_RESOURCE_LIST, provide a structure of type PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR that specifies a PHYSICAL_COUNTER_RESOURCE_DESCRIPTOR_TYPE of ResourceTypeEventBuffer.
This callback is called at IRQL = PROFILE_LEVEL. This means it must always be memory-resident. The callback should return as quickly as possible and should not attempt to do any of the following.
Acquire or release spin locks.
Access paged pool that is not locked in memory
Call a pageable routine.
The callback does not need to handle clearing any overflow registers as it will be handled by the HAL.