RtlDelete - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
#ifndef _NTRTL_H

NTSYSAPI
PRTL_SPLAY_LINKS
NTAPI
RtlDelete(
    _In_ PRTL_SPLAY_LINKS Links
    );

#endif

View code on GitHub
// ntddk.h

NTSYSAPI PRTL_SPLAY_LINKS RtlDelete(
  [in] PRTL_SPLAY_LINKS Links
);
View the official Windows Driver Kit DDI reference

NtDoc

This function is documented in Windows Driver Kit.

Edit description on GitHub

Windows Driver Kit DDI reference (nf-ntddk-rtldelete)

RtlDelete function

Description

The RtlDelete routine deletes the specified node from the splay link tree.

Parameters

Pointer to the node to be deleted. The node must have been initialized by calling RtlInitializeSplayLinks.

Return value

RtlDelete returns a pointer to the root of the splay link tree from which the given node was deleted, or it returns NULL if the tree is empty.

Remarks

RtlDelete rebalances the splay link tree after the node is deleted. To delete a node without rebalancing the tree, use RtlDeleteNoSplay instead of RtlDelete.

Callers of the Rtl splay link routines are responsible for synchronizing access to the splay link tree. A fast mutex is the most efficient synchronization mechanism to use for this purpose.

Callers of RtlDelete must be running at IRQL <= DISPATCH_LEVEL if the splay link tree is nonpaged. Usually, callers are running at IRQL PASSIVE_LEVEL.

See also

RtlDeleteNoSplay

RtlInitializeSplayLinks

RtlInsertAsLeftChild

RtlInsertAsRightChild

RtlSplay

View the official Windows Driver Kit DDI reference

Edit description on GitHub