RtlDeleteNoSplay - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTRTL_H

NTSYSAPI
VOID
NTAPI
RtlDeleteNoSplay(
    _In_ PRTL_SPLAY_LINKS Links,
    _Inout_ PRTL_SPLAY_LINKS *Root
    );

#endif

View code on GitHub
// ntddk.h

NTSYSAPI VOID RtlDeleteNoSplay(
  [in]      PRTL_SPLAY_LINKS Links,
  [in, out] PRTL_SPLAY_LINKS *Root
);
View the official Windows Driver Kit DDI reference

NtDoc

This function is documented in Windows Driver Kit.

Windows Driver Kit DDI reference (nf-ntddk-rtldeletenosplay)

RtlDeleteNoSplay function

Description

The RtlDeleteNoSplay routine deletes the specified node from the splay link tree.

Parameters

A pointer to the node to be deleted. The node must have been initialized by calling RtlInitializeSplayLinks.

Root [in, out]

A pointer to the caller's pointer to the root node of the splay link tree. The caller's pointer is updated after the node is deleted.

Return value

None

Remarks

Unlike RtlDelete, RtlDeleteNoSplay does not rebalance the splay link tree after the node is deleted.

Callers of the Rtl splay link routines are responsible for synchronizing access to the splay link tree. A fast mutex is the most efficient synchronization mechanism to use for this purpose.

Callers of RtlDeleteNoSplay must be running at IRQL <= DISPATCH_LEVEL if the splay link tree is nonpaged. Usually, callers are running at IRQL PASSIVE_LEVEL.

See also

RtlDelete

RtlInitializeSplayLinks

RtlInsertAsLeftChild

RtlInsertAsRightChild

RtlSplay