RtlValidateCorrelationVector - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
// ntddk.h

NTSYSAPI NTSTATUS RtlValidateCorrelationVector(
  PCORRELATION_VECTOR Vector
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (nf-ntddk-rtlvalidatecorrelationvector)

RtlValidateCorrelationVector function

Description

Validates the specified correlation vector to check whether it conforms to the Correlation Vector Specification (v2). The function specifically checks if the first 22 bytes are a valid base64 representation of a 16 byte buffer and the remaining characters match the (.\d+)+ regular expression.

Parameters

Vector

A pointer to a CORRELATION_VECTOR structure that represents the correlation vector to be validated.

Return value

Returns an NTSTATUS value that indicates the success of failure of the operation.

Return code Description
STATUS_SUCCESS The correlation vector is valid.
STATUS_INVALID_PARAMETER The supplied correlation vector is invalid.

View the official Windows Driver Kit DDI reference

Edit description on GitHub