Expand Minimize

FltAcknowledgeEcp routine

The FltAcknowledgeEcp routine is used to mark an extra create parameter context structure (ECP) as acknowledged.

Syntax


VOID FltAcknowledgeEcp(
  _In_  PFLT_FILTER Filter,
  _In_  PVOID EcpContext
);

Parameters

Filter [in]

Opaque filter pointer for the minifilter driver. This pointer uniquely identifies the minifilter driver and remains constant as long as the minifilter driver is loaded.

EcpContext [in]

Pointer to the ECP to mark as acknowledged.

Return value

None

Remarks

This routine is available in Windows Vista and later.

The ECP pointed to by the EcpContext parameter is marked as "acknowledged" by this routine. This acknowledgment could indicate a number of things, including whether the ECP has been looked at, used, processed, and so on. Note that the FltIsEcpAcknowledged routine can be used to determine if a particular ECP has been marked as acknowledged.

Requirements

Header

Fltkernel.h (include Fltkernel.h)

Library

FltMgr.lib

IRQL

<= APC_LEVEL

See also

ECP_LIST
FltAllocateExtraCreateParameterFromLookasideList
FltFreeExtraCreateParameter
FltGetEcpListFromCallbackData
FltIsEcpAcknowledged
FltIsEcpFromUserMode
FltRemoveExtraCreateParameter
FltSetEcpListIntoCallbackData

 

 

Send comments about this topic to Microsoft

Show:
© 2015 Microsoft