DUMP_READ callback function (ntdddump.h)

The Dump_Read callback routine is called after the read from the dump port driver. The filter driver can access the dump data during the call to this routine.

Syntax

DUMP_READ DumpRead;

NTSTATUS DumpRead(
  [in] PFILTER_EXTENSION FilterExtension,
  [in] PLARGE_INTEGER DiskByteOffset,
  [in] PMDL Mdl
)
{...}

Parameters

[in] FilterExtension

A pointer to a FILTER_EXTENSION structure.

[in] DiskByteOffset

The value, in bytes, relative to the source partition for the crash dump or hibernation. Filter drivers should not modify this field.

[in] Mdl

A pointer to an MDL structure that describes the data buffer containing the dump data. Filter drivers should not modify this field.

Return value

If the routine succeeds, it must return STATUS_SUCCESS. Otherwise, it must return one of the error status values defined in Ntstatus.h.

Remarks

Filter drivers can read the data that was read by the crashdump process.

Filter drivers can modify the contents of the data buffer contained in Mdl to revert any changes made to the data when it was written to disk.

Requirements

See also

Dump_Write

FILTER_EXTENSION