[EVENTLOG]

Fix the record number hacks in ElfrNumberOfRecords and LogfWriteData by initializing the oldest record number to 1. 

svn path=/trunk/; revision=54794
This commit is contained in:
Eric Kohl 2011-12-31 15:23:59 +00:00
parent 000fca5bd8
commit 50bbe47f26
2 changed files with 4 additions and 9 deletions

View file

@ -34,6 +34,7 @@ BOOL LogfInitializeNew(PLOGFILE LogFile)
LogFile->Header.MajorVersion = MAJORVER;
LogFile->Header.MinorVersion = MINORVER;
LogFile->Header.CurrentRecordNumber = 1;
LogFile->Header.OldestRecordNumber = 1;
/* FIXME: Read MaxSize from registry for this LogFile.
But for now limit EventLog size to just under 5K. */
LogFile->Header.MaxSize = 5000;
@ -986,9 +987,6 @@ BOOL LogfWriteData(PLOGFILE LogFile, DWORD BufSize, PBYTE Buffer)
LogFile->Header.CurrentRecordNumber++;
if (LogFile->Header.OldestRecordNumber == 0)
LogFile->Header.OldestRecordNumber = 1;
if (WriteOffSet == LogFile->Header.EndOffset)
{
LogFile->Header.EndOffset += dwWritten;

View file

@ -243,11 +243,8 @@ NTSTATUS ElfrNumberOfRecords(
lpLogFile->Header.OldestRecordNumber,
lpLogFile->Header.CurrentRecordNumber);
if (lpLogFile->Header.OldestRecordNumber == 0)
*NumberOfRecords = 0;
else
*NumberOfRecords = lpLogFile->Header.CurrentRecordNumber -
lpLogFile->Header.OldestRecordNumber;
*NumberOfRecords = lpLogFile->Header.CurrentRecordNumber -
lpLogFile->Header.OldestRecordNumber;
return STATUS_SUCCESS;
}
@ -271,8 +268,8 @@ NTSTATUS ElfrOldestRecord(
return STATUS_INVALID_PARAMETER;
}
*OldestRecordNumber = 0;
*OldestRecordNumber = LogfGetOldestRecord(lpLogHandle->LogFile);
return STATUS_SUCCESS;
}