[NDK][RTL] Implement RtlGetUnloadEventTrace. CORE-16671

This commit is contained in:
Oleg Dubinskiy 2020-01-31 14:01:46 +02:00 committed by Thomas Faber
parent 6c93669012
commit 6f232770d3
No known key found for this signature in database
GPG key ID: 076E7C3D44720826
3 changed files with 13 additions and 1 deletions

View file

@ -679,7 +679,7 @@
@ stdcall RtlGetSecurityDescriptorRMControl(ptr ptr)
@ stdcall RtlGetSetBootStatusData(ptr long long ptr long long)
@ stdcall RtlGetThreadErrorMode()
@ stdcall -stub RtlGetUnloadEventTrace()
@ stdcall RtlGetUnloadEventTrace()
@ stdcall RtlGetUserInfoHeap(ptr long ptr ptr ptr)
@ stdcall RtlGetVersion(ptr)
@ stdcall RtlHashUnicodeString(ptr long long ptr)

View file

@ -1224,6 +1224,8 @@ typedef struct _RTL_FLS_DATA
//
// Unload Event Trace Structure for RtlGetUnloadEventTrace
//
#define RTL_UNLOAD_EVENT_TRACE_NUMBER 64
typedef struct _RTL_UNLOAD_EVENT_TRACE
{
PVOID BaseAddress;

View file

@ -10,8 +10,18 @@
#define NDEBUG
#include <debug.h>
static RTL_UNLOAD_EVENT_TRACE RtlpUnloadEventTrace[RTL_UNLOAD_EVENT_TRACE_NUMBER];
/* FUNCTIONS ******************************************************************/
PRTL_UNLOAD_EVENT_TRACE
NTAPI
RtlGetUnloadEventTrace(VOID)
{
/* Just return a pointer to an array, according to MSDN */
return RtlpUnloadEventTrace;
}
BOOLEAN
NTAPI
RtlTraceDatabaseAdd(IN PRTL_TRACE_DATABASE Database,