1 | /**
|
---|
2 | * This file is part of the mingw-w64 runtime package.
|
---|
3 | * No warranty is given; refer to the file DISCLAIMER within this package.
|
---|
4 | */
|
---|
5 |
|
---|
6 | #ifndef _EVNTCONS_H_
|
---|
7 | #define _EVNTCONS_H_
|
---|
8 |
|
---|
9 | #include <winapifamily.h>
|
---|
10 |
|
---|
11 | #if WINAPI_FAMILY_PARTITION (WINAPI_PARTITION_DESKTOP)
|
---|
12 |
|
---|
13 | #include <wmistr.h>
|
---|
14 | #include <evntrace.h>
|
---|
15 | #include <evntprov.h>
|
---|
16 |
|
---|
17 | #ifdef __cplusplus
|
---|
18 | extern "C" {
|
---|
19 | #endif
|
---|
20 |
|
---|
21 | #define EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID 0x0001
|
---|
22 | #define EVENT_HEADER_EXT_TYPE_SID 0x0002
|
---|
23 | #define EVENT_HEADER_EXT_TYPE_TS_ID 0x0003
|
---|
24 | #define EVENT_HEADER_EXT_TYPE_INSTANCE_INFO 0x0004
|
---|
25 | #define EVENT_HEADER_EXT_TYPE_STACK_TRACE32 0x0005
|
---|
26 | #define EVENT_HEADER_EXT_TYPE_STACK_TRACE64 0x0006
|
---|
27 | #define EVENT_HEADER_EXT_TYPE_PEBS_INDEX 0x0007
|
---|
28 | #define EVENT_HEADER_EXT_TYPE_PMC_COUNTERS 0x0008
|
---|
29 | #define EVENT_HEADER_EXT_TYPE_MAX 0x0009
|
---|
30 |
|
---|
31 | #define EVENT_HEADER_PROPERTY_XML 0x0001
|
---|
32 | #define EVENT_HEADER_PROPERTY_FORWARDED_XML 0x0002
|
---|
33 | #define EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG 0x0004
|
---|
34 |
|
---|
35 | #define EVENT_HEADER_FLAG_EXTENDED_INFO 0x0001
|
---|
36 | #define EVENT_HEADER_FLAG_PRIVATE_SESSION 0x0002
|
---|
37 | #define EVENT_HEADER_FLAG_STRING_ONLY 0x0004
|
---|
38 | #define EVENT_HEADER_FLAG_TRACE_MESSAGE 0x0008
|
---|
39 | #define EVENT_HEADER_FLAG_NO_CPUTIME 0x0010
|
---|
40 | #define EVENT_HEADER_FLAG_32_BIT_HEADER 0x0020
|
---|
41 | #define EVENT_HEADER_FLAG_64_BIT_HEADER 0x0040
|
---|
42 | #define EVENT_HEADER_FLAG_CLASSIC_HEADER 0x0100
|
---|
43 | #define EVENT_HEADER_FLAG_PROCESSOR_INDEX 0x0200
|
---|
44 |
|
---|
45 | #define EVENT_ENABLE_PROPERTY_SID 0x00000001
|
---|
46 | #define EVENT_ENABLE_PROPERTY_TS_ID 0x00000002
|
---|
47 | #define EVENT_ENABLE_PROPERTY_STACK_TRACE 0x00000004
|
---|
48 |
|
---|
49 | #define PROCESS_TRACE_MODE_REAL_TIME 0x00000100
|
---|
50 | #define PROCESS_TRACE_MODE_RAW_TIMESTAMP 0x00001000
|
---|
51 | #define PROCESS_TRACE_MODE_EVENT_RECORD 0x10000000
|
---|
52 |
|
---|
53 | typedef enum {
|
---|
54 | EventSecuritySetDACL,
|
---|
55 | EventSecuritySetSACL,
|
---|
56 | EventSecurityAddDACL,
|
---|
57 | EventSecurityAddSACL,
|
---|
58 | EventSecurityMax
|
---|
59 | } EVENTSECURITYOPERATION;
|
---|
60 |
|
---|
61 | #ifndef EVENT_HEADER_EXTENDED_DATA_ITEM_DEF
|
---|
62 | #define EVENT_HEADER_EXTENDED_DATA_ITEM_DEF
|
---|
63 | typedef struct _EVENT_HEADER_EXTENDED_DATA_ITEM {
|
---|
64 | USHORT Reserved1;
|
---|
65 | USHORT ExtType;
|
---|
66 | __C89_NAMELESS struct {
|
---|
67 | USHORT Linkage : 1;
|
---|
68 | USHORT Reserved2 : 15;
|
---|
69 | };
|
---|
70 | USHORT DataSize;
|
---|
71 | ULONGLONG DataPtr;
|
---|
72 | } EVENT_HEADER_EXTENDED_DATA_ITEM,*PEVENT_HEADER_EXTENDED_DATA_ITEM;
|
---|
73 | #endif
|
---|
74 |
|
---|
75 | typedef struct _EVENT_EXTENDED_ITEM_INSTANCE {
|
---|
76 | ULONG InstanceId;
|
---|
77 | ULONG ParentInstanceId;
|
---|
78 | GUID ParentGuid;
|
---|
79 | } EVENT_EXTENDED_ITEM_INSTANCE,*PEVENT_EXTENDED_ITEM_INSTANCE;
|
---|
80 |
|
---|
81 | typedef struct _EVENT_EXTENDED_ITEM_RELATED_ACTIVITYID {
|
---|
82 | GUID RelatedActivityId;
|
---|
83 | } EVENT_EXTENDED_ITEM_RELATED_ACTIVITYID,*PEVENT_EXTENDED_ITEM_RELATED_ACTIVITYID;
|
---|
84 |
|
---|
85 | typedef struct _EVENT_EXTENDED_ITEM_TS_ID {
|
---|
86 | ULONG SessionId;
|
---|
87 | } EVENT_EXTENDED_ITEM_TS_ID,*PEVENT_EXTENDED_ITEM_TS_ID;
|
---|
88 |
|
---|
89 | typedef struct _EVENT_EXTENDED_ITEM_STACK_TRACE32 {
|
---|
90 | ULONG64 MatchId;
|
---|
91 | ULONG Address[ANYSIZE_ARRAY];
|
---|
92 | } EVENT_EXTENDED_ITEM_STACK_TRACE32,*PEVENT_EXTENDED_ITEM_STACK_TRACE32;
|
---|
93 |
|
---|
94 | typedef struct _EVENT_EXTENDED_ITEM_STACK_TRACE64 {
|
---|
95 | ULONG64 MatchId;
|
---|
96 | ULONG64 Address[ANYSIZE_ARRAY];
|
---|
97 | } EVENT_EXTENDED_ITEM_STACK_TRACE64,*PEVENT_EXTENDED_ITEM_STACK_TRACE64;
|
---|
98 |
|
---|
99 | typedef struct _EVENT_EXTENDED_ITEM_PEBS_INDEX {
|
---|
100 | ULONG64 PebsIndex;
|
---|
101 | } EVENT_EXTENDED_ITEM_PEBS_INDEX,*PEVENT_EXTENDED_ITEM_PEBS_INDEX;
|
---|
102 |
|
---|
103 | typedef struct _EVENT_EXTENDED_ITEM_PMC_COUNTERS {
|
---|
104 | ULONG64 Counter[ANYSIZE_ARRAY];
|
---|
105 | } EVENT_EXTENDED_ITEM_PMC_COUNTERS,*PEVENT_EXTENDED_ITEM_PMC_COUNTERS;
|
---|
106 |
|
---|
107 | #ifndef EVENT_HEADER_DEF
|
---|
108 | #define EVENT_HEADER_DEF
|
---|
109 | typedef struct _EVENT_HEADER {
|
---|
110 | USHORT Size;
|
---|
111 | USHORT HeaderType;
|
---|
112 | USHORT Flags;
|
---|
113 | USHORT EventProperty;
|
---|
114 | ULONG ThreadId;
|
---|
115 | ULONG ProcessId;
|
---|
116 | LARGE_INTEGER TimeStamp;
|
---|
117 | GUID ProviderId;
|
---|
118 | EVENT_DESCRIPTOR EventDescriptor;
|
---|
119 | __C89_NAMELESS union {
|
---|
120 | __C89_NAMELESS struct {
|
---|
121 | ULONG KernelTime;
|
---|
122 | ULONG UserTime;
|
---|
123 | } DUMMYSTRUCTNAME;
|
---|
124 | ULONG64 ProcessorTime;
|
---|
125 | } DUMMYUNIONNAME;
|
---|
126 | GUID ActivityId;
|
---|
127 | } EVENT_HEADER,*PEVENT_HEADER;
|
---|
128 | #endif
|
---|
129 |
|
---|
130 | #ifndef EVENT_RECORD_DEF
|
---|
131 | #define EVENT_RECORD_DEF
|
---|
132 | typedef struct _EVENT_RECORD {
|
---|
133 | EVENT_HEADER EventHeader;
|
---|
134 | ETW_BUFFER_CONTEXT BufferContext;
|
---|
135 | USHORT ExtendedDataCount;
|
---|
136 | USHORT UserDataLength;
|
---|
137 | PEVENT_HEADER_EXTENDED_DATA_ITEM ExtendedData;
|
---|
138 | PVOID UserData;
|
---|
139 | PVOID UserContext;
|
---|
140 | } EVENT_RECORD,*PEVENT_RECORD;
|
---|
141 |
|
---|
142 | typedef const EVENT_RECORD *PCEVENT_RECORD;
|
---|
143 | #endif
|
---|
144 |
|
---|
145 | #if WINVER >= 0x0600
|
---|
146 | ULONG EVNTAPI EventAccessControl (LPGUID Guid, ULONG Operation, PSID Sid, ULONG Rights, BOOLEAN AllowOrDeny);
|
---|
147 | ULONG EVNTAPI EventAccessQuery (LPGUID Guid, PSECURITY_DESCRIPTOR Buffer, PULONG BufferSize);
|
---|
148 | ULONG EVNTAPI EventAccessRemove (LPGUID Guid);
|
---|
149 | #endif
|
---|
150 |
|
---|
151 | FORCEINLINE ULONG GetEventProcessorIndex (PCEVENT_RECORD er) {
|
---|
152 | return ((er->EventHeader.Flags & EVENT_HEADER_FLAG_PROCESSOR_INDEX) != 0 ? er->BufferContext.ProcessorIndex : er->BufferContext.ProcessorNumber);
|
---|
153 | }
|
---|
154 |
|
---|
155 | #ifdef __cplusplus
|
---|
156 | }
|
---|
157 | #endif
|
---|
158 |
|
---|
159 | #endif
|
---|
160 | #endif
|
---|