Bewerken

Delen via


FltAcknowledgeEcp function (fltkernel.h)

The FltAcknowledgeEcp routine is used to mark an extra create parameter context structure (ECP) as acknowledged.

Syntax

VOID FLTAPI FltAcknowledgeEcp(
  [in] PFLT_FILTER Filter,
  [in] PVOID       EcpContext
);

Parameters

[in] Filter

Opaque filter pointer for the minifilter driver. This pointer uniquely identifies the minifilter driver and remains constant as long as the minifilter driver is loaded.

[in] EcpContext

Pointer to the ECP to mark as acknowledged.

Return value

None

Remarks

This routine is available in Windows Vista and later.

The ECP pointed to by the EcpContext parameter is marked as "acknowledged" by this routine. This acknowledgment could indicate a number of things, including whether the ECP has been looked at, used, processed, and so on. Note that the FltIsEcpAcknowledged routine can be used to determine if a particular ECP has been marked as acknowledged.

Requirements

Requirement Value
Target Platform Universal
Header fltkernel.h (include Fltkernel.h)
Library FltMgr.lib
IRQL <= APC_LEVEL

See also

ECP_LIST

FltAllocateExtraCreateParameterFromLookasideList

FltFreeExtraCreateParameter

FltGetEcpListFromCallbackData

FltIsEcpAcknowledged

FltIsEcpFromUserMode

FltRemoveExtraCreateParameter

FltSetEcpListIntoCallbackData