eventlog.c File Reference

#include <advapi32.h>
#include <ndk/kefuncs.h>
#include <eventlogrpc_c.h>

Include dependency graph for eventlog.c:

Go to the source code of this file.

Functions
	WINE_DEFAULT_DEBUG_CHANNEL (advapi)
handle_t __RPC_USER	EVENTLOG_HANDLE_A_bind (EVENTLOG_HANDLE_A UNCServerName)
void __RPC_USER	EVENTLOG_HANDLE_A_unbind (EVENTLOG_HANDLE_A UNCServerName, handle_t hBinding)
handle_t __RPC_USER	EVENTLOG_HANDLE_W_bind (EVENTLOG_HANDLE_W UNCServerName)
void __RPC_USER	EVENTLOG_HANDLE_W_unbind (EVENTLOG_HANDLE_W UNCServerName, handle_t hBinding)
NTSTATUS NTAPI	ElfBackupEventLogFileA (IN HANDLE hEventLog, IN PANSI_STRING BackupFileNameA)
BOOL WINAPI	BackupEventLogA (IN HANDLE hEventLog, IN LPCSTR lpBackupFileName)
NTSTATUS NTAPI	ElfBackupEventLogFileW (IN HANDLE hEventLog, IN PUNICODE_STRING BackupFileNameU)
BOOL WINAPI	BackupEventLogW (IN HANDLE hEventLog, IN LPCWSTR lpBackupFileName)
NTSTATUS NTAPI	ElfClearEventLogFileA (IN HANDLE hEventLog, IN PANSI_STRING BackupFileNameA)
BOOL WINAPI	ClearEventLogA (IN HANDLE hEventLog, IN LPCSTR lpBackupFileName)
NTSTATUS NTAPI	ElfClearEventLogFileW (IN HANDLE hEventLog, IN PUNICODE_STRING BackupFileNameU)
BOOL WINAPI	ClearEventLogW (IN HANDLE hEventLog, IN LPCWSTR lpBackupFileName)
NTSTATUS NTAPI	ElfCloseEventLog (IN HANDLE hEventLog)
BOOL WINAPI	CloseEventLog (IN HANDLE hEventLog)
NTSTATUS NTAPI	ElfDeregisterEventSource (IN HANDLE hEventLog)
BOOL WINAPI	DeregisterEventSource (IN HANDLE hEventLog)
BOOL WINAPI	GetEventLogInformation (IN HANDLE hEventLog, IN DWORD dwInfoLevel, OUT LPVOID lpBuffer, IN DWORD cbBufSize, OUT LPDWORD pcbBytesNeeded)
NTSTATUS NTAPI	ElfNumberOfRecords (IN HANDLE hEventLog, OUT PULONG NumberOfRecords)
BOOL WINAPI	GetNumberOfEventLogRecords (IN HANDLE hEventLog, OUT PDWORD NumberOfRecords)
NTSTATUS NTAPI	ElfOldestRecord (IN HANDLE hEventLog, OUT PULONG OldestRecordNumber)
BOOL WINAPI	GetOldestEventLogRecord (IN HANDLE hEventLog, OUT PDWORD OldestRecord)
NTSTATUS NTAPI	ElfChangeNotify (IN HANDLE hEventLog, IN HANDLE hEvent)
BOOL WINAPI	NotifyChangeEventLog (IN HANDLE hEventLog, IN HANDLE hEvent)
NTSTATUS NTAPI	ElfOpenBackupEventLogA (IN PANSI_STRING UNCServerNameA, IN PANSI_STRING BackupFileNameA, OUT PHANDLE phEventLog)
HANDLE WINAPI	OpenBackupEventLogA (IN LPCSTR lpUNCServerName, IN LPCSTR lpFileName)
NTSTATUS NTAPI	ElfOpenBackupEventLogW (IN PUNICODE_STRING UNCServerNameU, IN PUNICODE_STRING BackupFileNameU, OUT PHANDLE phEventLog)
HANDLE WINAPI	OpenBackupEventLogW (IN LPCWSTR lpUNCServerName, IN LPCWSTR lpFileName)
NTSTATUS NTAPI	ElfOpenEventLogA (IN PANSI_STRING UNCServerNameA, IN PANSI_STRING SourceNameA, OUT PHANDLE phEventLog)
HANDLE WINAPI	OpenEventLogA (IN LPCSTR lpUNCServerName, IN LPCSTR lpSourceName)
NTSTATUS NTAPI	ElfOpenEventLogW (IN PUNICODE_STRING UNCServerNameU, IN PUNICODE_STRING SourceNameU, OUT PHANDLE phEventLog)
HANDLE WINAPI	OpenEventLogW (IN LPCWSTR lpUNCServerName, IN LPCWSTR lpSourceName)
NTSTATUS NTAPI	ElfReadEventLogA (IN HANDLE hEventLog, IN ULONG ReadFlags, IN ULONG RecordOffset, OUT LPVOID Buffer, IN ULONG NumberOfBytesToRead, OUT PULONG NumberOfBytesRead, OUT PULONG MinNumberOfBytesNeeded)
BOOL WINAPI	ReadEventLogA (IN HANDLE hEventLog, IN DWORD dwReadFlags, IN DWORD dwRecordOffset, OUT LPVOID lpBuffer, IN DWORD nNumberOfBytesToRead, OUT DWORD *pnBytesRead, OUT DWORD *pnMinNumberOfBytesNeeded)
NTSTATUS NTAPI	ElfReadEventLogW (IN HANDLE hEventLog, IN ULONG ReadFlags, IN ULONG RecordOffset, OUT LPVOID Buffer, IN ULONG NumberOfBytesToRead, OUT PULONG NumberOfBytesRead, OUT PULONG MinNumberOfBytesNeeded)
BOOL WINAPI	ReadEventLogW (IN HANDLE hEventLog, IN DWORD dwReadFlags, IN DWORD dwRecordOffset, OUT LPVOID lpBuffer, IN DWORD nNumberOfBytesToRead, OUT DWORD *pnBytesRead, OUT DWORD *pnMinNumberOfBytesNeeded)
NTSTATUS NTAPI	ElfRegisterEventSourceA (IN PANSI_STRING UNCServerNameA, IN PANSI_STRING SourceNameA, OUT PHANDLE phEventLog)
HANDLE WINAPI	RegisterEventSourceA (IN LPCSTR lpUNCServerName, IN LPCSTR lpSourceName)
NTSTATUS NTAPI	ElfRegisterEventSourceW (IN PUNICODE_STRING UNCServerNameU, IN PUNICODE_STRING SourceNameU, OUT PHANDLE phEventLog)
HANDLE WINAPI	RegisterEventSourceW (IN LPCWSTR lpUNCServerName, IN LPCWSTR lpSourceName)
NTSTATUS NTAPI	ElfReportEventA (IN HANDLE hEventLog, IN USHORT EventType, IN USHORT EventCategory, IN ULONG EventID, IN PSID UserSID, IN USHORT NumStrings, IN ULONG DataSize, IN PANSI_STRING *Strings, IN PVOID Data, IN USHORT Flags, IN OUT PULONG RecordNumber, IN OUT PULONG TimeWritten)
BOOL WINAPI	ReportEventA (IN HANDLE hEventLog, IN WORD wType, IN WORD wCategory, IN DWORD dwEventID, IN PSID lpUserSid, IN WORD wNumStrings, IN DWORD dwDataSize, IN LPCSTR *lpStrings, IN LPVOID lpRawData)
NTSTATUS NTAPI	ElfReportEventW (IN HANDLE hEventLog, IN USHORT EventType, IN USHORT EventCategory, IN ULONG EventID, IN PSID UserSID, IN USHORT NumStrings, IN ULONG DataSize, IN PUNICODE_STRING *Strings, IN PVOID Data, IN USHORT Flags, IN OUT PULONG RecordNumber, IN OUT PULONG TimeWritten)
BOOL WINAPI	ReportEventW (IN HANDLE hEventLog, IN WORD wType, IN WORD wCategory, IN DWORD dwEventID, IN PSID lpUserSid, IN WORD wNumStrings, IN DWORD dwDataSize, IN LPCWSTR *lpStrings, IN LPVOID lpRawData)
NTSTATUS NTAPI	ElfReportEventAndSourceW (IN HANDLE hEventLog, IN ULONG Time, IN PUNICODE_STRING ComputerName, IN USHORT EventType, IN USHORT EventCategory, IN ULONG EventID, IN PSID UserSID, IN PUNICODE_STRING SourceName, IN USHORT NumStrings, IN ULONG DataSize, IN PUNICODE_STRING *Strings, IN PVOID Data, IN USHORT Flags, IN OUT PULONG RecordNumber, IN OUT PULONG TimeWritten)
NTSTATUS NTAPI	ElfFlushEventLog (IN HANDLE hEventLog)

Variables
static RPC_UNICODE_STRING	EmptyStringU = { 0, 0, L"" }
static RPC_STRING	EmptyStringA = { 0, 0, "" }

Function Documentation

BackupEventLogA()

BOOL WINAPI BackupEventLogA	(	IN HANDLE	hEventLog,
		IN LPCSTR	lpBackupFileName
	)

Definition at line 177 of file eventlog.c.

{
    BOOL Success;
    NTSTATUS Status;
    ANSI_STRING BackupFileNameA;
    UNICODE_STRING BackupFileNameW;
 
    TRACE("%p, %s\n", hEventLog, lpBackupFileName);
 
    if (lpBackupFileName == NULL)
    {
        SetLastError(ERROR_INVALID_PARAMETER);
        return FALSE;
    }
 
    RtlInitAnsiString(&BackupFileNameA, lpBackupFileName);
 
    Status = RtlAnsiStringToUnicodeString(&BackupFileNameW,
                                          &BackupFileNameA,
                                          TRUE);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    Success = BackupEventLogW(hEventLog,
                              BackupFileNameW.Buffer);
 
    RtlFreeUnicodeString(&BackupFileNameW);
 
    return Success;
}

Referenced by create_backup(), and test_backup().

BackupEventLogW()

BOOL WINAPI BackupEventLogW	(	IN HANDLE	hEventLog,
		IN LPCWSTR	lpBackupFileName
	)

Definition at line 245 of file eventlog.c.

{
    NTSTATUS Status;
    UNICODE_STRING BackupFileName;
 
    TRACE("%p, %s\n", hEventLog, debugstr_w(lpBackupFileName));
 
    if (lpBackupFileName == NULL)
    {
        SetLastError(ERROR_INVALID_PARAMETER);
        return FALSE;
    }
 
    if (!RtlDosPathNameToNtPathName_U(lpBackupFileName, &BackupFileName,
                                      NULL, NULL))
    {
        SetLastError(ERROR_INVALID_PARAMETER);
        return FALSE;
    }
 
    Status = ElfBackupEventLogFileW(hEventLog, &BackupFileName);
 
    RtlFreeHeap(RtlGetProcessHeap(), 0, BackupFileName.Buffer);
 
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by BackupEventLogA(), and SaveEventLog().

ClearEventLogA()

BOOL WINAPI ClearEventLogA	(	IN HANDLE	hEventLog,
		IN LPCSTR	lpBackupFileName
	)

Definition at line 305 of file eventlog.c.

{
    BOOL Success;
    NTSTATUS Status;
    ANSI_STRING BackupFileNameA;
    UNICODE_STRING BackupFileNameW;
 
    TRACE("%p, %s\n", hEventLog, lpBackupFileName);
 
    if (lpBackupFileName == NULL)
    {
        RtlInitUnicodeString(&BackupFileNameW, NULL);
    }
    else
    {
        RtlInitAnsiString(&BackupFileNameA, lpBackupFileName);
 
        Status = RtlAnsiStringToUnicodeString(&BackupFileNameW,
                                              &BackupFileNameA,
                                              TRUE);
        if (!NT_SUCCESS(Status))
        {
            SetLastError(RtlNtStatusToDosError(Status));
            return FALSE;
        }
    }
 
    Success = ClearEventLogW(hEventLog,
                             BackupFileNameW.Buffer);
 
    RtlFreeUnicodeString(&BackupFileNameW);
 
    return Success;
}

Referenced by test_clear(), and test_readwrite().

ClearEventLogW()

BOOL WINAPI ClearEventLogW	(	IN HANDLE	hEventLog,
		IN LPCWSTR	lpBackupFileName
	)

Definition at line 367 of file eventlog.c.

{
    NTSTATUS Status;
    UNICODE_STRING BackupFileName;
 
    TRACE("%p, %s\n", hEventLog, debugstr_w(lpBackupFileName));
 
    if (lpBackupFileName == NULL)
    {
        RtlInitUnicodeString(&BackupFileName, NULL);
    }
    else
    {
        if (!RtlDosPathNameToNtPathName_U(lpBackupFileName, &BackupFileName,
                                          NULL, NULL))
        {
            SetLastError(ERROR_INVALID_PARAMETER);
            return FALSE;
        }
    }
 
    Status = ElfClearEventLogFileW(hEventLog, &BackupFileName);
 
    if (lpBackupFileName != NULL)
        RtlFreeHeap(RtlGetProcessHeap(), 0, BackupFileName.Buffer);
 
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by ClearEventLogA(), and ClearEvents().

CloseEventLog()

BOOL WINAPI CloseEventLog

(

IN HANDLE

hEventLog

)

Definition at line 427 of file eventlog.c.

{
    NTSTATUS Status;
 
    TRACE("%p\n", hEventLog);
 
    Status = ElfCloseEventLog(hEventLog);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by ClearEvents(), create_backup(), EnumEventsThread(), LogToEventLog(), SaveEventLog(), START_TEST(), test_backup(), test_clear(), test_count(), test_info(), test_oldest(), test_open_close(), test_openbackup(), test_read(), test_readwrite(), TestEventsGeneration(), and wmain().

DeregisterEventSource()

BOOL WINAPI DeregisterEventSource

(

IN HANDLE

hEventLog

)

Definition at line 473 of file eventlog.c.

{
    NTSTATUS Status;
 
    TRACE("%p\n", hEventLog);
 
    Status = ElfDeregisterEventSource(hEventLog);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by AddToMessageLog(), FreeLogs(), ScmLogEvent(), test_readwrite(), TestEventsGeneration(), TestMyEventProvider(), tirpc_report(), wmain(), and WriteEvent().

ElfBackupEventLogFileA()

NTSTATUS NTAPI ElfBackupEventLogFileA	(	IN HANDLE	hEventLog,
		IN PANSI_STRING	BackupFileNameA
	)

Definition at line 154 of file eventlog.c.

{
    NTSTATUS Status;
 
    if (!BackupFileNameA || (BackupFileNameA->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    RpcTryExcept
    {
        Status = ElfrBackupELFA(hEventLog,
                                (PRPC_STRING)BackupFileNameA);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

ElfBackupEventLogFileW()

NTSTATUS NTAPI ElfBackupEventLogFileW	(	IN HANDLE	hEventLog,
		IN PUNICODE_STRING	BackupFileNameU
	)

Definition at line 222 of file eventlog.c.

{
    NTSTATUS Status;
 
    if (!BackupFileNameU || (BackupFileNameU->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    RpcTryExcept
    {
        Status = ElfrBackupELFW(hEventLog,
                                (PRPC_UNICODE_STRING)BackupFileNameU);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by BackupEventLogW().

ElfChangeNotify()

NTSTATUS NTAPI ElfChangeNotify	(	IN HANDLE	hEventLog,
		IN HANDLE	hEvent
	)

Definition at line 646 of file eventlog.c.

{
    NTSTATUS Status;
    CLIENT_ID ClientId = NtCurrentTeb()->ClientId;
    RPC_CLIENT_ID RpcClientId;
 
    RpcClientId.UniqueProcess = HandleToUlong(ClientId.UniqueProcess);
    RpcClientId.UniqueThread  = HandleToUlong(ClientId.UniqueThread);
 
    RpcTryExcept
    {
        Status = ElfrChangeNotify(hEventLog, RpcClientId, HandleToUlong(hEvent));
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by NotifyChangeEventLog().

ElfClearEventLogFileA()

NTSTATUS NTAPI ElfClearEventLogFileA	(	IN HANDLE	hEventLog,
		IN PANSI_STRING	BackupFileNameA
	)

Definition at line 285 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrClearELFA(hEventLog,
                               (PRPC_STRING)BackupFileNameA);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

ElfClearEventLogFileW()

NTSTATUS NTAPI ElfClearEventLogFileW	(	IN HANDLE	hEventLog,
		IN PUNICODE_STRING	BackupFileNameU
	)

Definition at line 347 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrClearELFW(hEventLog,
                               (PRPC_UNICODE_STRING)BackupFileNameU);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by ClearEventLogW().

ElfCloseEventLog()

NTSTATUS NTAPI ElfCloseEventLog

(

IN HANDLE

hEventLog

)

Definition at line 409 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrCloseEL(&hEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by CloseEventLog().

ElfDeregisterEventSource()

NTSTATUS NTAPI ElfDeregisterEventSource

(

IN HANDLE

hEventLog

)

Definition at line 455 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrDeregisterEventSource(&hEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by DeregisterEventSource(), and UserpLogHardError().

ElfFlushEventLog()

NTSTATUS NTAPI ElfFlushEventLog

(

IN HANDLE

hEventLog

)

Definition at line 1633 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrFlushEL(hEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

ElfNumberOfRecords()

NTSTATUS NTAPI ElfNumberOfRecords	(	IN HANDLE	hEventLog,
		OUT PULONG	NumberOfRecords
	)

Definition at line 548 of file eventlog.c.

{
    NTSTATUS Status;
 
    if (!NumberOfRecords)
        return STATUS_INVALID_PARAMETER;
 
    RpcTryExcept
    {
        Status = ElfrNumberOfRecords(hEventLog, NumberOfRecords);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by GetNumberOfEventLogRecords().

ElfOldestRecord()

NTSTATUS NTAPI ElfOldestRecord	(	IN HANDLE	hEventLog,
		OUT PULONG	OldestRecordNumber
	)

Definition at line 597 of file eventlog.c.

{
    NTSTATUS Status;
 
    if (!OldestRecordNumber)
        return STATUS_INVALID_PARAMETER;
 
    RpcTryExcept
    {
        Status = ElfrOldestRecord(hEventLog, OldestRecordNumber);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by GetOldestEventLogRecord().

ElfOpenBackupEventLogA()

NTSTATUS NTAPI ElfOpenBackupEventLogA	(	IN PANSI_STRING	UNCServerNameA,
		IN PANSI_STRING	BackupFileNameA,
		OUT PHANDLE	phEventLog
	)

Definition at line 693 of file eventlog.c.

{
    NTSTATUS Status;
    PSTR pUNCServerName = NULL;
 
    if (!phEventLog || !BackupFileNameA || (BackupFileNameA->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameA && (UNCServerNameA->Length != 0))
        pUNCServerName = UNCServerNameA->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrOpenBELA(pUNCServerName,
                              (PRPC_STRING)BackupFileNameA,
                              1, 1,
                              (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

ElfOpenBackupEventLogW()

NTSTATUS NTAPI ElfOpenBackupEventLogW	(	IN PUNICODE_STRING	UNCServerNameU,
		IN PUNICODE_STRING	BackupFileNameU,
		OUT PHANDLE	phEventLog
	)

Definition at line 797 of file eventlog.c.

{
    NTSTATUS Status;
    PWSTR pUNCServerName = NULL;
 
    if (!phEventLog || !BackupFileNameU || (BackupFileNameU->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameU && (UNCServerNameU->Length != 0))
        pUNCServerName = UNCServerNameU->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrOpenBELW(pUNCServerName,
                              (PRPC_UNICODE_STRING)BackupFileNameU,
                              1,
                              1,
                              (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by OpenBackupEventLogW().

ElfOpenEventLogA()

NTSTATUS NTAPI ElfOpenEventLogA	(	IN PANSI_STRING	UNCServerNameA,
		IN PANSI_STRING	SourceNameA,
		OUT PHANDLE	phEventLog
	)

Definition at line 885 of file eventlog.c.

{
    NTSTATUS Status;
    PSTR pUNCServerName = NULL;
 
    if (!phEventLog || !SourceNameA || (SourceNameA->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameA && (UNCServerNameA->Length != 0))
        pUNCServerName = UNCServerNameA->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrOpenELA(pUNCServerName,
                             (PRPC_STRING)SourceNameA,
                             &EmptyStringA,
                             1,
                             1,
                             (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by OpenEventLogA().

ElfOpenEventLogW()

NTSTATUS NTAPI ElfOpenEventLogW	(	IN PUNICODE_STRING	UNCServerNameU,
		IN PUNICODE_STRING	SourceNameU,
		OUT PHANDLE	phEventLog
	)

Definition at line 951 of file eventlog.c.

{
    NTSTATUS Status;
    PWSTR pUNCServerName = NULL;
 
    if (!phEventLog || !SourceNameU || (SourceNameU->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameU && (UNCServerNameU->Length != 0))
        pUNCServerName = UNCServerNameU->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrOpenELW(pUNCServerName,
                             (PRPC_UNICODE_STRING)SourceNameU,
                             &EmptyStringU,
                             1,
                             1,
                             (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by OpenEventLogW().

ElfReadEventLogA()

NTSTATUS NTAPI ElfReadEventLogA	(	IN HANDLE	hEventLog,
		IN ULONG	ReadFlags,
		IN ULONG	RecordOffset,
		OUT LPVOID	Buffer,
		IN ULONG	NumberOfBytesToRead,
		OUT PULONG	NumberOfBytesRead,
		OUT PULONG	MinNumberOfBytesNeeded
	)

Definition at line 1013 of file eventlog.c.

{
    NTSTATUS Status;
    ULONG Flags;
 
    if (!Buffer || !NumberOfBytesRead || !MinNumberOfBytesNeeded)
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    Flags = ReadFlags & (EVENTLOG_SEQUENTIAL_READ | EVENTLOG_SEEK_READ);
    if (Flags == (EVENTLOG_SEQUENTIAL_READ | EVENTLOG_SEEK_READ))
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    Flags = ReadFlags & (EVENTLOG_FORWARDS_READ | EVENTLOG_BACKWARDS_READ);
    if (Flags == (EVENTLOG_FORWARDS_READ | EVENTLOG_BACKWARDS_READ))
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    RpcTryExcept
    {
        Status = ElfrReadELA(hEventLog,
                             ReadFlags,
                             RecordOffset,
                             NumberOfBytesToRead,
                             Buffer,
                             NumberOfBytesRead,
                             MinNumberOfBytesNeeded);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by ReadEventLogA().

ElfReadEventLogW()

NTSTATUS NTAPI ElfReadEventLogW	(	IN HANDLE	hEventLog,
		IN ULONG	ReadFlags,
		IN ULONG	RecordOffset,
		OUT LPVOID	Buffer,
		IN ULONG	NumberOfBytesToRead,
		OUT PULONG	NumberOfBytesRead,
		OUT PULONG	MinNumberOfBytesNeeded
	)

Definition at line 1106 of file eventlog.c.

{
    NTSTATUS Status;
    ULONG Flags;
 
    if (!Buffer || !NumberOfBytesRead || !MinNumberOfBytesNeeded)
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    Flags = ReadFlags & (EVENTLOG_SEQUENTIAL_READ | EVENTLOG_SEEK_READ);
    if (Flags == (EVENTLOG_SEQUENTIAL_READ | EVENTLOG_SEEK_READ))
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    Flags = ReadFlags & (EVENTLOG_FORWARDS_READ | EVENTLOG_BACKWARDS_READ);
    if (Flags == (EVENTLOG_FORWARDS_READ | EVENTLOG_BACKWARDS_READ))
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    RpcTryExcept
    {
        Status = ElfrReadELW(hEventLog,
                             ReadFlags,
                             RecordOffset,
                             NumberOfBytesToRead,
                             Buffer,
                             NumberOfBytesRead,
                             MinNumberOfBytesNeeded);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by ReadEventLogW().

ElfRegisterEventSourceA()

NTSTATUS NTAPI ElfRegisterEventSourceA	(	IN PANSI_STRING	UNCServerNameA,
		IN PANSI_STRING	SourceNameA,
		OUT PHANDLE	phEventLog
	)

Definition at line 1190 of file eventlog.c.

{
    NTSTATUS Status;
    PSTR pUNCServerName = NULL;
 
    if (!phEventLog || !SourceNameA || (SourceNameA->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameA && (UNCServerNameA->Length != 0))
        pUNCServerName = UNCServerNameA->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrRegisterEventSourceA(pUNCServerName,
                                          (PRPC_STRING)SourceNameA,
                                          &EmptyStringA,
                                          1,
                                          1,
                                          (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by RegisterEventSourceA().

ElfRegisterEventSourceW()

NTSTATUS NTAPI ElfRegisterEventSourceW	(	IN PUNICODE_STRING	UNCServerNameU,
		IN PUNICODE_STRING	SourceNameU,
		OUT PHANDLE	phEventLog
	)

Definition at line 1261 of file eventlog.c.

{
    NTSTATUS Status;
    PWSTR pUNCServerName = NULL;
 
    if (!phEventLog || !SourceNameU || (SourceNameU->Length == 0))
        return STATUS_INVALID_PARAMETER;
 
    if (UNCServerNameU && (UNCServerNameU->Length != 0))
        pUNCServerName = UNCServerNameU->Buffer;
 
    *phEventLog = NULL;
 
    RpcTryExcept
    {
        Status = ElfrRegisterEventSourceW(pUNCServerName,
                                          (PRPC_UNICODE_STRING)SourceNameU,
                                          &EmptyStringU,
                                          1,
                                          1,
                                          (IELF_HANDLE*)phEventLog);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by RegisterEventSourceW(), and UserpLogHardError().

ElfReportEventA()

NTSTATUS NTAPI ElfReportEventA	(	IN HANDLE	hEventLog,
		IN USHORT	EventType,
		IN USHORT	EventCategory,
		IN ULONG	EventID,
		IN PSID	UserSID,
		IN USHORT	NumStrings,
		IN ULONG	DataSize,
		IN PANSI_STRING *	Strings,
		IN PVOID	Data,
		IN USHORT	Flags,
		IN OUT PULONG	RecordNumber,
		IN OUT PULONG	TimeWritten
	)

Definition at line 1323 of file eventlog.c.

{
    NTSTATUS Status;
    LARGE_INTEGER SystemTime;
    ULONG Time;
    ULONG dwSize;
    ANSI_STRING ComputerName;
    CHAR szComputerName[MAX_COMPUTERNAME_LENGTH + 1];
 
    dwSize = ARRAYSIZE(szComputerName);
    GetComputerNameA(szComputerName, &dwSize);
    RtlInitAnsiString(&ComputerName, szComputerName);
 
    NtQuerySystemTime(&SystemTime);
    RtlTimeToSecondsSince1970(&SystemTime, &Time);
 
    RpcTryExcept
    {
        Status = ElfrReportEventA(hEventLog,
                                  Time,
                                  EventType,
                                  EventCategory,
                                  EventID,
                                  NumStrings,
                                  DataSize,
                                  (PRPC_STRING)&ComputerName,
                                  (PRPC_SID)UserSID,
                                  (PRPC_STRING*)Strings,
                                  Data,
                                  Flags,
                                  RecordNumber,
                                  TimeWritten);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by ReportEventA().

ElfReportEventAndSourceW()

NTSTATUS NTAPI ElfReportEventAndSourceW	(	IN HANDLE	hEventLog,
		IN ULONG	Time,
		IN PUNICODE_STRING	ComputerName,
		IN USHORT	EventType,
		IN USHORT	EventCategory,
		IN ULONG	EventID,
		IN PSID	UserSID,
		IN PUNICODE_STRING	SourceName,
		IN USHORT	NumStrings,
		IN ULONG	DataSize,
		IN PUNICODE_STRING *	Strings,
		IN PVOID	Data,
		IN USHORT	Flags,
		IN OUT PULONG	RecordNumber,
		IN OUT PULONG	TimeWritten
	)

Definition at line 1586 of file eventlog.c.

{
    NTSTATUS Status;
 
    RpcTryExcept
    {
        Status = ElfrReportEventAndSourceW(hEventLog,
                                           Time,
                                           EventType,
                                           EventCategory,
                                           EventID,
                                           (PRPC_UNICODE_STRING)SourceName,
                                           NumStrings,
                                           DataSize,
                                           (PRPC_UNICODE_STRING)ComputerName,
                                           (PRPC_SID)UserSID,
                                           (PRPC_UNICODE_STRING*)Strings,
                                           (PBYTE)Data,
                                           Flags,
                                           RecordNumber,
                                           TimeWritten);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

ElfReportEventW()

NTSTATUS NTAPI ElfReportEventW	(	IN HANDLE	hEventLog,
		IN USHORT	EventType,
		IN USHORT	EventCategory,
		IN ULONG	EventID,
		IN PSID	UserSID,
		IN USHORT	NumStrings,
		IN ULONG	DataSize,
		IN PUNICODE_STRING *	Strings,
		IN PVOID	Data,
		IN USHORT	Flags,
		IN OUT PULONG	RecordNumber,
		IN OUT PULONG	TimeWritten
	)

Definition at line 1462 of file eventlog.c.

{
    NTSTATUS Status;
    LARGE_INTEGER SystemTime;
    ULONG Time;
    ULONG dwSize;
    UNICODE_STRING ComputerName;
    WCHAR szComputerName[MAX_COMPUTERNAME_LENGTH + 1];
 
    dwSize = ARRAYSIZE(szComputerName);
    GetComputerNameW(szComputerName, &dwSize);
    RtlInitUnicodeString(&ComputerName, szComputerName);
 
    NtQuerySystemTime(&SystemTime);
    RtlTimeToSecondsSince1970(&SystemTime, &Time);
 
    RpcTryExcept
    {
        Status = ElfrReportEventW(hEventLog,
                                  Time,
                                  EventType,
                                  EventCategory,
                                  EventID,
                                  NumStrings,
                                  DataSize,
                                  (PRPC_UNICODE_STRING)&ComputerName,
                                  (PRPC_SID)UserSID,
                                  (PRPC_UNICODE_STRING*)Strings,
                                  Data,
                                  Flags,
                                  RecordNumber,
                                  TimeWritten);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    return Status;
}

Referenced by ReportEventW(), and UserpLogHardError().

EVENTLOG_HANDLE_A_bind()

handle_t __RPC_USER EVENTLOG_HANDLE_A_bind

(

EVENTLOG_HANDLE_A

UNCServerName

)

Definition at line 40 of file eventlog.c.

{
    handle_t hBinding = NULL;
    RPC_CSTR pszStringBinding;
    RPC_STATUS status;
 
    TRACE("EVENTLOG_HANDLE_A_bind() called\n");
 
    status = RpcStringBindingComposeA(NULL,
                                      (RPC_CSTR)"ncacn_np",
                                      (RPC_CSTR)UNCServerName,
                                      (RPC_CSTR)"\\pipe\\EventLog",
                                      NULL,
                                      &pszStringBinding);
    if (status)
    {
        ERR("RpcStringBindingCompose returned 0x%x\n", status);
        return NULL;
    }
 
    /* Set the binding handle that will be used to bind to the server. */
    status = RpcBindingFromStringBindingA(pszStringBinding,
                                          &hBinding);
    if (status != RPC_S_OK)
    {
        ERR("RpcBindingFromStringBinding returned 0x%x\n", status);
    }
 
    status = RpcStringFreeA(&pszStringBinding);
    if (status != RPC_S_OK)
    {
        ERR("RpcStringFree returned 0x%x\n", status);
    }
 
    return hBinding;
}

EVENTLOG_HANDLE_A_unbind()

void __RPC_USER EVENTLOG_HANDLE_A_unbind	(	EVENTLOG_HANDLE_A	UNCServerName,
		handle_t	hBinding
	)

Definition at line 79 of file eventlog.c.

{
    RPC_STATUS status;
 
    TRACE("EVENTLOG_HANDLE_A_unbind() called\n");
 
    status = RpcBindingFree(&hBinding);
    if (status != RPC_S_OK)
    {
        ERR("RpcBindingFree returned 0x%x\n", status);
    }
}

EVENTLOG_HANDLE_W_bind()

handle_t __RPC_USER EVENTLOG_HANDLE_W_bind

(

EVENTLOG_HANDLE_W

UNCServerName

)

Definition at line 95 of file eventlog.c.

{
    handle_t hBinding = NULL;
    RPC_WSTR pszStringBinding;
    RPC_STATUS status;
 
    TRACE("EVENTLOG_HANDLE_W_bind() called\n");
 
    status = RpcStringBindingComposeW(NULL,
                                      L"ncacn_np",
                                      UNCServerName,
                                      L"\\pipe\\EventLog",
                                      NULL,
                                      &pszStringBinding);
    if (status != RPC_S_OK)
    {
        ERR("RpcStringBindingCompose returned 0x%x\n", status);
        return NULL;
    }
 
    /* Set the binding handle that will be used to bind to the server. */
    status = RpcBindingFromStringBindingW(pszStringBinding,
                                          &hBinding);
    if (status != RPC_S_OK)
    {
        ERR("RpcBindingFromStringBinding returned 0x%x\n", status);
    }
 
    status = RpcStringFreeW(&pszStringBinding);
    if (status != RPC_S_OK)
    {
        ERR("RpcStringFree returned 0x%x\n", status);
    }
 
    return hBinding;
}

EVENTLOG_HANDLE_W_unbind()

void __RPC_USER EVENTLOG_HANDLE_W_unbind	(	EVENTLOG_HANDLE_W	UNCServerName,
		handle_t	hBinding
	)

Definition at line 134 of file eventlog.c.

{
    RPC_STATUS status;
 
    TRACE("EVENTLOG_HANDLE_W_unbind() called\n");
 
    status = RpcBindingFree(&hBinding);
    if (status != RPC_S_OK)
    {
        ERR("RpcBindingFree returned 0x%x\n", status);
    }
}

GetEventLogInformation()

BOOL WINAPI GetEventLogInformation	(	IN HANDLE	hEventLog,
		IN DWORD	dwInfoLevel,
		OUT LPVOID	lpBuffer,
		IN DWORD	cbBufSize,
		OUT LPDWORD	pcbBytesNeeded
	)

Definition at line 501 of file eventlog.c.

{
    NTSTATUS Status;
 
    if (dwInfoLevel != EVENTLOG_FULL_INFO)
    {
        SetLastError(ERROR_INVALID_LEVEL);
        return FALSE;
    }
 
    RpcTryExcept
    {
        Status = ElfrGetLogInformation(hEventLog,
                                       dwInfoLevel,
                                       (LPBYTE)lpBuffer,
                                       cbBufSize,
                                       pcbBytesNeeded);
    }
    RpcExcept(EXCEPTION_EXECUTE_HANDLER)
    {
        Status = I_RpcMapWin32Status(RpcExceptionCode());
    }
    RpcEndExcept;
 
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

GetNumberOfEventLogRecords()

BOOL WINAPI GetNumberOfEventLogRecords	(	IN HANDLE	hEventLog,
		OUT PDWORD	NumberOfRecords
	)

Definition at line 570 of file eventlog.c.

{
    NTSTATUS Status;
 
    TRACE("%p, %p\n", hEventLog, NumberOfRecords);
 
    Status = ElfNumberOfRecords(hEventLog, NumberOfRecords);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by EnumEventsThread(), test_count(), test_read(), and test_readwrite().

GetOldestEventLogRecord()

BOOL WINAPI GetOldestEventLogRecord	(	IN HANDLE	hEventLog,
		OUT PDWORD	OldestRecord
	)

Definition at line 619 of file eventlog.c.

{
    NTSTATUS Status;
 
    TRACE("%p, %p\n", hEventLog, OldestRecord);
 
    Status = ElfOldestRecord(hEventLog, OldestRecord);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by test_oldest(), and test_readwrite().

NotifyChangeEventLog()

BOOL WINAPI NotifyChangeEventLog	(	IN HANDLE	hEventLog,
		IN HANDLE	hEvent
	)

Definition at line 670 of file eventlog.c.

{
    NTSTATUS Status;
 
    TRACE("%p, %p\n", hEventLog, hEvent);
 
    Status = ElfChangeNotify(hEventLog, hEvent);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

OpenBackupEventLogA()

HANDLE WINAPI OpenBackupEventLogA	(	IN LPCSTR	lpUNCServerName,
		IN LPCSTR	lpFileName
	)

Definition at line 725 of file eventlog.c.

{
    NTSTATUS Status;
    HANDLE LogHandle;
    ANSI_STRING UNCServerNameA;
    UNICODE_STRING UNCServerNameW;
    ANSI_STRING FileNameA;
    UNICODE_STRING FileNameW;
 
    TRACE("%s, %s\n", lpUNCServerName, lpFileName);
 
    /* Convert the server name to unicode */
    if (lpUNCServerName == NULL)
    {
        RtlInitUnicodeString(&UNCServerNameW, NULL);
    }
    else
    {
        RtlInitAnsiString(&UNCServerNameA, lpUNCServerName);
 
        Status = RtlAnsiStringToUnicodeString(&UNCServerNameW,
                                              &UNCServerNameA,
                                              TRUE);
        if (!NT_SUCCESS(Status))
        {
            SetLastError(RtlNtStatusToDosError(Status));
            return NULL;
        }
    }
 
    /* Convert the file name to unicode */
    if (lpFileName == NULL)
    {
        RtlInitUnicodeString(&FileNameW, NULL);
    }
    else
    {
        RtlInitAnsiString(&FileNameA, lpFileName);
 
        Status = RtlAnsiStringToUnicodeString(&FileNameW,
                                              &FileNameA,
                                              TRUE);
        if (!NT_SUCCESS(Status))
        {
            RtlFreeUnicodeString(&UNCServerNameW);
            SetLastError(RtlNtStatusToDosError(Status));
            return NULL;
        }
    }
 
    /* Call the unicode function */
    LogHandle = OpenBackupEventLogW(UNCServerNameW.Buffer,
                                    FileNameW.Buffer);
 
    /* Free the unicode strings */
    RtlFreeUnicodeString(&UNCServerNameW);
    RtlFreeUnicodeString(&FileNameW);
 
    return LogHandle;
}

Referenced by test_backup(), test_clear(), test_count(), test_oldest(), and test_openbackup().

OpenBackupEventLogW()

HANDLE WINAPI OpenBackupEventLogW	(	IN LPCWSTR	lpUNCServerName,
		IN LPCWSTR	lpFileName
	)

Definition at line 830 of file eventlog.c.

{
    NTSTATUS Status;
    HANDLE hEventLog;
    UNICODE_STRING UNCServerName, FileName;
 
    TRACE("%s, %s\n", debugstr_w(lpUNCServerName), debugstr_w(lpFileName));
 
    if (lpFileName == NULL)
    {
        SetLastError(ERROR_INVALID_PARAMETER);
        return NULL;
    }
 
    if (!RtlDosPathNameToNtPathName_U(lpFileName, &FileName,
                                      NULL, NULL))
    {
        SetLastError(ERROR_INVALID_PARAMETER);
        return NULL;
    }
 
    RtlInitUnicodeString(&UNCServerName, lpUNCServerName);
 
    Status = ElfOpenBackupEventLogW(&UNCServerName, &FileName, &hEventLog);
 
    if (FileName.Buffer != NULL)
        RtlFreeHeap(RtlGetProcessHeap(), 0, FileName.Buffer);
 
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return NULL;
    }
 
    return hEventLog;
}

Referenced by EnumEventsThread(), and OpenBackupEventLogA().

OpenEventLogA()

HANDLE WINAPI OpenEventLogA	(	IN LPCSTR	lpUNCServerName,
		IN LPCSTR	lpSourceName
	)

Definition at line 919 of file eventlog.c.

{
    NTSTATUS Status;
    HANDLE hEventLog;
    ANSI_STRING UNCServerName, SourceName;
 
    TRACE("%s, %s\n", lpUNCServerName, lpSourceName);
 
    RtlInitAnsiString(&UNCServerName, lpUNCServerName);
    RtlInitAnsiString(&SourceName, lpSourceName);
 
    Status = ElfOpenEventLogA(&UNCServerName, &SourceName, &hEventLog);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return NULL;
    }
 
    return hEventLog;
}

Referenced by create_backup(), test_backup(), test_count(), test_info(), test_oldest(), test_open_close(), test_read(), and test_readwrite().

OpenEventLogW()

HANDLE WINAPI OpenEventLogW	(	IN LPCWSTR	lpUNCServerName,
		IN LPCWSTR	lpSourceName
	)

Definition at line 985 of file eventlog.c.

{
    NTSTATUS Status;
    HANDLE hEventLog;
    UNICODE_STRING UNCServerName, SourceName;
 
    TRACE("%s, %s\n", debugstr_w(lpUNCServerName), debugstr_w(lpSourceName));
 
    RtlInitUnicodeString(&UNCServerName, lpUNCServerName);
    RtlInitUnicodeString(&SourceName, lpSourceName);
 
    Status = ElfOpenEventLogW(&UNCServerName, &SourceName, &hEventLog);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return NULL;
    }
 
    return hEventLog;
}

Referenced by ClearEvents(), EnumEventsThread(), SaveEventLog(), START_TEST(), TestEventsGeneration(), and wmain().

ReadEventLogA()

BOOL WINAPI ReadEventLogA	(	IN HANDLE	hEventLog,
		IN DWORD	dwReadFlags,
		IN DWORD	dwRecordOffset,
		OUT LPVOID	lpBuffer,
		IN DWORD	nNumberOfBytesToRead,
		OUT DWORD *	pnBytesRead,
		OUT DWORD *	pnMinNumberOfBytesNeeded
	)

Definition at line 1061 of file eventlog.c.

{
    NTSTATUS Status;
 
    TRACE("%p, %lu, %lu, %p, %lu, %p, %p\n",
        hEventLog, dwReadFlags, dwRecordOffset, lpBuffer,
        nNumberOfBytesToRead, pnBytesRead, pnMinNumberOfBytesNeeded);
 
    Status = ElfReadEventLogA(hEventLog,
                              dwReadFlags,
                              dwRecordOffset,
                              lpBuffer,
                              nNumberOfBytesToRead,
                              pnBytesRead,
                              pnMinNumberOfBytesNeeded);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by test_read(), and test_readwrite().

ReadEventLogW()

BOOL WINAPI ReadEventLogW	(	IN HANDLE	hEventLog,
		IN DWORD	dwReadFlags,
		IN DWORD	dwRecordOffset,
		OUT LPVOID	lpBuffer,
		IN DWORD	nNumberOfBytesToRead,
		OUT DWORD *	pnBytesRead,
		OUT DWORD *	pnMinNumberOfBytesNeeded
	)

Definition at line 1154 of file eventlog.c.

{
    NTSTATUS Status;
 
    TRACE("%p, %lu, %lu, %p, %lu, %p, %p\n",
        hEventLog, dwReadFlags, dwRecordOffset, lpBuffer,
        nNumberOfBytesToRead, pnBytesRead, pnMinNumberOfBytesNeeded);
 
    Status = ElfReadEventLogW(hEventLog,
                              dwReadFlags,
                              dwRecordOffset,
                              lpBuffer,
                              nNumberOfBytesToRead,
                              pnBytesRead,
                              pnMinNumberOfBytesNeeded);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by EnumEventsThread().

RegisterEventSourceA()

HANDLE WINAPI RegisterEventSourceA	(	IN LPCSTR	lpUNCServerName,
		IN LPCSTR	lpSourceName
	)

Definition at line 1224 of file eventlog.c.

{
    NTSTATUS Status;
    HANDLE hEventLog;
    ANSI_STRING UNCServerName, SourceName;
 
    TRACE("%s, %s\n", lpUNCServerName, lpSourceName);
 
    RtlInitAnsiString(&UNCServerName, lpUNCServerName);
    RtlInitAnsiString(&SourceName, lpSourceName);
 
    Status = ElfRegisterEventSourceA(&UNCServerName, &SourceName, &hEventLog);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return NULL;
    }
 
    return hEventLog;
}

Referenced by test_readwrite().

RegisterEventSourceW()

HANDLE WINAPI RegisterEventSourceW	(	IN LPCWSTR	lpUNCServerName,
		IN LPCWSTR	lpSourceName
	)

Definition at line 1295 of file eventlog.c.

{
    NTSTATUS Status;
    HANDLE hEventLog;
    UNICODE_STRING UNCServerName, SourceName;
 
    TRACE("%s, %s\n", debugstr_w(lpUNCServerName), debugstr_w(lpSourceName));
 
    RtlInitUnicodeString(&UNCServerName, lpUNCServerName);
    RtlInitUnicodeString(&SourceName, lpSourceName);
 
    Status = ElfRegisterEventSourceW(&UNCServerName, &SourceName, &hEventLog);
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return NULL;
    }
 
    return hEventLog;
}

Referenced by InitLogs(), LogToEventLog(), ScmLogEvent(), TestEventsGeneration(), TestMyEventProvider(), and wmain().

ReportEventA()

BOOL WINAPI ReportEventA	(	IN HANDLE	hEventLog,
		IN WORD	wType,
		IN WORD	wCategory,
		IN DWORD	dwEventID,
		IN PSID	lpUserSid,
		IN WORD	wNumStrings,
		IN DWORD	dwDataSize,
		IN LPCSTR *	lpStrings,
		IN LPVOID	lpRawData
	)

Definition at line 1377 of file eventlog.c.

{
    NTSTATUS Status;
    PANSI_STRING *Strings;
    WORD i;
 
    TRACE("%p, %u, %u, %lu, %p, %u, %lu, %p, %p\n",
          hEventLog, wType, wCategory, dwEventID, lpUserSid,
          wNumStrings, dwDataSize, lpStrings, lpRawData);
 
    Strings = HeapAlloc(GetProcessHeap(),
                        HEAP_ZERO_MEMORY,
                        wNumStrings * sizeof(PANSI_STRING));
    if (!Strings)
    {
        SetLastError(ERROR_NOT_ENOUGH_MEMORY);
        return FALSE;
    }
 
    for (i = 0; i < wNumStrings; i++)
    {
        Strings[i] = HeapAlloc(GetProcessHeap(),
                               HEAP_ZERO_MEMORY,
                               sizeof(ANSI_STRING));
        if (Strings[i])
        {
            RtlInitAnsiString(Strings[i], lpStrings[i]);
        }
    }
 
    Status = ElfReportEventA(hEventLog,
                             wType,
                             wCategory,
                             dwEventID,
                             lpUserSid,
                             wNumStrings,
                             dwDataSize,
                             Strings,
                             lpRawData,
                             0,
                             NULL,
                             NULL);
 
    for (i = 0; i < wNumStrings; i++)
    {
        if (Strings[i] != NULL)
            HeapFree(GetProcessHeap(), 0, Strings[i]);
    }
 
    HeapFree(GetProcessHeap(), 0, Strings);
 
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by test_readwrite().

ReportEventW()

BOOL WINAPI ReportEventW	(	IN HANDLE	hEventLog,
		IN WORD	wType,
		IN WORD	wCategory,
		IN DWORD	dwEventID,
		IN PSID	lpUserSid,
		IN WORD	wNumStrings,
		IN DWORD	dwDataSize,
		IN LPCWSTR *	lpStrings,
		IN LPVOID	lpRawData
	)

Definition at line 1516 of file eventlog.c.

{
    NTSTATUS Status;
    PUNICODE_STRING *Strings;
    WORD i;
 
    TRACE("%p, %u, %u, %lu, %p, %u, %lu, %p, %p\n",
          hEventLog, wType, wCategory, dwEventID, lpUserSid,
          wNumStrings, dwDataSize, lpStrings, lpRawData);
 
    Strings = HeapAlloc(GetProcessHeap(),
                        HEAP_ZERO_MEMORY,
                        wNumStrings * sizeof(PUNICODE_STRING));
    if (!Strings)
    {
        SetLastError(ERROR_NOT_ENOUGH_MEMORY);
        return FALSE;
    }
 
    for (i = 0; i < wNumStrings; i++)
    {
        Strings[i] = HeapAlloc(GetProcessHeap(),
                               HEAP_ZERO_MEMORY,
                               sizeof(UNICODE_STRING));
        if (Strings[i])
        {
            RtlInitUnicodeString(Strings[i], lpStrings[i]);
        }
    }
 
    Status = ElfReportEventW(hEventLog,
                             wType,
                             wCategory,
                             dwEventID,
                             lpUserSid,
                             wNumStrings,
                             dwDataSize,
                             Strings,
                             lpRawData,
                             0,
                             NULL,
                             NULL);
 
    for (i = 0; i < wNumStrings; i++)
    {
        if (Strings[i] != NULL)
            HeapFree(GetProcessHeap(), 0, Strings[i]);
    }
 
    HeapFree(GetProcessHeap(), 0, Strings);
 
    if (!NT_SUCCESS(Status))
    {
        SetLastError(RtlNtStatusToDosError(Status));
        return FALSE;
    }
 
    return TRUE;
}

Referenced by LogToEventLog(), ScmLogEvent(), START_TEST(), TestEventsGeneration(), TestMyEventProvider(), wmain(), and WriteLogMessage().

WINE_DEFAULT_DEBUG_CHANNEL()

WINE_DEFAULT_DEBUG_CHANNEL

(

advapi

)

Variable Documentation

EmptyStringA

RPC_STRING EmptyStringA = { 0, 0, "" }

static

Definition at line 34 of file eventlog.c.

Referenced by ElfOpenEventLogA(), and ElfRegisterEventSourceA().

EmptyStringU

RPC_UNICODE_STRING EmptyStringU = { 0, 0, L"" }

static

Definition at line 33 of file eventlog.c.

Referenced by ElfOpenEventLogW(), and ElfRegisterEventSourceW().