FltDeleteExtraCreateParameterLookasideList function (fltkernel.h)

Article
10/21/2021

The FltDeleteExtraCreateParameterLookasideList routine frees an extra create parameter (ECP) lookaside list.

Syntax

VOID FLTAPI FltDeleteExtraCreateParameterLookasideList(
  [in]      PFLT_FILTER               Filter,
  [in, out] PVOID                     Lookaside,
  [in]      FSRTL_ECP_LOOKASIDE_FLAGS Flags
);

Parameters

[in] Filter

Opaque filter pointer to the minifilter driver. This pointer uniquely identifies the minifilter driver and remains constant as long as the minifilter driver is loaded.

[in, out] Lookaside

Pointer to an opaque PAGED_LOOKASIDE_LIST or NPAGED_LOOKASIDE_LIST lookaside list-head structure that represents the lookaside list to be freed.

[in] Flags

Communicates ECP lookaside list allocation options that were used when the lookaside list was initialized by the FltInitExtraCreateParameterLookasideList routine.

This Flags parameter should be the same as the Flags parameter used in the call to the FltInitExtraCreateParameterLookasideList routine.

Return value

None

Remarks

This routine is available starting with Windows Vista.

The FltDeleteExtraCreateParameterLookasideList routine frees the given ECP lookaside list. However, freeing the lookaside list does not automatically free any ECP context structures allocated from the lookaside list. To free an ECP context structure allocated from a lookaside list, call the FltFreeExtraCreateParameter routine.

Drivers must explicitly free all ECP context structures and ECP lookaside lists that they created before unloading. For more information, see Using Lookaside Lists.

Requirements

Requirement	Value
Target Platform	Universal
Header	fltkernel.h (include Fltkernel.h)
Library	FltMgr.lib
IRQL	<= APC_LEVEL