DUMP_READ callback function

The Dump_Read callback routine is called after the read from the dump port driver. The filter driver can access the dump data during the call to this routine.

Syntax

DUMP_READ DumpRead;

NTSTATUS DumpRead(
  PFILTER_EXTENSION FilterExtension,
  PLARGE_INTEGER DiskByteOffset,
  PMDL Mdl
)
{...}

Parameters

FilterExtension

A pointer to a FILTER_EXTENSION structure.

DiskByteOffset

The value, in bytes, relative to the source partition for the crash dump or hibernation. Filter drivers should not modify this field.

Mdl

A pointer to an MDL structure that describes the data buffer containing the dump data. Filter drivers should not modify this field.

Return Value

If the routine succeeds, it must return STATUS_SUCCESS. Otherwise, it must return one of the error status values defined in Ntstatus.h.

Remarks

Filter drivers can read the data that was read by the crashdump process.

Filter drivers can modify the contents of the data buffer contained in Mdl to revert any changes made to the data when it was written to disk.

Requirements

   
Windows version Available starting with Windows 8
Target Platform Desktop
Header ntdddump.h (include Ntdddump.h)

See Also

Dump_Write

FILTER_EXTENSION