ETW_HEAP_EVENT_ALLOC event

The ETW_HEAP_EVENT_ALLOC event is a memory management tracing event for a heap allocation operation.

typedef struct ETW_HEAP_EVENT_ALLOC

Parameters

HeapHandle

The handle of the heap where the memory was allocated. This is the heap handle an app passed to the AllocateHeap function when the memory was allocated.

Size

The size in bytes allocated from the heap.

Address

The address of the memory that was allocated.

Source

The source of the memory that the allocator used for the heap allocation.

The following table lists the possible values for the Source parameter as defined in the ntetw.h header file:

Value	Meaning
MEMORY_FROM_LOOKASIDE 1	Memory from the lookaside list.
MEMORY_FROM_LOWFRAG 2	Memory from the low-fragmentation heap.
MEMORY_FROM_MAINPATH 3	Memory from main code path.
MEMORY_FROM_SLOWPATH 4	Memory from slow path.
MEMORY_FROM_INVALID 5	Memory that was not valid.
MEMORY_FROM_SEGMENT_HEAP 6	This value is reserved for future use and will never be returned.

 

Remarks

The ETW_HEAP_EVENT_ALLOC event is logged on all heap allocations.

Requirements

Requirement	Value
Minimum supported client	Windows 7 [desktop apps only]
Minimum supported server	Windows Server 2008 R2 [desktop apps only]
Header	Ntwmi.h

See also

Memory Management Tracing Events