ebpf_store_helper.h File Reference

#include "ebpf_program_types.h"
#include "ebpf_utilities.h"
#include "ebpf_windows.h"

Go to the source code of this file.

Data Structures
struct	_ebpf_btf_resolved_function_provider_info

Macros
#define	GUID_STRING_LENGTH   38
#define	EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION   1
#define	EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_SIZE    EBPF_SIZE_INCLUDING_FIELD(ebpf_btf_resolved_function_provider_info_t, btf_resolved_function_prototypes)
#define	EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_TOTAL_SIZE    sizeof(ebpf_btf_resolved_function_provider_info_t)
#define	EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_HEADER

Typedefs
typedef HKEY	ebpf_store_key_t
typedef struct _ebpf_btf_resolved_function_provider_info	ebpf_btf_resolved_function_provider_info_t

Functions
ebpf_result_t	ebpf_store_update_global_helper_information (_In_reads_(helper_info_count) ebpf_helper_function_prototype_t *helper_info, uint32_t helper_info_count)
	Update global helper information in the eBPF store.
ebpf_result_t	ebpf_store_update_section_information (_In_reads_(section_info_count) const ebpf_program_section_info_t *section_info, uint32_t section_info_count)
	Update section information in the eBPF store.
ebpf_result_t	ebpf_store_update_program_information_array (_In_reads_(program_info_count) const ebpf_program_info_t *program_info, uint32_t program_info_count)
	Update program information in the eBPF store.
ebpf_result_t	ebpf_store_update_btf_resolved_function_provider_information (const ebpf_btf_resolved_function_provider_info_t *provider_info)
	Update BTF-resolved function provider information in the eBPF store.
ebpf_result_t	ebpf_store_delete_btf_resolved_function_provider_information (const ebpf_btf_resolved_function_provider_info_t *provider_info)
	Delete BTF-resolved function provider information from the eBPF store.
ebpf_result_t	ebpf_store_delete_program_information (const ebpf_program_info_t *program_info)
	Delete program information from the eBPF store.
ebpf_result_t	ebpf_store_delete_section_information (const ebpf_program_section_info_t *section_info)
	Delete section information from the eBPF store.

Variables
ebpf_store_key_t	ebpf_store_hkcu_root_key
ebpf_store_key_t	ebpf_store_hklm_root_key
const wchar_t *	ebpf_store_root_sub_key

Macro Definition Documentation

EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION

#define EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION   1

EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_SIZE

#define EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_SIZE    EBPF_SIZE_INCLUDING_FIELD(ebpf_btf_resolved_function_provider_info_t, btf_resolved_function_prototypes)

EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_TOTAL_SIZE

#define EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_TOTAL_SIZE    sizeof(ebpf_btf_resolved_function_provider_info_t)

EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_HEADER

#define EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_HEADER

Value:

    {EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION,      \
     EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_SIZE, \
     EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_TOTAL_SIZE}

GUID_STRING_LENGTH

#define GUID_STRING_LENGTH   38

Typedef Documentation

ebpf_btf_resolved_function_provider_info_t

typedef struct _ebpf_btf_resolved_function_provider_info ebpf_btf_resolved_function_provider_info_t

ebpf_store_key_t

typedef HKEY ebpf_store_key_t

Function Documentation

ebpf_store_delete_btf_resolved_function_provider_information()

ebpf_result_t ebpf_store_delete_btf_resolved_function_provider_information

(

const ebpf_btf_resolved_function_provider_info_t *

provider_info

)

Delete BTF-resolved function provider information from the eBPF store.

Parameters

[in]

provider_info

Pointer to the BTF-resolved function provider information.

Returns

Status of the operation.

ebpf_store_delete_program_information()

ebpf_result_t ebpf_store_delete_program_information

(

const ebpf_program_info_t *

program_info

)

Delete program information from the eBPF store.

Parameters

[in]

program_info

Pointer to the program information.

Returns

Status of the operation.

ebpf_store_delete_section_information()

ebpf_result_t ebpf_store_delete_section_information

(

const ebpf_program_section_info_t *

section_info

)

Delete section information from the eBPF store.

Parameters

[in]

section_info

Pointer to the section information.

Returns

Status of the operation.

ebpf_store_update_btf_resolved_function_provider_information()

ebpf_result_t ebpf_store_update_btf_resolved_function_provider_information

(

const ebpf_btf_resolved_function_provider_info_t *

provider_info

)

Update BTF-resolved function provider information in the eBPF store.

Parameters

[in]

provider_info

Pointer to the BTF-resolved function provider information.

Returns

Status of the operation.

ebpf_store_update_global_helper_information()

ebpf_result_t ebpf_store_update_global_helper_information	(	_In_reads_(helper_info_count) ebpf_helper_function_prototype_t *	helper_info,
		uint32_t	helper_info_count
	)

Update global helper information in the eBPF store.

Parameters

[in]	helper_info	Pointer to an array of helper function prototypes.
[in]	helper_info_count	Count of helper function prototypes.

Returns

Status of the operation.

ebpf_store_update_program_information_array()

ebpf_result_t ebpf_store_update_program_information_array	(	_In_reads_(program_info_count) const ebpf_program_info_t *	program_info,
		uint32_t	program_info_count
	)

Update program information in the eBPF store.

Parameters

[in]	program_info	Pointer to an array of program information.
[in]	program_info_count	Count of program information entries.

Returns

Status of the operation.

ebpf_store_update_section_information()

ebpf_result_t ebpf_store_update_section_information	(	_In_reads_(section_info_count) const ebpf_program_section_info_t *	section_info,
		uint32_t	section_info_count
	)

Update section information in the eBPF store.

Parameters

[in]	section_info	Pointer to an array of section information.
[in]	section_info_count	Count of section information entries.

Returns

Status of the operation.

Variable Documentation

ebpf_store_hkcu_root_key

ebpf_store_key_t ebpf_store_hkcu_root_key

extern

ebpf_store_hklm_root_key

ebpf_store_key_t ebpf_store_hklm_root_key

extern

ebpf_store_root_sub_key

const wchar_t* ebpf_store_root_sub_key

extern