ebpf_store_helper.h

Go to the documentation of this file.

// Copyright (c) eBPF for Windows contributors
// SPDX-License-Identifier: MIT
 
#pragma once
 
#include "ebpf_program_types.h"
#include "ebpf_utilities.h"
#include "ebpf_windows.h"
 
#define GUID_STRING_LENGTH 38 // not including the null terminator.
 
#ifdef __cplusplus
extern "C"
{
#endif
 
    typedef HKEY ebpf_store_key_t;
 
    extern ebpf_store_key_t ebpf_store_hkcu_root_key;
    extern ebpf_store_key_t ebpf_store_hklm_root_key;
    extern const wchar_t* ebpf_store_root_sub_key;
 
    typedef struct _ebpf_btf_resolved_function_provider_info
    {
        ebpf_extension_header_t header;
        GUID module_guid;
        uint32_t btf_resolved_function_count;
        const ebpf_btf_resolved_function_prototype_t* btf_resolved_function_prototypes;
    } ebpf_btf_resolved_function_provider_info_t;
 
#define EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION 1
#define EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_SIZE \
    EBPF_SIZE_INCLUDING_FIELD(ebpf_btf_resolved_function_provider_info_t, btf_resolved_function_prototypes)
#define EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_TOTAL_SIZE \
    sizeof(ebpf_btf_resolved_function_provider_info_t)
#define EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_HEADER             \
    {EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION,      \
     EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_SIZE, \
     EBPF_BTF_RESOLVED_FUNCTION_PROVIDER_INFO_CURRENT_VERSION_TOTAL_SIZE}
 
    ebpf_result_t
    ebpf_store_update_global_helper_information(
        _In_reads_(helper_info_count) ebpf_helper_function_prototype_t* helper_info, uint32_t helper_info_count);
 
    ebpf_result_t
    ebpf_store_update_section_information(
        _In_reads_(section_info_count) const ebpf_program_section_info_t* section_info, uint32_t section_info_count);
 
    ebpf_result_t
    ebpf_store_update_program_information_array(
        _In_reads_(program_info_count) const ebpf_program_info_t* program_info, uint32_t program_info_count);
 
    ebpf_result_t
    ebpf_store_update_btf_resolved_function_provider_information(
        _In_ const ebpf_btf_resolved_function_provider_info_t* provider_info);
 
    ebpf_result_t
    ebpf_store_delete_btf_resolved_function_provider_information(
        _In_ const ebpf_btf_resolved_function_provider_info_t* provider_info);
 
    ebpf_result_t
    ebpf_store_delete_program_information(_In_ const ebpf_program_info_t* program_info);
 
    ebpf_result_t
    ebpf_store_delete_section_information(_In_ const ebpf_program_section_info_t* section_info);
 
#ifdef __cplusplus
}
#endif