/* FUNCTIONS ****************************************************************/
-BOOL LogfInitializeNew(PLOGFILE LogFile)
+static NTSTATUS
+LogfInitializeNew(PLOGFILE LogFile)
{
DWORD dwWritten;
EVENTLOGEOF EofRec;
NULL))
{
DPRINT1("WriteFile failed:%d!\n", GetLastError());
- return FALSE;
+ return STATUS_UNSUCCESSFUL;
}
EofRec.Ones = 0x11111111;
NULL))
{
DPRINT1("WriteFile failed:%d!\n", GetLastError());
- return FALSE;
+ return STATUS_UNSUCCESSFUL;
}
if (!FlushFileBuffers(LogFile->hFile))
{
DPRINT1("FlushFileBuffers failed:%d!\n", GetLastError());
- return FALSE;
+ return STATUS_UNSUCCESSFUL;
}
- return TRUE;
+ return STATUS_SUCCESS;
}
-BOOL LogfInitializeExisting(PLOGFILE LogFile)
+
+static NTSTATUS
+LogfInitializeExisting(PLOGFILE LogFile)
{
DWORD dwRead;
DWORD dwRecordsNumber = 0;
INVALID_SET_FILE_POINTER)
{
DPRINT1("SetFilePointer failed! %d\n", GetLastError());
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
if (!ReadFile(LogFile->hFile,
NULL))
{
DPRINT1("ReadFile failed! %d\n", GetLastError());
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
if (dwRead != sizeof(EVENTLOGHEADER))
{
DPRINT("EventLog: Invalid file %S.\n", LogFile->FileName);
- return LogfInitializeNew(LogFile);
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
if (LogFile->Header.HeaderSize != sizeof(EVENTLOGHEADER) ||
LogFile->Header.EndHeaderSize != sizeof(EVENTLOGHEADER))
{
DPRINT("EventLog: Invalid header size in %S.\n", LogFile->FileName);
- return LogfInitializeNew(LogFile);
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
if (LogFile->Header.Signature != LOGFILE_SIGNATURE)
{
DPRINT("EventLog: Invalid signature %x in %S.\n",
LogFile->Header.Signature, LogFile->FileName);
- return LogfInitializeNew(LogFile);
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
if (LogFile->Header.EndOffset > GetFileSize(LogFile->hFile, NULL) + 1)
{
DPRINT("EventLog: Invalid eof offset %x in %S.\n",
LogFile->Header.EndOffset, LogFile->FileName);
- return LogfInitializeNew(LogFile);
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
/* Set the read location to the oldest record */
if (dwFilePointer == INVALID_SET_FILE_POINTER)
{
DPRINT1("SetFilePointer failed! %d\n", GetLastError());
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
for (;;)
if (dwFilePointer == INVALID_SET_FILE_POINTER)
{
DPRINT1("SetFilePointer failed! %d\n", GetLastError());
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
/* If the EVENTLOGEOF info has been reached and the oldest record was not immediately after the Header */
NULL))
{
DPRINT1("ReadFile failed! %d\n", GetLastError());
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
if (dwRead != sizeof(dwRecSize))
NULL))
{
DPRINT1("ReadFile() failed! %d\n", GetLastError());
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
if (dwRead != sizeof(dwRecSize))
FILE_CURRENT) == INVALID_SET_FILE_POINTER)
{
DPRINT1("SetFilePointer() failed! %d", GetLastError());
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
RecBuf = (PEVENTLOGRECORD) HeapAlloc(MyHeap, 0, dwRecSize);
-
- if (!RecBuf)
+ if (RecBuf == NULL)
{
DPRINT1("Can't allocate heap!\n");
- return FALSE;
+ return STATUS_NO_MEMORY;
}
if (!ReadFile(LogFile->hFile, RecBuf, dwRecSize, &dwRead, NULL))
{
DPRINT1("ReadFile() failed! %d\n", GetLastError());
HeapFree(MyHeap, 0, RecBuf);
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
if (dwRead != dwRecSize)
{
DPRINT1("LogfAddOffsetInformation() failed!\n");
HeapFree(MyHeap, 0, RecBuf);
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
HeapFree(MyHeap, 0, RecBuf);
INVALID_SET_FILE_POINTER)
{
DPRINT1("SetFilePointer() failed! %d\n", GetLastError());
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
if (!WriteFile(LogFile->hFile,
NULL))
{
DPRINT1("WriteFile failed! %d\n", GetLastError());
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
if (!FlushFileBuffers(LogFile->hFile))
{
DPRINT1("FlushFileBuffers failed! %d\n", GetLastError());
- return FALSE;
+ return STATUS_EVENTLOG_FILE_CORRUPT;
}
- return TRUE;
+ return STATUS_SUCCESS;
}
OBJECT_ATTRIBUTES ObjectAttributes;
IO_STATUS_BLOCK IoStatusBlock;
PLOGFILE pLogFile;
- BOOL bResult, bCreateNew = FALSE;
+ BOOL bCreateNew = FALSE;
NTSTATUS Status = STATUS_SUCCESS;
pLogFile = (LOGFILE *) HeapAlloc(MyHeap, HEAP_ZERO_MEMORY, sizeof(LOGFILE));
pLogFile->Permanent = Permanent;
if (bCreateNew)
- bResult = LogfInitializeNew(pLogFile);
+ Status = LogfInitializeNew(pLogFile);
else
- bResult = LogfInitializeExisting(pLogFile);
+ Status = LogfInitializeExisting(pLogFile);
- if (!bResult)
- {
- Status = STATUS_UNSUCCESSFUL;
+ if (!NT_SUCCESS(Status))
goto fail;
- }
RtlInitializeResource(&pLogFile->Lock);
return Status;
}
+
VOID
LogfClose(PLOGFILE LogFile,
BOOL ForceClose)