Source code of Windows XP (NT5)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

194 lines
3.9 KiB

/*++
Copyright (c) 1998 Microsoft Corporation
Module Name:
eventlog.cpp
Abstract:
SIS Groveler eventlog interface
Authors:
John Douceur, 1998
Environment:
User Mode
Revision History:
--*/
#include "all.hxx"
#ifndef MIN_MESSAGE_SEVERITY
#define MIN_MESSAGE_SEVERITY 0
#endif
const _TCHAR *
EventLog::service_name = _T("Groveler");
const _TCHAR *
EventLog::message_filename = _T("%SystemRoot%\\System32\\grovmsg.dll");
static const _TCHAR *
registry_log_path =
_T("SYSTEM\\CurrentControlSet\\Services\\EventLog\\Application\\");
const DWORD
EventLog::types_supported =
EVENTLOG_INFORMATION_TYPE |
EVENTLOG_WARNING_TYPE |
EVENTLOG_ERROR_TYPE;
EventLog::EventLog()
{
ASSERT(this != 0);
setup_registry();
event_source_handle = RegisterEventSource(0, service_name);
if (event_source_handle == 0)
{
DWORD err = GetLastError();
PRINT_DEBUG_MSG((_T("GROVELER: RegisterEventSource() failed with error %d\n"),
err));
}
}
EventLog::~EventLog()
{
ASSERT(this != 0);
if (event_source_handle != 0)
{
int ok = DeregisterEventSource(event_source_handle);
if (!ok)
{
DWORD err = GetLastError();
PRINT_DEBUG_MSG((_T("GROVELER: DeregisterEventSource() failed with error %d\n"),
err));
}
}
}
bool
EventLog::report_event(
DWORD event_id,
int string_count,
// _TCHAR *string
...)
{
ASSERT(this != 0);
ASSERT(event_source_handle != 0);
ASSERT(string_count >= 0);
if (event_source_handle == 0)
{
return false;
}
DWORD message_severity = MESSAGE_SEVERITY(event_id);
if (message_severity < MIN_MESSAGE_SEVERITY)
{
return false;
}
const _TCHAR **strings = 0;
if (string_count > 0)
{
strings = new const _TCHAR *[string_count];
va_list ap;
va_start(ap, string_count);
for (int index = 0; index < string_count; index++)
{
strings[index] = va_arg(ap, _TCHAR *);
ASSERT(strings[index] != 0);
}
va_end(ap);
}
WORD event_type = 0;
switch (message_severity)
{
case MESSAGE_SEVERITY_SUCCESS:
event_type = EVENTLOG_AUDIT_SUCCESS;
break;
case MESSAGE_SEVERITY_INFORMATIONAL:
event_type = EVENTLOG_INFORMATION_TYPE;
break;
case MESSAGE_SEVERITY_WARNING:
event_type = EVENTLOG_WARNING_TYPE;
break;
case MESSAGE_SEVERITY_ERROR:
event_type = EVENTLOG_ERROR_TYPE;
break;
default:
ASSERT(false);
}
BOOL ok = ReportEvent(event_source_handle, event_type, 0, event_id,
0, (WORD)string_count, 0, strings, 0);
if (!ok)
{
DWORD err = GetLastError();
PRINT_DEBUG_MSG((_T("GROVELER: ReportEvent() failed with error %d\n"), err));
}
if (strings != 0)
{
ASSERT(string_count > 0);
delete[] strings;
strings = 0;
}
return (ok != 0);
}
bool
EventLog::setup_registry()
{
_TCHAR *log_path = 0;
try
{
HKEY path_key = 0;
DWORD disp;
log_path =
new _TCHAR[_tcslen(registry_log_path) + _tcslen(service_name) + 1];
_stprintf(log_path, _T("%s%s"), registry_log_path, service_name);
Registry::create_key_ex(HKEY_LOCAL_MACHINE, log_path, 0, 0,
REG_OPTION_NON_VOLATILE, KEY_ALL_ACCESS, 0, &path_key, &disp);
ASSERT(log_path != 0);
delete[] log_path;
log_path = 0;
try
{
Registry::set_value_ex(path_key, _T("EventMessageFile"), 0,
REG_EXPAND_SZ, (BYTE *)message_filename,
(_tcslen(message_filename) + 1) * sizeof(_TCHAR));
Registry::set_value_ex(path_key, _T("TypesSupported"), 0,
REG_DWORD, (BYTE *)&types_supported, sizeof(DWORD));
}
catch (DWORD result)
{
ASSERT(result != ERROR_SUCCESS);
PRINT_DEBUG_MSG((_T("GROVELER: Registry::set_value_ex() failed with error %d\n"),
result));
ASSERT(path_key != 0);
Registry::close_key(path_key);
path_key = 0;
return false;
}
ASSERT(path_key != 0);
Registry::close_key(path_key);
path_key = 0;
}
catch (DWORD result)
{
if (log_path != 0)
{
delete[] log_path;
log_path = 0;
}
ASSERT(result != ERROR_SUCCESS);
PRINT_DEBUG_MSG((_T("GROVELER: Registry::create_key_ex() or Registry::close_key() ")
_T("failed with error %d\n"), result));
return false;
}
return true;
}