Source code of Windows XP (NT5)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

311 lines
7.3 KiB

/*++
Copyright (c) 1993-2001 Microsoft Corporation
Module Name:
eventlog.cpp
Abstract:
This file contains all functions that access the application event log.
Author:
Wesley Witt (wesw) 1-May-1993
Environment:
User Mode
--*/
#include "pch.cpp"
_TCHAR * AddString( _TCHAR *p, _TCHAR *s );
_TCHAR * AddNumber( _TCHAR *p, _TCHAR *f, DWORD dwNumber );
_TCHAR * AddAddr( _TCHAR *p, _TCHAR *f, ULONG_PTR dwNumber );
_TCHAR * GetADDR( ULONG_PTR *ppvData, _TCHAR *p );
_TCHAR * GetDWORD( PDWORD pdwData, _TCHAR *p );
_TCHAR * GetWORD( PWORD pwData, _TCHAR *p );
_TCHAR * GetString( _TCHAR *s, _TCHAR *p, DWORD size );
BOOL
ElClearAllEvents(
void
)
{
HANDLE hEventLog;
_TCHAR szAppName[MAX_PATH];
GetAppName( szAppName, sizeof(szAppName) / sizeof(_TCHAR) );
hEventLog = OpenEventLog( NULL, szAppName );
Assert( hEventLog != NULL );
ClearEventLog( hEventLog, NULL );
CloseEventLog( hEventLog );
RegSetNumCrashes(0);
return TRUE;
}
BOOL
ElEnumCrashes(
PCRASHINFO crashInfo,
CRASHESENUMPROC lpEnumFunc
)
{
_TCHAR *p;
HANDLE hEventLog;
_TCHAR *szEvBuf;
EVENTLOGRECORD *pevlr;
DWORD dwRead;
DWORD dwNeeded;
DWORD dwBufSize = 4096 * sizeof(_TCHAR);
BOOL rc;
BOOL ec;
_TCHAR szAppName[MAX_PATH];
GetAppName( szAppName, sizeof(szAppName) / sizeof(_TCHAR) );
hEventLog = OpenEventLog( NULL, szAppName );
if (hEventLog == NULL) {
return FALSE;
}
szEvBuf = (_TCHAR *) calloc( dwBufSize, sizeof(_TCHAR) );
if (szEvBuf == NULL) {
return FALSE;
}
while (TRUE) {
try_again:
rc = ReadEventLog(hEventLog,
EVENTLOG_FORWARDS_READ | EVENTLOG_SEQUENTIAL_READ,
0,
(EVENTLOGRECORD *) szEvBuf,
dwBufSize,
&dwRead,
&dwNeeded);
if (!rc) {
ec = GetLastError();
if (ec != ERROR_INSUFFICIENT_BUFFER) {
goto exit;
}
free( szEvBuf );
dwBufSize = dwNeeded + 1024;
szEvBuf = (_TCHAR *) calloc( dwBufSize, sizeof(_TCHAR) );
if (szEvBuf == NULL) {
return FALSE;
}
goto try_again;
}
if (dwRead == 0) {
break;
}
GetAppName( szAppName, sizeof(szAppName) );
p = szEvBuf;
do {
pevlr = (EVENTLOGRECORD *) p;
p = (PWSTR) ( (PBYTE)p + sizeof(EVENTLOGRECORD));
if (!_tcscmp( p, szAppName)) {
p = (PWSTR) ( (PBYTE)pevlr + pevlr->StringOffset );
p = GetString( crashInfo->crash.szAppName, p,
sizeof(crashInfo->crash.szAppName) / sizeof(crashInfo->crash.szAppName[0]) );
p = GetWORD ( &crashInfo->crash.time.wMonth, p );
p = GetWORD ( &crashInfo->crash.time.wDay, p );
p = GetWORD ( &crashInfo->crash.time.wYear, p );
p = GetWORD ( &crashInfo->crash.time.wHour, p );
p = GetWORD ( &crashInfo->crash.time.wMinute, p );
p = GetWORD ( &crashInfo->crash.time.wSecond, p );
p = GetWORD ( &crashInfo->crash.time.wMilliseconds, p );
p = GetDWORD ( &crashInfo->crash.dwExceptionCode, p );
p = GetADDR ( &crashInfo->crash.dwAddress, p );
p = GetString( crashInfo->crash.szFunction, p,
sizeof(crashInfo->crash.szFunction) / sizeof(crashInfo->crash.szFunction[0]) );
p = (_TCHAR *) (pevlr + 1);
crashInfo->dwCrashDataSize = pevlr->DataLength;
crashInfo->pCrashData = (PBYTE) ((DWORD_PTR)pevlr + pevlr->DataOffset);
if (!lpEnumFunc( crashInfo )) {
goto exit;
}
}
//
// update the pointer & read count
//
if (dwRead <= pevlr->Length) {
// Set it to 0 so that we don't wrap around
dwRead = 0;
} else {
dwRead -= pevlr->Length;
}
p = (_TCHAR *) ((DWORD_PTR)pevlr + pevlr->Length);
} while ( dwRead > 0 );
}
exit:
free( szEvBuf );
CloseEventLog( hEventLog );
return TRUE;
}
BOOL
ElSaveCrash(
PCRASHES crash,
DWORD dwMaxCrashes
)
{
_TCHAR szStrings[4096] = {0};
PTSTR p = szStrings;
HANDLE hEventSrc;
PTSTR pp[20] = {0};
_TCHAR *pLogFileData;
DWORD dwLogFileDataSize;
_TCHAR szAppName[MAX_PATH];
if (dwMaxCrashes > 0) {
if (RegGetNumCrashes() >= dwMaxCrashes) {
return FALSE;
}
}
RegSetNumCrashes( RegGetNumCrashes()+1 );
p = AddString( pp[0] = p, crash->szAppName );
p = AddNumber( pp[1] = p, _T("%02d"), crash->time.wMonth );
p = AddNumber( pp[2] = p, _T("%02d"), crash->time.wDay );
p = AddNumber( pp[3] = p, _T("%4d"), crash->time.wYear );
p = AddNumber( pp[4] = p, _T("%02d"), crash->time.wHour );
p = AddNumber( pp[5] = p, _T("%02d"), crash->time.wMinute );
p = AddNumber( pp[6] = p, _T("%02d"), crash->time.wSecond );
p = AddNumber( pp[7] = p, _T("%03d"), crash->time.wMilliseconds );
p = AddNumber( pp[8] = p, _T("%08x"), crash->dwExceptionCode );
p = AddAddr ( pp[9] = p, _T("%p"), crash->dwAddress );
p = AddString( pp[10] = p, crash->szFunction );
GetAppName( szAppName, sizeof(szAppName) / sizeof(_TCHAR) );
hEventSrc = RegisterEventSource( NULL, szAppName );
if (hEventSrc == NULL) {
return FALSE;
}
pLogFileData = GetLogFileData( &dwLogFileDataSize );
ReportEvent( hEventSrc,
EVENTLOG_INFORMATION_TYPE,
0,
MSG_CRASH,
NULL,
11,
dwLogFileDataSize,
(PCTSTR*)pp,
pLogFileData
);
DeregisterEventSource( hEventSrc );
free( pLogFileData );
return TRUE;
}
_TCHAR *
AddString(
_TCHAR *p,
_TCHAR *s
)
{
_tcscpy( p, s );
p += (_tcslen(s) + 1);
return p;
}
_TCHAR *
AddNumber(
_TCHAR *p,
_TCHAR *f,
DWORD dwNumber
)
{
_TCHAR buf[20];
_stprintf( buf, f, dwNumber );
return AddString( p, buf );
}
_TCHAR *
AddAddr(
_TCHAR *p,
_TCHAR *f,
DWORD_PTR dwNumber
)
{
_TCHAR buf[20];
_stprintf( buf, f, dwNumber );
return AddString( p, buf );
}
_TCHAR *
GetString(
_TCHAR *s,
_TCHAR *p,
DWORD size
)
{
_tcsncpy( s, p, size );
return p + _tcslen(p) + 1;
}
_TCHAR *
GetDWORD(
PDWORD pdwData,
_TCHAR *p
)
{
_stscanf( p, _T("%x"), pdwData );
return p + _tcslen(p) + 1;
}
_TCHAR *
GetADDR(
ULONG_PTR *pAddrData,
_TCHAR *p
)
{
_stscanf( p, _T("%p"), pAddrData );
return p + _tcslen(p) + 1;
}
_TCHAR *
GetWORD(
PWORD pwData,
_TCHAR *p
)
{
*pwData = (WORD)_ttoi( p );
return p + _tcslen(p) + 1;
}