blob: 5a18abdce17b8144b86c2ca717bf2dce657b9d60 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
/*++
Copyright (c) 2011 Microsoft Corporation
Module Name:
scan.h
Abstract:
This module contains the scan interface for AV filter to call.
Environment:
Kernel mode
--*/
#ifndef __SCAN_H__
#define __SCAN_H__
#include "avlib.h"
typedef enum _AV_SCAN_MODE {
//
// AvKernelMode indicates the scanning occurs in the kernel, while
// AvUserMode indicates the scanning happens in the user space.
//
AvKernelMode,
AvUserMode
} AV_SCAN_MODE;
NTSTATUS
AvScanInKernel (
_In_ PCFLT_RELATED_OBJECTS FltObjects,
_In_ UCHAR IOMajorFunctionAtScan,
_In_ BOOLEAN IsInTxWriter,
_In_ PAV_STREAM_CONTEXT StreamContext
);
NTSTATUS
AvScanInUser (
_Inout_ PFLT_CALLBACK_DATA Data,
_In_ PCFLT_RELATED_OBJECTS FltObjects,
_In_ UCHAR IOMajorFunctionAtScan,
_In_ BOOLEAN IsInTxWriter,
_In_ DEVICE_TYPE DeviceType
);
NTSTATUS
AvCreateSectionForDataScan (
_In_ PFLT_INSTANCE Instance,
_In_ PFILE_OBJECT FileObject,
_Inout_ PAV_SECTION_CONTEXT SectionContext
);
NTSTATUS
AvCloseSectionForDataScan(
_Inout_ PAV_SECTION_CONTEXT SectionContext
);
#endif
|
