EVENT_EXTENDED_ITEM_STACK_TRACE64 structure (evntcons.h)

Defines a call stack on a 64-bit computer.

Syntax

typedef struct _EVENT_EXTENDED_ITEM_STACK_TRACE64 {
  ULONG64 MatchId;
  ULONG64 Address[ANYSIZE_ARRAY];
} EVENT_EXTENDED_ITEM_STACK_TRACE64, *PEVENT_EXTENDED_ITEM_STACK_TRACE64;

Members

MatchId

A unique identifier that you use to match the kernel-mode calls to the user-mode calls; the kernel-mode calls and user-mode calls are captured in separate events if the environment prevents both from being captured in the same event. If the kernel-mode and user-mode calls were captured in the same event, the value is zero.

Address[ANYSIZE_ARRAY]

An array of call addresses on the stack.

Remarks

The DataSize member of EVENT_HEADER_EXTENDED_DATA_ITEM contains the size of this structure. To determine the number of addresses in the array, subtract sizeof(ULONG64) from DataSize and then divide by sizeof(ULONG64).

Requirements

See also

EVENT_HEADER_EXTENDED_DATA_ITEM