🚀 go-pugleaf

Hi,

I wish to read the "Application" or "Service" event log on a Windows XP Pro.
system using the following code:

// CODE START:

HANDLE hSystemEventLog = OpenEventLog( NULL, "Application" );
//HANDLE hSystemEventLog = OpenEventLog( NULL, "System" );
//HANDLE hSystemEventLog = OpenEventLog( NULL, "Service Control Manager" );

if ( hSystemEventLog != NULL )
{
  EVENTLOGRECORD CurrentEventLogRecord = {0};
  DWORD dwBytesRead = 0;
  DWORD dwBytesNeeded = 0;

  bool bSucceeded = ReadEventLog( hSystemEventLog,
                                  EVENTLOG_BACKWARDS_READ |
EVENTLOG_SEQUENTIAL_READ,
                                  0,
                                  &CurrentEventLogRecord,
                                  sizeof( CurrentEventLogRecord ),
                                  &dwBytesRead,
                                  &dwBytesNeeded );

  if ( bSucceeded == false )
  {
   showWindowsLastErrorMessage();
  }
  else
  {
   printf( "\nEvent ID: %d\n", CurrentEventLogRecord.EventID );
  }

  CloseEventLog( hSystemEventLog );
}

// CODE END.

When this code is executed, I get the following error:

 The data area passed to a system call is too small.

What's the problem with this code?

Thanks,

Stephane Lambert