microsoft / krabsetw

KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
Other
588 stars 147 forks source link

Fix parsing of boolean type #148

Closed starix closed 3 years ago

starix commented 3 years ago

Exception "Property size doesn't match requested size" rise if we try to query bool value from TDH_INTYPE_BOOLEAN field. Example of code: if (prop.type() == TDH_INTYPE_BOOLEAN) val = parser.parse<bool>(prop.name());

Note, if we try to query TDH_INTYPE_BOOLEAN as BOOL (or any other 4-byte type) function parse() rise another exception "Attempt to read property 'XXX' type BOOLEAN as INT32"

ghost commented 3 years ago

CLA assistant check
All CLA requirements met.