Geoff Chappell, Software Analyst
The public symbol file NTKRPAMP.PDB for the original release of Windows 10 tells that the kernel is built with the WHEADEF.H header at
and draws from it the type definitions that are tabulated below.
Nowadays, WHEADEF.H is among the headers in the Software Development Kit (SDK) for Windows 10. It is there in the “um” subdirectory with many other headers that are intended only for user-mode programming. It dates from Windows 7, again in the SDK. WHEADEF.H seems never to have been supplied with a Windows Driver Kit (WDK) except in bundles with the SDK. All its significant content is anyway duplicated in NTDDK.H and in NTOSP.H, but no sign is known of how this happens. NTDDK.H is, of course, a standard header for kernel-mode programming, but the kernel’s own source code does not include it. Whether the kernel includes WHEADEF.H directly or through some other header is not known.
In the table, the line numbers on the left are from WHEADEF.H, both as known from the symbol file and from the header as supplied with the SDK for the original release of Windows 10. The line numbers on the right are from the NTDDK.H and NTOSP.H in the contemporaneous WDK.
|173||unnamed union for u in _WHEA_NOTIFICATION_DESCRIPTOR||14297||49214|
|174||unnamed struct for Polled in u in _WHEA_NOTIFICATION_DESCRIPTOR||14298||49215|
|178||unnamed struct for Interrupt in u in _WHEA_NOTIFICATION_DESCRIPTOR||14302||49219|
|187||unnamed struct for LocalInterrupt in u in _WHEA_NOTIFICATION_DESCRIPTOR||14311||49228|
|196||unnamed struct for Sci in u in _WHEA_NOTIFICATION_DESCRIPTOR||14320||49237|
|205||unnamed struct for Nmi in u in _WHEA_NOTIFICATION_DESCRIPTOR||14329||49246|
|267||unnamed union for u in _WHEA_PCI_SLOT_NUMBER||14391||49308|
|268||unnamed struct for bits in u in _WHEA_PCI_SLOT_NUMBER||14392||49309|
|442||unnamed union for Info in _WHEA_ERROR_SOURCE_DESCRIPTOR||14566||49483|
For the record, lines 26 to 470 inclusive of the 475-line WHEADEF.H are duplicated as lines 14150 to 14594 of NTDDK.H and 49067 to 49511 of NTOSP.H.