---
name: "NtQueryEaFile"
section: "3w"
platform: "linux"
package: "libwine-dev"
version: "1.4.1-4"
release: "Debian 7 (Wheezy)"
platforms: ["linux"]
url: "https://new.carta.tech/NtQueryEaFile"
---

# NtQueryEaFile(3w)

## NAME

**NtQueryEaFile** (NTDLL.@)

## SYNOPSIS

NTSTATUS NtQueryEaFile\
  (\
   HANDLE           *hFile*,\
   PIO\_STATUS\_BLOCK *iosb*,\
   PVOID            *buffer*,\
   ULONG            *length*,\
   BOOLEAN          *single\_entry*,\
   PVOID            *ea\_list*,\
   ULONG            *ea\_list\_len*,\
   PULONG           *ea\_index*,\
   BOOLEAN          *restart*\
  )

## DESCRIPTION

Read extended attributes from **NTFS** files.

## PARAMS

*hFile* **\[In\]**  File handle, must be opened with **FILE\_READ\_EA** access.

*iosb* **\[Out\]**  Receives information about the operation on return.

*buffer* **\[Out\]**  Output *buffer*.

*length* **\[In\]**  Length of output *buffer*.

*single\_entry* **\[In\]**  Only read and return one entry.

*ea\_list* **\[In\]**  Optional list with names of EAs to return.

*ea\_list\_len* **\[In\]**  Length of *ea\_list* in bytes.

*ea\_index* **\[In\]**  Optional pointer to **1**-based index of attribute to return.

*restart* **\[In\]**  *restart* **EA** scan.

## RETURNS

**Success:** **0.** Atrributes read into *buffer*

**Failure:** An **NTSTATUS** error code describing the error.

## IMPLEMENTATION

Declared in **"winternl.h"**.

Implemented in **"dlls/ntdll/file.c"**.

Debug channel **"ntdll"**.