NtQueryEaFile3w
Usage
NTSTATUS NtQueryEaFile
(
HANDLE hFile,
PIO_STATUS_BLOCK iosb,
PVOID buffer,
ULONG length,
BOOLEAN single_entry,
PVOID ea_list,
ULONG ea_list_len,
PULONG ea_index,
BOOLEAN restart
)
Overview
Read extended attributes from NTFS files.
Params
hFile [In] File handle, must be opened with FILE_READ_EA access.
iosb [Out] Receives information about the operation on return.
buffer [Out] Output buffer.
length [In] Length of output buffer.
single_entry [In] Only read and return one entry.
ea_list [In] Optional list with names of EAs to return.
ea_list_len [In] Length of ea_list in bytes.
ea_index [In] Optional pointer to 1-based index of attribute to return.
restart [In] restart EA scan.
Returns
Success: 0. Atrributes read into buffer
Failure: An NTSTATUS error code describing the error.
Implementation
Declared in "winternl.h".
Implemented in "dlls/ntdll/file.c".
Debug channel "ntdll".