NtQueryEaFile

2OO1, 25 January

NtQueryEaFile

NTSYSAPI 
NTSTATUS
NTAPI


NtQueryEaFile(



  IN HANDLE               FileHandle,
  OUT PIO_STATUS_BLOCK    IoStatusBlock,
  OUT PVOID               Buffer,
  IN ULONG                Length,
  IN BOOLEAN              ReturnSingleEntry,
  IN PVOID                EaList OPTIONAL,
  IN ULONG                EaListLength,
  IN PULONG               EaIndex OPTIONAL,
  IN BOOLEAN              RestartScan );

NtQueryEaFile is used to read EA from NTFS file. For more information about EA see FILE_FULL_EA_INFORMATION.

FileHandle HANDLE to File Object opened with FILE_READ_EA access.

IoStatusBlock IO result of call.

Buffer Caller's allocated buffer for output data. See FILE_FULL_EA_INFORMATION for detailed description of fields avaiable in buffer.

Length Length of buffer, in bytes.

ReturnSingleEntry If set, only one entry is returned.

EaList Optional list of FILE_GET_EA_INFORMATION structures containing names of EA.

EaListLength Length of EaList, in bytes.

EaIndex Pointer to ULONG value contains 1-based index of queried attribute.

RestartScan If set, result is the first quered EA.

Documented by:

Tomasz Nowak

Requirements:

Library: ntdll.lib

Undocumented functions of NTDLL