Undocumented functions of NTDLL

2OO1, 25 January



FILE_GET_EA_INFORMATION
FILE_GET_EA_INFORMATION

typedef struct _FILE_GET_EA_INFORMATION {


  ULONG                   NextEntryOffset;
  BYTE                    EaNameLength;
  CHAR                    EaName[1];


} FILE_GET_EA_INFORMATION, *PFILE_GET_EA_INFORMATION;



Structure FILE_GET_EA_INFORMATION is used in a call to NtQueryEaFile function. See FILE_FULL_EA_INFORMATION for detailed information about EA.
  • NextEntryOffset
    •     Relative offset for next FILE_GET_EA_INFORMATION structure in buffer.
  • EaNameLength
    •     Length of EA name, in bytes (without leading zero).
  • EaName[1]
    •     ASCIIZ name of EA, case insensitive.


    Documented by:
    Tomasz Nowak
    Bo Branten



    Requirements:
    Library: ntdll.lib


    See also:
    FILE_FULL_EA_INFORMATION
    NtQueryEaFile