Undocumented functions of NTDLL

2OO1, 25 January


Gridstore - NonStop Storage

NtQueryEaFile
NtQueryEaFile

NTSYSAPI 
NTSTATUS
NTAPI

NtQueryEaFile(


  IN HANDLE               FileHandle,
  OUT PIO_STATUS_BLOCK    IoStatusBlock,
  OUT PVOID               Buffer,
  IN ULONG                Length,
  IN BOOLEAN              ReturnSingleEntry,
  IN PVOID                EaList OPTIONAL,
  IN ULONG                EaListLength,
  IN PULONG               EaIndex OPTIONAL,
  IN BOOLEAN              RestartScan );



NtQueryEaFile is used to read EA from NTFS file. For more information about EA see FILE_FULL_EA_INFORMATION.
  • FileHandle
    •     HANDLE to File Object opened with FILE_READ_EA access.
  • IoStatusBlock
    •     IO result of call.
  • Buffer
    •     Caller's allocated buffer for output data. See FILE_FULL_EA_INFORMATION for detailed description of fields avaiable in buffer.
  • Length
    •     Length of buffer, in bytes.
  • ReturnSingleEntry
    •     If set, only one entry is returned.
  • EaList
    •     Optional list of FILE_GET_EA_INFORMATION structures containing names of EA.
  • EaListLength
    •     Length of EaList, in bytes.
  • EaIndex
    •     Pointer to ULONG value contains 1-based index of queried attribute.
  • RestartScan
    •     If set, result is the first quered EA.


    Documented by:
    Tomasz Nowak



    Requirements:
    Library: ntdll.lib


    See also:
    FILE_FULL_EA_INFORMATION
    FILE_GET_EA_INFORMATION
    NtCreateFile
    NtSetEaFile