FltQueryEaFile function

Download EaseFilter Filter Driver SDK Setup File
Download EaseFilter Filter Driver SDK Zip File

NTSTATUS FLTAPI FltQueryEaFile(
  PFLT_INSTANCE Instance,
  PFILE_OBJECT  FileObject,
  PVOID         ReturnedEaData,
  ULONG         Length,
  BOOLEAN       ReturnSingleEntry,
  PVOID         EaList,
  ULONG         EaListLength,
  PULONG        EaIndex,
  BOOLEAN       RestartScan,
  PULONG        LengthReturned
);

Parameters

Instance

Opaque instance pointer for the minifilter driver instance that the QueryEa operation is to be sent to. The instance must be attached to the volume where the file resides.

FileObject

File object pointer for the file.

ReturnedEaData

Pointer to a caller-supplied FILE_FULL_EA_INFORMATION-structured input buffer where the extended attribute values are to be returned.

Length

Length, in bytes, of the buffer that the ReturnedEaData parameter points to.

ReturnSingleEntry

Set to TRUE if FltQueryEaFile should return only the first entry that is found.

EaList

Pointer to a caller-supplied FILE_GET_EA_INFORMATION-structured input buffer specifying the extended attributes to be queried. This parameter is optional and can be NULL.

EaListLength

Length, in bytes, of the buffer that the EaList parameter points to.

EaIndex

Index of the entry at which to begin scanning the file's extended-attribute list. This parameter is ignored if the EaList parameter points to a nonempty list. This parameter is optional and can be NULL.

RestartScan

Set to TRUE if FltQueryEaFile should begin the scan at the first entry in the file's extended-attribute list. If this parameter is not set to TRUE, the scan is resumed from a previous call to FltQueryEaFile.

LengthReturned

Pointer to a caller-allocated variable that receives the size, in bytes, of the information returned in the ReturnedEaData buffer. This parameter is optional and can be NULL.

Return value

FltQueryEaFile returns STATUS_SUCCESS or an appropriate NTSTATUS value such as the following:

Requirements