FltSetEaFile - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
// fltkernel.h

NTSTATUS FLTAPI FltSetEaFile(
  [in] PFLT_INSTANCE Instance,
  [in] PFILE_OBJECT  FileObject,
  [in] PVOID         EaBuffer,
  [in] ULONG         Length
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (nf-fltkernel-fltseteafile)

FltSetEaFile function

Description

FltSetEaFile sets extended-attribute (EA) values for a file.

Parameters

Instance [in]

Opaque instance pointer for the minifilter driver instance that the SetEa operation is to be sent to. The instance must be attached to the volume where the file resides.

FileObject [in]

File object pointer for the file.

EaBuffer [in]

Pointer to a caller-supplied, FILE_FULL_EA_INFORMATION-structured input buffer that contains the extended attribute (EA) values to be set.

Length [in]

Length, in bytes, of the buffer that the EaBuffer parameter points to.

Return value

FltSetEaFile returns STATUS_SUCCESS or an appropriate NTSTATUS value such as the following:

Return code Description
STATUS_FLT_DELETING_OBJECT The instance or volume is being torn down. This is an error code.

See also

FILE_FULL_EA_INFORMATION

FltQueryEaFile

IoCheckEaBufferValidity

View the official Windows Driver Kit DDI reference

Edit description on GitHub