ZwQueryFullAttributesFile function (wdm.h)

Article
04/18/2022

The ZwQueryFullAttributesFile routine supplies network open information for the specified file.

Syntax

NTSYSAPI NTSTATUS ZwQueryFullAttributesFile(
  [in]  POBJECT_ATTRIBUTES             ObjectAttributes,
  [out] PFILE_NETWORK_OPEN_INFORMATION FileInformation
);

Parameters

[in] ObjectAttributes

A pointer to an OBJECT_ATTRIBUTES structure that supplies the attributes to be used for the file object.

[out] FileInformation

A pointer to a FILE_NETWORK_OPEN_INFORMATION structure that receives the returned file attributes information.

Return value

ZwQueryFullAttributesFile returns STATUS_SUCCESS on success, or the appropriate error status.

Remarks

Callers of ZwQueryFullAttributesFile must be running at IRQL = PASSIVE_LEVEL and with special kernel APCs enabled.

NtQueryFullAttributesFile and ZwQueryFullAttributesFile are two versions of the same Windows Native System Services routine. The NtQueryFullAttributesFile routine in the Windows kernel is not directly accessible to kernel-mode drivers. However, kernel-mode drivers can access this routine indirectly by calling the ZwQueryFullAttributesFile routine.

For calls from kernel-mode drivers, the NtXxx and ZwXxx versions of a Windows Native System Services routine can behave differently in the way that they handle and interpret input parameters. For more information about the relationship between the NtXxx and ZwXxx versions of a routine, see Using Nt and Zw Versions of the Native System Services Routines.

Requirements

Requirement	Value
Minimum supported client	Available starting with Windows XP.
Target Platform	Universal
Header	wdm.h (include Wdm.h, Ntddk.h, Ntifs.h)
Library	NtosKrnl.lib
DLL	NtosKrnl.exe
IRQL	PASSIVE_LEVEL (see Remarks section)
DDI compliance rules	HwStorPortProhibitedDDIs(storport), PowerIrpDDis(wdm)