Struct mft::attribute::header::MftAttributeHeader [−][src]
pub struct MftAttributeHeader {
pub type_code: MftAttributeType,
pub record_length: u32,
pub form_code: u8,
pub residential_header: ResidentialHeader,
pub name_size: u8,
pub name_offset: Option<u16>,
pub data_flags: AttributeDataFlags,
pub instance: u16,
pub name: String,
}
Expand description
Represents the union defined in https://docs.microsoft.com/en-us/windows/desktop/devnotes/attribute-record-header
Fields
type_code: MftAttributeType
record_length: u32
The size of the attribute record, in bytes. This value reflects the required size for the record variant and is always rounded to the nearest quadword boundary.
form_code: u8
If the FormCode member is RESIDENT_FORM (0x00), the union is a Resident structure. If FormCode is NONRESIDENT_FORM (0x01), the union is a Nonresident structure.
residential_header: ResidentialHeader
name_size: u8
The size of the optional attribute name, in characters, or 0 if there is no attribute name. The maximum attribute name length is 255 characters.
name_offset: Option<u16>
The offset of the attribute name from the start of the attribute record, in bytes. If the NameLength member is 0, this member is undefined.
data_flags: AttributeDataFlags
instance: u16
The unique instance for this attribute in the file record.
name: String
Implementations
Tries to read an AttributeHeader from the stream.
Will return None
if the type code is $END.
Trait Implementations
Auto Trait Implementations
impl RefUnwindSafe for MftAttributeHeader
impl Send for MftAttributeHeader
impl Sync for MftAttributeHeader
impl Unpin for MftAttributeHeader
impl UnwindSafe for MftAttributeHeader
Blanket Implementations
Mutably borrows from an owned value. Read more