Struct mft::attribute::header::MftAttributeHeader
source · pub struct MftAttributeHeader {
pub type_code: MftAttributeType,
pub record_length: u32,
pub form_code: u8,
pub residential_header: ResidentialHeader,
pub name_size: u8,
pub name_offset: Option<u16>,
pub data_flags: AttributeDataFlags,
pub instance: u16,
pub name: String,
}
Expand description
Represents the union defined in https://docs.microsoft.com/en-us/windows/desktop/devnotes/attribute-record-header
Fields§
§type_code: MftAttributeType
§record_length: u32
The size of the attribute record, in bytes. This value reflects the required size for the record variant and is always rounded to the nearest quadword boundary.
form_code: u8
If the FormCode member is RESIDENT_FORM (0x00), the union is a Resident structure. If FormCode is NONRESIDENT_FORM (0x01), the union is a Nonresident structure.
residential_header: ResidentialHeader
§name_size: u8
The size of the optional attribute name, in characters, or 0 if there is no attribute name. The maximum attribute name length is 255 characters.
name_offset: Option<u16>
The offset of the attribute name from the start of the attribute record, in bytes. If the NameLength member is 0, this member is undefined.
data_flags: AttributeDataFlags
§instance: u16
The unique instance for this attribute in the file record.
name: String
Implementations§
source§impl MftAttributeHeader
impl MftAttributeHeader
sourcepub fn from_stream<S: Read + Seek>(
stream: &mut S
) -> Result<Option<MftAttributeHeader>>
pub fn from_stream<S: Read + Seek>( stream: &mut S ) -> Result<Option<MftAttributeHeader>>
Tries to read an AttributeHeader from the stream.
Will return None
if the type code is $END.
Trait Implementations§
source§impl Clone for MftAttributeHeader
impl Clone for MftAttributeHeader
source§fn clone(&self) -> MftAttributeHeader
fn clone(&self) -> MftAttributeHeader
1.0.0 · source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source
. Read more