tab is a pointer to a PerlIO_funcs struct, a method lookup table. (Search for PERLIO_FUNCS_DECL, the core ones being in perlio.c.) Each PerlIO layer has one. You can get the handle's layers using PerlIO::get_layers($fh).

>perl -le"print for PerlIO::get_layers(STDIN)"
unix
crlf
[download]