|
The Sleuth Kit
4.11.1
|
Created when a disk image has been opened and stores general information and handles. More...
#include <tsk_img.h>
Public Attributes | |
| char | cache [TSK_IMG_INFO_CACHE_NUM][TSK_IMG_INFO_CACHE_LEN] |
| read cache (r/w shared - lock) | |
| int | cache_age [TSK_IMG_INFO_CACHE_NUM] |
| "Age" of corresponding cache entry, higher means more recently used (r/w shared - lock) | |
| size_t | cache_len [TSK_IMG_INFO_CACHE_NUM] |
| Length of cache entry used (0 if never used) (r/w shared - lock) | |
| tsk_lock_t | cache_lock |
| Lock for cache and associated values. | |
| TSK_OFF_T | cache_off [TSK_IMG_INFO_CACHE_NUM] |
| starting byte offset of corresponding cache entry (r/w shared - lock) | |
| void(* | close )(TSK_IMG_INFO *) |
| TSK_TCHAR ** | images |
| Image names. | |
| void(* | imgstat )(TSK_IMG_INFO *, FILE *) |
| Pointer to file type specific function. | |
| TSK_IMG_TYPE_ENUM | itype |
| Type of disk image format. | |
| int | num_img |
| Number of image files. | |
| unsigned int | page_size |
| page size of NAND page in bytes (defaults to 2048) | |
| ssize_t(* | read )(TSK_IMG_INFO *img, TSK_OFF_T off, char *buf, size_t len) |
| unsigned int | sector_size |
| sector size of device in bytes (typically 512) | |
| TSK_OFF_T | size |
| Total size of image in bytes. | |
| unsigned int | spare_size |
| spare or OOB size of NAND in bytes (defaults to 64) | |
| uint32_t | tag |
| Set to TSK_IMG_INFO_TAG when struct is alloc. | |
Created when a disk image has been opened and stores general information and handles.
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.