The Sleuth Kit
4.12.1
|
Contains the internal TSK Btrfs file system functions. More...
Macros | |
#define | BTRFS_CHECK_TREENODE_CSUM |
#define | btrfs_debug(format, ...) do { if (BTRFS_DEBUG_PRINT) tsk_fprintf(stderr, "[btrfs] " format, ##__VA_ARGS__); } while (0) |
#define | BTRFS_DEBUG_PRINT 0 |
#define | BTRFS_TREENODE_CACHE_SIZE 50 |
#define | BTRFS_TYPE2NAMETYPE_COUNT 8 |
#define | MIN(a, b) (((a)<(b))?(a):(b)) |
Functions | |
TSK_FS_INFO * | btrfs_open (TSK_IMG_INFO *img_info, TSK_OFF_T offset, TSK_FS_TYPE_ENUM ftype, [[maybe_unused]] const char *pass, uint8_t test) |
Tries to open a Btrfs filesystem. More... | |
Contains the internal TSK Btrfs file system functions.
TSK_FS_INFO* btrfs_open | ( | TSK_IMG_INFO * | img_info, |
TSK_OFF_T | offset, | ||
TSK_FS_TYPE_ENUM | ftype, | ||
[[maybe_unused] ] const char * | pass, | ||
uint8_t | test | ||
) |
Tries to open a Btrfs filesystem.
img_info | image info |
offset | byte offset within image |
ftype | FS type |
pass | - ignored |
References TSK_FS_INFO::block_count, TSK_FS_INFO::block_size, TSK_FS_INFO::block_walk, TSK_FS_INFO::close, TSK_FS_INFO::dev_bsize, TSK_FS_INFO::duname, TSK_FS_INFO::endian, TSK_FS_INFO::first_block, TSK_FS_INFO::first_inum, TSK_FS_INFO::flags, TSK_FS_INFO::fs_id, TSK_FS_INFO::fs_id_used, TSK_FS_INFO::ftype, TSK_FS_INFO::img_info, TSK_FS_INFO::inode_walk, TSK_FS_INFO::inum_count, TSK_FS_INFO::istat, TSK_FS_INFO::last_block, TSK_FS_INFO::last_block_act, TSK_FS_INFO::last_inum, TSK_FS_INFO::offset, TSK_FS_INFO::root_inum, TSK_IMG_INFO::sector_size, TSK_IMG_INFO::size, tsk_error_errstr2_concat(), tsk_error_reset(), tsk_error_set_errstr2(), tsk_fprintf(), tsk_fs_block_walk(), tsk_fs_close(), TSK_FS_INFO_FLAG_HAVE_NANOSEC, tsk_fs_meta_walk(), TSK_FS_TYPE_ISBTRFS, and tsk_verbose.
Referenced by tsk_fs_open_img_decrypt().
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.