UnallocRun Class Reference

Stores information that can map a region in the original disk image to a region in one of the chunks of unallocated space (as created by the CarvePrep implementation. More...

#include <UnallocRun.h>

Public Member Functions
uint64_t	getAllocStart () const
uint64_t	getLength () const
int	getUnallocImgId () const
uint64_t	getUnallocStart () const
int	getVolId () const
	UnallocRun (int a_volId, int a_unallocImgId, uint64_t a_unallocStart, uint64_t a_length, uint64_t a_allocStart)
	Stores mapping between the unallocated images that are used for carving and the original images. More...

Detailed Description

Stores information that can map a region in the original disk image to a region in one of the chunks of unallocated space (as created by the CarvePrep implementation.

Constructor & Destructor Documentation

UnallocRun::UnallocRun	(	int	a_volId,
		int	a_unallocImgId,
		uint64_t	a_unallocStart,
		uint64_t	a_length,
		uint64_t	a_allocStart
	)

Stores mapping between the unallocated images that are used for carving and the original images.

Parameters

a_volId	Volume ID in original image that sector run is located in.
a_unallocImgId	ID of the unallocated image
a_unallocStart	Starting sector in unallocated image
a_length	Number of sectors in run
a_allocStart	Starting sector in original image

---

The documentation for this class was generated from the following files:

• framework/tsk/framework/utilities/UnallocRun.h
• framework/tsk/framework/utilities/UnallocRun.cpp