The Sleuth Kit  4.11.0
Functions
fatfs_dent.cpp File Reference

Contains the internal TSK FAT file name processing code. More...

#include "tsk_fs_i.h"
#include "tsk_fatxxfs.h"
#include "tsk_exfatfs.h"
#include "tsk_fatfs.h"
#include <map>

Functions

uint8_t fatfs_dir_buf_add (FATFS_INFO *fatfs, TSK_INUM_T par_inum, TSK_INUM_T dir_inum)
 Adds an entry to the parent directory map. More...
 
void fatfs_dir_buf_free (FATFS_INFO *fatfs)
 Frees the memory associated with the parent map.
 
uint8_t fatfs_dir_buf_get (FATFS_INFO *fatfs, TSK_INUM_T dir_inum, TSK_INUM_T *par_inum)
 Looks up the parent meta address for a child from the cached list. More...
 
TSK_RETVAL_ENUM fatfs_dir_open_meta (TSK_FS_INFO *a_fs, TSK_FS_DIR **a_fs_dir, TSK_INUM_T a_addr, int recursion_depth)
 
TSK_WALK_RET_ENUM fatfs_find_parent_act (TSK_FS_FILE *fs_file, const char *, void *ptr)
 
int fatfs_name_cmp (TSK_FS_INFO *, const char *s1, const char *s2)
 

Detailed Description

Contains the internal TSK FAT file name processing code.

Function Documentation

uint8_t fatfs_dir_buf_add ( FATFS_INFO fatfs,
TSK_INUM_T  par_inum,
TSK_INUM_T  dir_inum 
)

Adds an entry to the parent directory map.

Used to make further processing faster.

Parameters
fatfsFile system
par_inumParent folder meta data address.
dir_inumSub-folder meta data address.
Returns
0

Referenced by fatxxfs_dent_parse_buf().

uint8_t fatfs_dir_buf_get ( FATFS_INFO fatfs,
TSK_INUM_T  dir_inum,
TSK_INUM_T par_inum 
)

Looks up the parent meta address for a child from the cached list.

Parameters
fatfsFile system
dir_inumInode of sub-directory to look up
par_inum[out] Result of lookup
Returns
0 if found and 1 if not.

Referenced by fatxxfs_dent_parse_buf().


Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.