The Sleuth Kit
4.11.0
|
Contains the internal TSK FAT file name processing code. More...
#include "tsk_fs_i.h"
#include "tsk_fatxxfs.h"
#include "tsk_exfatfs.h"
#include "tsk_fatfs.h"
#include <map>
Functions | |
uint8_t | fatfs_dir_buf_add (FATFS_INFO *fatfs, TSK_INUM_T par_inum, TSK_INUM_T dir_inum) |
Adds an entry to the parent directory map. More... | |
void | fatfs_dir_buf_free (FATFS_INFO *fatfs) |
Frees the memory associated with the parent map. | |
uint8_t | fatfs_dir_buf_get (FATFS_INFO *fatfs, TSK_INUM_T dir_inum, TSK_INUM_T *par_inum) |
Looks up the parent meta address for a child from the cached list. More... | |
TSK_RETVAL_ENUM | fatfs_dir_open_meta (TSK_FS_INFO *a_fs, TSK_FS_DIR **a_fs_dir, TSK_INUM_T a_addr, int recursion_depth) |
TSK_WALK_RET_ENUM | fatfs_find_parent_act (TSK_FS_FILE *fs_file, const char *, void *ptr) |
int | fatfs_name_cmp (TSK_FS_INFO *, const char *s1, const char *s2) |
Contains the internal TSK FAT file name processing code.
uint8_t fatfs_dir_buf_add | ( | FATFS_INFO * | fatfs, |
TSK_INUM_T | par_inum, | ||
TSK_INUM_T | dir_inum | ||
) |
Adds an entry to the parent directory map.
Used to make further processing faster.
fatfs | File system |
par_inum | Parent folder meta data address. |
dir_inum | Sub-folder meta data address. |
Referenced by fatxxfs_dent_parse_buf().
uint8_t fatfs_dir_buf_get | ( | FATFS_INFO * | fatfs, |
TSK_INUM_T | dir_inum, | ||
TSK_INUM_T * | par_inum | ||
) |
Looks up the parent meta address for a child from the cached list.
fatfs | File system |
dir_inum | Inode of sub-directory to look up |
par_inum | [out] Result of lookup |
Referenced by fatxxfs_dent_parse_buf().
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.