fs_attr.c File Reference

Functions to allocate and add structures to maintain generic file system attributes and run lists. More...

#include "tsk_fs_i.h"

Functions
uint8_t	tsk_fs_attr_add_run (TSK_FS_INFO *a_fs, TSK_FS_ATTR *a_fs_attr, TSK_FS_ATTR_RUN *a_data_run_new)
TSK_FS_ATTR *	tsk_fs_attr_alloc (TSK_FS_ATTR_FLAG_ENUM type)
void	tsk_fs_attr_append_run (TSK_FS_INFO *a_fs, TSK_FS_ATTR *a_fs_attr, TSK_FS_ATTR_RUN *a_data_run)
	Append a data run to the end of the attribute and update its offset value. More...
void	tsk_fs_attr_clear (TSK_FS_ATTR *a_fs_attr)
void	tsk_fs_attr_free (TSK_FS_ATTR *a_fs_attr)
uint8_t	tsk_fs_attr_print (const TSK_FS_ATTR *a_fs_attr, FILE *hFile)
ssize_t	tsk_fs_attr_read (const TSK_FS_ATTR *a_fs_attr, TSK_OFF_T a_offset, char *a_buf, size_t a_len, TSK_FS_FILE_READ_FLAG_ENUM a_flags)
	Read the contents of a given attribute using a typical read() type interface. More...
TSK_FS_ATTR_RUN *	tsk_fs_attr_run_alloc ()
void	tsk_fs_attr_run_free (TSK_FS_ATTR_RUN *fs_attr_run)
uint8_t	tsk_fs_attr_set_run (TSK_FS_FILE *a_fs_file, TSK_FS_ATTR *a_fs_attr, TSK_FS_ATTR_RUN *a_data_run_new, const char *name, TSK_FS_ATTR_TYPE_ENUM type, uint16_t id, TSK_OFF_T size, TSK_OFF_T init_size, TSK_OFF_T alloc_size, TSK_FS_ATTR_FLAG_ENUM flags, uint32_t compsize)
uint8_t	tsk_fs_attr_set_str (TSK_FS_FILE *a_fs_file, TSK_FS_ATTR *a_fs_attr, const char *name, TSK_FS_ATTR_TYPE_ENUM type, uint16_t id, void *res_data, size_t len)
uint8_t	tsk_fs_attr_walk (const TSK_FS_ATTR *a_fs_attr, TSK_FS_FILE_WALK_FLAG_ENUM a_flags, TSK_FS_FILE_WALK_CB a_action, void *a_ptr)
	Process an attribute and call a callback function with its contents. More...

Detailed Description

Functions to allocate and add structures to maintain generic file system attributes and run lists.

Function Documentation

void tsk_fs_attr_append_run	(	TSK_FS_INFO *	a_fs,
		TSK_FS_ATTR *	a_fs_attr,
		TSK_FS_ATTR_RUN *	a_data_run
	)

Append a data run to the end of the attribute and update its offset value.

This ignores the offset in the data run and blindly appends.

Parameters

a_fs	File system run is from
a_fs_attr	Data attribute to append to
a_data_run	Data run to append.

References TSK_FS_ATTR_RUN::len, TSK_FS_ATTR_RUN::next, TSK_FS_ATTR::nrd, TSK_FS_ATTR_RUN::offset, TSK_FS_ATTR::run, and TSK_FS_ATTR::run_end.