hfs.h File Reference


Detailed Description

Contains the structures and function APIs for HFS+ file system support.

Go to the source code of this file.

Data Structures

struct  hfs_uni_str
struct  hfs_access_perm
struct  hfs_file_perm
struct  hfs_ext_desc
struct  hfs_fork
struct  hfs_sb
struct  hfs_cat_key
struct  htsk_fs_inode_mode_struct
struct  hfs_btree_node
struct  hfs_btree_header_record
struct  hfs_point
struct  hfs_fileinfo
struct  hfs_extendedfileinfo
struct  hfs_folder
struct  hfs_file
struct  hfs_thread
struct  HFS_INFO
struct  hfs_journ_sb

Defines

#define HFS_MAGIC   0x4244
#define HFSPLUS_MAGIC   0x482b
#define HFS_SBOFF   1024
#define HFS_NDADDR   0001
#define HFS_NIADDR   0001
#define HFS_FIRST_USER_CNID   16
#define HFS_BTREE_LEAF_NODE   -1
#define HFS_BTREE_INDEX_NODE   0
#define HFS_BTREE_HEADER_NODE   1
#define HFS_BTREE_MAP_NODE   2
#define HFS_MAXNAMLEN   255
#define HFS_ROOT_INUM   2
#define HFS_FOLDER_RECORD   0x0001
#define HFS_FILE_RECORD   0X0002
#define HFS_FOLDER_THREAD   0x0003
#define HFS_FILE_THREAD   0x0004
#define NSEC_BTWN_1904_1970   (uint32_t) 2082844800U
#define HFS_BIT_VOLUME_UNMOUNTED   (uint32_t)(1 << 8)
#define HFS_BIT_VOLUME_INCONSISTENT   (uint32_t)(1 << 11)
#define HFS_BIT_VOLUME_JOURNALED   (uint32_t)(1 << 13)

Typedefs

typedef hfs_ext_desc hfs_ext_desc
typedef hfs_fork hfs_fork

Functions

uint8_t hfs_dent_walk (TSK_FS_INFO *, INUM_T, TSK_FS_DENT_FLAG_ENUM, TSK_FS_DENT_TYPE_WALK_CB, void *)
 Process the contents of a directory and pass each file name to a callback function.
uint8_t hfs_jopen (TSK_FS_INFO *, INUM_T)
uint8_t hfs_jblk_walk (TSK_FS_INFO *, DADDR_T, DADDR_T, int, TSK_FS_JBLK_WALK_CB, void *)
uint8_t hfs_jentry_walk (TSK_FS_INFO *, int, TSK_FS_JENTRY_WALK_CB, void *)


Function Documentation

uint8_t hfs_dent_walk ( TSK_FS_INFO fs,
INUM_T  inum,
TSK_FS_DENT_FLAG_ENUM  flags,
TSK_FS_DENT_TYPE_WALK_CB  action,
void *  ptr 
)

Process the contents of a directory and pass each file name to a callback function.

Parameters:
fs File system to analyze
inum Metadata address of directory to analyze
flags Flags used during analysis
action Callback function that is called for each file name
ptr Pointer to data that is passed to callback
Returns:
1 on error and 0 on success


Generated on Wed Nov 28 16:11:17 2007 for The Sleuth Kit (Incomplete) by  doxygen 1.5.1