1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
/*
* The Sleuth Kit
*
* Brian Carrier [carrier <at> sleuthkit [dot] org]
* Copyright (c) 2019-2020 Brian Carrier. All Rights reserved
* Copyright (c) 2018-2019 BlackBag Technologies. All Rights reserved
*
* This software is distributed under the Common Public License 1.0
*/
#include "../libtsk.h"
#include "pool_compat.hpp"
#include "tsk_pool.hpp"
// Forward Declarations
extern "C" TSK_FS_ATTR_RUN *tsk_fs_attr_run_alloc();
ssize_t tsk_pool_read(TSK_POOL_INFO *a_pool, TSK_OFF_T a_off, char *a_buf,
size_t a_len) {
const auto pool = static_cast<TSKPool *>(a_pool->impl);
return pool->read(a_off, a_buf, a_len);
}
TSK_FS_ATTR_RUN *tsk_pool_unallocated_runs(const TSK_POOL_INFO *a_pool) {
const auto pool = static_cast<TSKPool *>(a_pool->impl);
const auto ranges = pool->unallocated_ranges();
TSK_FS_ATTR_RUN *data_run_head = nullptr;
TSK_FS_ATTR_RUN *data_run_last = nullptr;
TSK_DADDR_T offset = 0;
// Create the runs
for (const auto &range : ranges) {
auto data_run = tsk_fs_attr_run_alloc();
if (data_run == nullptr) {
tsk_fs_attr_run_free(data_run_head);
return nullptr;
}
data_run->addr = range.start_block;
data_run->offset = offset;
data_run->len = range.num_blocks;
data_run->flags = TSK_FS_ATTR_RUN_FLAG_NONE;
data_run->next = nullptr;
offset += range.num_blocks;
if (data_run_head == nullptr) {
data_run_head = data_run;
} else {
data_run_last->next = data_run;
}
data_run_last = data_run;
}
return data_run_head;
}
|
