search for: tsk_fs_meta_type_wht

Displaying 10 results from an estimated 10 matches for "tsk_fs_meta_type_wht".

2018 Feb 15
1
[PATCH] daemon: tsk: handle new enum values in sleuthkit 4.5
...: return 'u'; /* Temp files created by TSK */ +#endif } else if (fsfile->meta != NULL && fsfile->meta->type < TSK_FS_META_TYPE_STR_MAX) @@ -256,6 +259,9 @@ file_type (TSK_FS_FILE *fsfile) case TSK_FS_META_TYPE_SOCK: return 's'; case TSK_FS_META_TYPE_WHT: return 'w'; case TSK_FS_META_TYPE_VIRT: return 'u'; /* Temp files created by TSK */ +#if TSK_VERSION_NUM >= 0x040500ff + case TSK_FS_META_TYPE_VIRT_DIR: return 'u'; /* Temp files created by TSK */ +#endif } return 'u'; -- 2.14.3
2016 Apr 05
0
[PATCH v3 3/5] daemon: Added internal_filesystem_walk command
...E_FIFO: return 'f'; + case TSK_FS_META_TYPE_CHR: return 'c'; + case TSK_FS_META_TYPE_BLK: return 'b'; + case TSK_FS_META_TYPE_LNK: return 'l'; + case TSK_FS_META_TYPE_SHAD: return 'h'; + case TSK_FS_META_TYPE_SOCK: return 's'; + case TSK_FS_META_TYPE_WHT: return 'w'; + case TSK_FS_META_TYPE_VIRT: return 'u'; /* Temp files created by TSK */ + default: return 'u'; + } + else + return 'u'; +} + +/* Serialise dirent into XDR stream and send it to the appliance. + * Return 0 on success, -1 on error. + */ +st...
2016 Jun 13
0
[PATCH v8 1/3] New API: internal_filesystem_walk
...E_FIFO: return 'f'; + case TSK_FS_META_TYPE_CHR: return 'c'; + case TSK_FS_META_TYPE_BLK: return 'b'; + case TSK_FS_META_TYPE_LNK: return 'l'; + case TSK_FS_META_TYPE_SHAD: return 'h'; + case TSK_FS_META_TYPE_SOCK: return 's'; + case TSK_FS_META_TYPE_WHT: return 'w'; + case TSK_FS_META_TYPE_VIRT: return 'u'; /* Temp files created by TSK */ + } + + return 'u'; +} + +/* Inspect fsfile to retrieve the file allocation state. */ +static int +file_flags (TSK_FS_FILE *fsfile) +{ + int flags = DIRENT_UNALLOC; + + if (fsfil...
2016 Apr 05
10
[PATCH v3 0/5] Added filesystem_walk command
v3: - File size will be reported as - 1 if it cannot be retrieved. - Code improvements based on comments. Matteo Cafasso (5): generator: Added tsk_dirent struct configure: Added libtsk compile-time check daemon: Added internal_filesystem_walk command appliance: Added filesystem_walk command appliance: Added filesystem_walk command tests daemon/Makefile.am | 4 +-
2016 Apr 11
5
[PATCH v5 0/5] New API: filesystem_walk
v5: - fixed compile-time warning - removed unused flag enumeration - new version 1.33.19 Patch ready for review. Matteo Cafasso (5): generator: Added tsk_dirent struct configure: Added libtsk compile-time check New API: internal_filesystem_walk New API: filesystem_walk lib: Added filesystem_walk command tests daemon/Makefile.am | 4 +- daemon/tsk.c
2016 Apr 06
5
[PATCH v4 0/5] New API: filesystem_walk
v4: - Changed tsk_allocated struct field into tsk_flags. - Added optional dependency in documentation. - Use asprintf and perror instead of asprintf_nowarn and fprintf. - Ensure CLEANUP_FREE vars are initialised. - Reworked the function documentation. - Improved tests robustness. Matteo Cafasso (5): generator: Added tsk_dirent struct configure: Added libtsk compile-time check
2016 May 02
5
[PATCH v6 0/5] New API: filesystem_walk
v6: - added metadata reallocation flag in tsk_flags Certain filesystems separate file name structures and metadata ones. Therefore, deleted entries with file name structures in an unallocated state might point to metadata structures which have been reallocated to new files. A flag set to 1 is generally an indication that the information gathered from the metadata structure (file
2016 Jun 12
6
[PATCH v7 0/5] New API: filesystem_walk
v7: - iterate over output file instead of reading it into memory Instead of reading the whole output file in memory and iterating over the resulting buffer, use XDR primitives to directly iterate over the file itself. This should reduce the API memory consumption. Patch ready for review. Code available at: https://github.com/noxdafox/libguestfs/tree/filesystem_walk Matteo Cafasso
2016 Jun 15
4
[PATCH v9 0/3] New API: filesystem_walk
v9: - add missing files: java/Makefile.inc, java/com/redhat/et/libguestfs/.gitignore, gobject/Makefile.inc - reserve space in tsk_dirent struct for future usage - use int instead of bool_t type - improve API documentation Matteo Cafasso (3): New API: internal_filesystem_walk New API: filesystem_walk lib: Added filesystem_walk command tests daemon/Makefile.am
2016 Jun 13
7
[PATCH v8 0/3] New API: filesystem_walk
v8: - rebase on master - bump version to 1.33.37 - squash commits 1, 2, 3 Kept original commits messages when squashing them. Matteo Cafasso (3): New API: internal_filesystem_walk New API: filesystem_walk lib: Added filesystem_walk command tests daemon/Makefile.am | 4 +- daemon/tsk.c | 249 ++++++++++++++++++++++++++++++++++++++