1 /*
2 
3     File: file_msa.c
4 
5     Copyright (C) 2017 Christophe GRENIER <grenier@cgsecurity.org>
6 
7     This software is free software; you can redistribute it and/or modify
8     it under the terms of the GNU General Public License as published by
9     the Free Software Foundation; either version 2 of the License, or
10     (at your option) any later version.
11 
12     This program is distributed in the hope that it will be useful,
13     but WITHOUT ANY WARRANTY; without even the implied warranty of
14     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15     GNU General Public License for more details.
16 
17     You should have received a copy of the GNU General Public License along
18     with this program; if not, write the Free Software Foundation, Inc., 51
19     Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
20 
21  */
22 
23 #ifdef HAVE_CONFIG_H
24 #include <config.h>
25 #endif
26 #ifdef HAVE_STRING_H
27 #include <string.h>
28 #endif
29 #include <stdio.h>
30 #include "types.h"
31 #include "filegen.h"
32 #include "common.h"
33 
34 static void register_header_check_msa(file_stat_t *file_stat);
35 
36 const file_hint_t file_hint_msa= {
37   .extension="msa",
38   .description="Mensura",
39   .max_filesize=PHOTOREC_MAX_FILE_SIZE,
40   .recover=1,
41   .enable_by_default=0,
42   .register_header_check=&register_header_check_msa
43 };
44 
45 struct msa_header
46 {
47   uint32_t magic;
48   uint32_t size;
49 } __attribute__ ((gcc_struct, __packed__));
50 
header_check_msa(const unsigned char * buffer,const unsigned int buffer_size,const unsigned int safe_header_only,const file_recovery_t * file_recovery,file_recovery_t * file_recovery_new)51 static int header_check_msa(const unsigned char *buffer, const unsigned int buffer_size, const unsigned int safe_header_only, const file_recovery_t *file_recovery, file_recovery_t *file_recovery_new)
52 {
53   const struct msa_header *msa=(const struct msa_header *)buffer;
54   if(buffer[0x13]!=0x40)
55     return 0;
56   reset_file_recovery(file_recovery_new);
57   file_recovery_new->extension=file_hint_msa.extension;
58   file_recovery_new->calculated_file_size=(uint64_t)le32(msa->size);
59   file_recovery_new->data_check=&data_check_size;
60   file_recovery_new->file_check=&file_check_size;
61   return 1;
62 }
63 
register_header_check_msa(file_stat_t * file_stat)64 static void register_header_check_msa(file_stat_t *file_stat)
65 {
66   static const unsigned char msa_header_fb[4]=  {
67     0xfb, 0xff, 0xff, 0xff
68   };
69   static const unsigned char msa_header_fc[4]=  {
70     0xfc, 0xff, 0xff, 0xff
71   };
72   register_header_check(0, msa_header_fb, sizeof(msa_header_fb), &header_check_msa, file_stat);
73   register_header_check(0, msa_header_fc, sizeof(msa_header_fc), &header_check_msa, file_stat);
74 }
75