/dports/sysutils/py-pytsk/pytsk3-20210419/sleuthkit/tsk/vs/ |
H A D | gpt.c | 123 if (tsk_getu64(vs->endian, &head->signature) != GPT_HEAD_SIG) { in gpt_load_table() 178 if (NULL == tsk_vs_part_add(vs, (TSK_DADDR_T) tsk_getu64(vs->endian, in gpt_load_table() 201 tsk_getu64(vs->endian, &head->tab_start_lba) + a, in gpt_load_table() 210 tsk_getu64(vs->endian, &head->tab_start_lba) + a); in gpt_load_table() 229 tsk_getu64(vs->endian, ent->start_lba), in gpt_load_table() 230 tsk_getu64(vs->endian, ent->end_lba), in gpt_load_table() 231 tsk_getu64(vs->endian, ent->flags)); in gpt_load_table() 234 if (tsk_getu64(vs->endian, ent->start_lba) == 0) { in gpt_load_table() 241 && (tsk_getu64(vs->endian, ent->start_lba) > max_addr)) { in gpt_load_table() 277 (TSK_DADDR_T) (tsk_getu64(vs->endian, in gpt_load_table() [all …]
|
/dports/sysutils/sleuthkit/sleuthkit-4.7.0/tsk/vs/ |
H A D | gpt.c | 123 if (tsk_getu64(vs->endian, &head->signature) != GPT_HEAD_SIG) { in gpt_load_table() 178 if (NULL == tsk_vs_part_add(vs, (TSK_DADDR_T) tsk_getu64(vs->endian, in gpt_load_table() 201 tsk_getu64(vs->endian, &head->tab_start_lba) + a, in gpt_load_table() 210 tsk_getu64(vs->endian, &head->tab_start_lba) + a); in gpt_load_table() 229 tsk_getu64(vs->endian, ent->start_lba), in gpt_load_table() 230 tsk_getu64(vs->endian, ent->end_lba), in gpt_load_table() 231 tsk_getu64(vs->endian, ent->flags)); in gpt_load_table() 234 if (tsk_getu64(vs->endian, ent->start_lba) == 0) { in gpt_load_table() 241 && (tsk_getu64(vs->endian, ent->start_lba) > max_addr)) { in gpt_load_table() 277 (TSK_DADDR_T) (tsk_getu64(vs->endian, in gpt_load_table() [all …]
|
/dports/sysutils/sleuthkit/sleuthkit-4.7.0/tsk/fs/ |
H A D | ntfs.c | 1917 id_new, name, tsk_getu64(fs->endian, in ntfs_proc_attrseq() 4216 tsk_getu64(fs->endian, ntfs->fs->mft_clust)); in ntfs_fsstat() 4285 (tsk_getu64(fs->endian, in ntfs_fsstat() 4387 "\n", tsk_getu64(fs->endian, mft->lsn)); in ntfs_istat() 4451 if (tsk_getu64(fs->endian, si->quota) != 0) { in ntfs_istat() 4453 tsk_getu64(fs->endian, si->quota)); in ntfs_istat() 4456 if (tsk_getu64(fs->endian, si->usn) != 0) { in ntfs_istat() 4524 flags = tsk_getu64(fs->endian, fname->flags); in ntfs_istat() 4635 id1 = tsk_getu64(fs->endian, objid->objid1); in ntfs_istat() 4636 id2 = tsk_getu64(fs->endian, objid->objid2); in ntfs_istat() [all …]
|
H A D | ffs.c | 353 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy() 490 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy() 614 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy() 1340 tsk_getu64(fs->endian, sb2->swuid)); in ffs_fsstat() 1394 tsk_getu64(fs->endian, sb2->cstotal.ino_free)); in ffs_fsstat() 1396 tsk_getu64(fs->endian, sb2->cstotal.dir_num)); in ffs_fsstat() 1468 (fs, (TSK_DADDR_T) tsk_getu64(fs->endian, in ffs_fsstat() 1785 tsk_getu64(fs->endian, in->di_extb[0]), in ffs_istat() 1786 tsk_getu64(fs->endian, in->di_extb[1])); in ffs_istat() 1792 && (tsk_getu64(fs->endian, in ffs_istat() [all …]
|
H A D | hfs.c | 1894 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz); in hfs_make_catalog() 1916 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz), in hfs_make_catalog() 1917 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz), in hfs_make_catalog() 1973 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz); in hfs_make_extents() 1994 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz), in hfs_make_extents() 1995 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz), in hfs_make_extents() 2043 tsk_getu64(fs->endian, hfs->fs->alloc_file.logic_sz); in hfs_make_blockmap() 2124 tsk_getu64(fs->endian, hfs->fs->start_file.logic_sz); in hfs_make_startfile() 2202 tsk_getu64(fs->endian, hfs->fs->attr_file.logic_sz); in hfs_make_attrfile() 4997 tsk_getu64(fs->endian, forkx->logic_sz), in hfs_load_attrs() [all …]
|
H A D | usn_journal.c | 99 record->usn = tsk_getu64(endian, &buf[24]); in parse_v2_record() 102 timestamp = tsk_getu64(endian, &buf[32]); in parse_v2_record()
|
H A D | ntfs_dent.cpp | 278 if (tsk_getu64(fs->endian, fname->flags) & NTFS_FNAME_FLAGS_DIR) in ntfs_dent_copy() 481 if ((tsk_getu64(fs->endian, fname->alloc_fsize) < in ntfs_proc_idxentry() 482 tsk_getu64(fs->endian, fname->real_fsize)) in ntfs_proc_idxentry() 493 if ((is_time(tsk_getu64(fs->endian, fname->crtime)) == 0) || in ntfs_proc_idxentry() 494 (is_time(tsk_getu64(fs->endian, fname->atime)) == 0) || in ntfs_proc_idxentry() 495 (is_time(tsk_getu64(fs->endian, fname->mtime)) == 0)) { in ntfs_proc_idxentry()
|
H A D | exfatfs.c | 122 vol_len_in_sectors = tsk_getu64(fs->endian, exfatbs->vol_len_in_sectors); in exfatfs_get_fs_layout() 295 … alloc_bitmap_length_in_bytes = tsk_getu64(fs->endian, dentry->length_of_alloc_bitmap_in_bytes); in exfatfs_get_alloc_bitmap() 365 fs->block_count = tsk_getu64(fs->endian, exfatbs->vol_len_in_sectors); in exfatfs_setup_fs_layout_model() 701 tsk_getu64(a_fs->endian, exfatbs->partition_offset)); in exfatfs_fsstat_fs_info()
|
H A D | exfatfs_meta.c | 241 …length_of_alloc_bitmap_in_bytes = tsk_getu64(a_fatfs->fs_info.endian, dentry->length_of_alloc_bitm… in exfatfs_is_alloc_bitmap_dentry() 319 table_size = tsk_getu64(a_fatfs->fs_info.endian, dentry->table_length_in_bytes); in exfatfs_is_upcase_table_dentry() 603 file_size = tsk_getu64(a_endian, dentry->data_length); in exfatfs_is_file_stream_dentry_standalone() 918 a_fs_file->meta->size = tsk_getu64(a_fatfs->fs_info.endian, dentry->table_length_in_bytes); in exfatfs_copy_upcase_table_inode() 1218 fs_meta->size = tsk_getu64(fs->endian, stream_dentry.data_length); in exfatfs_copy_file_inode()
|
H A D | unix_misc.c | 206 myaddrs[n] = tsk_getu64(fs->endian, (uint8_t *) & iaddr[n]); in unix_make_data_run_indirect()
|
H A D | tsk_ntfs.h | 451 (tsk_getu64(fs->endian, (int)e + tsk_getu16(fs->endian, e->idxlen) - 8))
|
/dports/sysutils/py-pytsk/pytsk3-20210419/sleuthkit/tsk/fs/ |
H A D | ntfs.c | 1951 id_new, name, tsk_getu64(fs->endian, in ntfs_proc_attrseq() 4287 tsk_getu64(fs->endian, ntfs->fs->mft_clust)); in ntfs_fsstat() 4356 (tsk_getu64(fs->endian, in ntfs_fsstat() 4458 "\n", tsk_getu64(fs->endian, mft->lsn)); in ntfs_istat() 4522 if (tsk_getu64(fs->endian, si->quota) != 0) { in ntfs_istat() 4524 tsk_getu64(fs->endian, si->quota)); in ntfs_istat() 4527 if (tsk_getu64(fs->endian, si->usn) != 0) { in ntfs_istat() 4595 flags = tsk_getu64(fs->endian, fname->flags); in ntfs_istat() 4706 id1 = tsk_getu64(fs->endian, objid->objid1); in ntfs_istat() 4707 id2 = tsk_getu64(fs->endian, objid->objid2); in ntfs_istat() [all …]
|
H A D | ffs.c | 353 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy() 490 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy() 614 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy() 1340 tsk_getu64(fs->endian, sb2->swuid)); in ffs_fsstat() 1394 tsk_getu64(fs->endian, sb2->cstotal.ino_free)); in ffs_fsstat() 1396 tsk_getu64(fs->endian, sb2->cstotal.dir_num)); in ffs_fsstat() 1468 (fs, (TSK_DADDR_T) tsk_getu64(fs->endian, in ffs_fsstat() 1785 tsk_getu64(fs->endian, in->di_extb[0]), in ffs_istat() 1786 tsk_getu64(fs->endian, in->di_extb[1])); in ffs_istat() 1792 && (tsk_getu64(fs->endian, in ffs_istat() [all …]
|
H A D | hfs.c | 1779 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz); in hfs_make_catalog() 1801 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz), in hfs_make_catalog() 1802 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz), in hfs_make_catalog() 1858 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz); in hfs_make_extents() 1879 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz), in hfs_make_extents() 1880 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz), in hfs_make_extents() 1928 tsk_getu64(fs->endian, hfs->fs->alloc_file.logic_sz); in hfs_make_blockmap() 2009 tsk_getu64(fs->endian, hfs->fs->start_file.logic_sz); in hfs_make_startfile() 2087 tsk_getu64(fs->endian, hfs->fs->attr_file.logic_sz); in hfs_make_attrfile() 4881 tsk_getu64(fs->endian, forkx->logic_sz), in hfs_load_attrs() [all …]
|
H A D | usn_journal.c | 99 record->usn = tsk_getu64(endian, &buf[24]); in write_png() 102 timestamp = tsk_getu64(endian, &buf[32]); in write_png()
|
H A D | ntfs_dent.cpp | 278 if (tsk_getu64(fs->endian, fname->flags) & NTFS_FNAME_FLAGS_DIR) in ntfs_dent_copy() 481 if ((tsk_getu64(fs->endian, fname->alloc_fsize) < in ntfs_proc_idxentry() 482 tsk_getu64(fs->endian, fname->real_fsize)) in ntfs_proc_idxentry() 493 if ((is_time(tsk_getu64(fs->endian, fname->crtime)) == 0) || in ntfs_proc_idxentry() 494 (is_time(tsk_getu64(fs->endian, fname->atime)) == 0) || in ntfs_proc_idxentry() 495 (is_time(tsk_getu64(fs->endian, fname->mtime)) == 0)) { in ntfs_proc_idxentry()
|
H A D | exfatfs.c | 122 vol_len_in_sectors = tsk_getu64(fs->endian, exfatbs->vol_len_in_sectors); in exfatfs_get_fs_layout() 295 … alloc_bitmap_length_in_bytes = tsk_getu64(fs->endian, dentry->length_of_alloc_bitmap_in_bytes); in exfatfs_get_alloc_bitmap() 365 fs->block_count = tsk_getu64(fs->endian, exfatbs->vol_len_in_sectors); in exfatfs_setup_fs_layout_model() 701 tsk_getu64(a_fs->endian, exfatbs->partition_offset)); in exfatfs_fsstat_fs_info()
|
H A D | exfatfs_meta.c | 241 …length_of_alloc_bitmap_in_bytes = tsk_getu64(a_fatfs->fs_info.endian, dentry->length_of_alloc_bitm… in DebugExecWatcher() 319 table_size = tsk_getu64(a_fatfs->fs_info.endian, dentry->table_length_in_bytes); 603 file_size = tsk_getu64(a_endian, dentry->data_length); 918 a_fs_file->meta->size = tsk_getu64(a_fatfs->fs_info.endian, dentry->table_length_in_bytes); 1218 fs_meta->size = tsk_getu64(fs->endian, stream_dentry.data_length);
|
H A D | unix_misc.c | 206 myaddrs[n] = tsk_getu64(fs->endian, (uint8_t *) & iaddr[n]); in unix_make_data_run_indirect()
|
H A D | tsk_ntfs.h | 451 (tsk_getu64(fs->endian, (int)e + tsk_getu16(fs->endian, e->idxlen) - 8))
|
/dports/sysutils/py-pytsk/pytsk3-20210419/sleuthkit/tsk/base/ |
H A D | tsk_endian.c | 90 if (tsk_getu64(TSK_LIT_ENDIAN, x) == val) { in tsk_guess_end_u64() 96 if (tsk_getu64(TSK_BIG_ENDIAN, x) == val) { in tsk_guess_end_u64()
|
H A D | tsk_base_i.h | 171 #define tsk_getu64(endian, x) \ macro 200 ((int64_t)tsk_getu64(endian, x))
|
/dports/sysutils/sleuthkit/sleuthkit-4.7.0/tsk/base/ |
H A D | tsk_endian.c | 90 if (tsk_getu64(TSK_LIT_ENDIAN, x) == val) { in tsk_guess_end_u64() 96 if (tsk_getu64(TSK_BIG_ENDIAN, x) == val) { in tsk_guess_end_u64()
|
H A D | tsk_base_i.h | 165 #define tsk_getu64(endian, x) \ macro 194 ((int64_t)tsk_getu64(endian, x))
|
/dports/sysutils/bulk_extractor/bulk_extractor-2.0.0-beta2/src/tsk3/fs/ |
H A D | tsk_ntfs.h | 448 (tsk_getu64(fs->endian, (int)e + tsk_getu16(fs->endian, e->idxlen) - 8))
|