Home
last modified time | relevance | path

Searched refs:tsk_getu64 (Results 1 – 25 of 30) sorted by relevance

12

/dports/sysutils/py-pytsk/pytsk3-20210419/sleuthkit/tsk/vs/
H A Dgpt.c123 if (tsk_getu64(vs->endian, &head->signature) != GPT_HEAD_SIG) { in gpt_load_table()
178 if (NULL == tsk_vs_part_add(vs, (TSK_DADDR_T) tsk_getu64(vs->endian, in gpt_load_table()
201 tsk_getu64(vs->endian, &head->tab_start_lba) + a, in gpt_load_table()
210 tsk_getu64(vs->endian, &head->tab_start_lba) + a); in gpt_load_table()
229 tsk_getu64(vs->endian, ent->start_lba), in gpt_load_table()
230 tsk_getu64(vs->endian, ent->end_lba), in gpt_load_table()
231 tsk_getu64(vs->endian, ent->flags)); in gpt_load_table()
234 if (tsk_getu64(vs->endian, ent->start_lba) == 0) { in gpt_load_table()
241 && (tsk_getu64(vs->endian, ent->start_lba) > max_addr)) { in gpt_load_table()
277 (TSK_DADDR_T) (tsk_getu64(vs->endian, in gpt_load_table()
[all …]
/dports/sysutils/sleuthkit/sleuthkit-4.7.0/tsk/vs/
H A Dgpt.c123 if (tsk_getu64(vs->endian, &head->signature) != GPT_HEAD_SIG) { in gpt_load_table()
178 if (NULL == tsk_vs_part_add(vs, (TSK_DADDR_T) tsk_getu64(vs->endian, in gpt_load_table()
201 tsk_getu64(vs->endian, &head->tab_start_lba) + a, in gpt_load_table()
210 tsk_getu64(vs->endian, &head->tab_start_lba) + a); in gpt_load_table()
229 tsk_getu64(vs->endian, ent->start_lba), in gpt_load_table()
230 tsk_getu64(vs->endian, ent->end_lba), in gpt_load_table()
231 tsk_getu64(vs->endian, ent->flags)); in gpt_load_table()
234 if (tsk_getu64(vs->endian, ent->start_lba) == 0) { in gpt_load_table()
241 && (tsk_getu64(vs->endian, ent->start_lba) > max_addr)) { in gpt_load_table()
277 (TSK_DADDR_T) (tsk_getu64(vs->endian, in gpt_load_table()
[all …]
/dports/sysutils/sleuthkit/sleuthkit-4.7.0/tsk/fs/
H A Dntfs.c1917 id_new, name, tsk_getu64(fs->endian, in ntfs_proc_attrseq()
4216 tsk_getu64(fs->endian, ntfs->fs->mft_clust)); in ntfs_fsstat()
4285 (tsk_getu64(fs->endian, in ntfs_fsstat()
4387 "\n", tsk_getu64(fs->endian, mft->lsn)); in ntfs_istat()
4451 if (tsk_getu64(fs->endian, si->quota) != 0) { in ntfs_istat()
4453 tsk_getu64(fs->endian, si->quota)); in ntfs_istat()
4456 if (tsk_getu64(fs->endian, si->usn) != 0) { in ntfs_istat()
4524 flags = tsk_getu64(fs->endian, fname->flags); in ntfs_istat()
4635 id1 = tsk_getu64(fs->endian, objid->objid1); in ntfs_istat()
4636 id2 = tsk_getu64(fs->endian, objid->objid2); in ntfs_istat()
[all …]
H A Dffs.c353 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy()
490 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy()
614 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy()
1340 tsk_getu64(fs->endian, sb2->swuid)); in ffs_fsstat()
1394 tsk_getu64(fs->endian, sb2->cstotal.ino_free)); in ffs_fsstat()
1396 tsk_getu64(fs->endian, sb2->cstotal.dir_num)); in ffs_fsstat()
1468 (fs, (TSK_DADDR_T) tsk_getu64(fs->endian, in ffs_fsstat()
1785 tsk_getu64(fs->endian, in->di_extb[0]), in ffs_istat()
1786 tsk_getu64(fs->endian, in->di_extb[1])); in ffs_istat()
1792 && (tsk_getu64(fs->endian, in ffs_istat()
[all …]
H A Dhfs.c1894 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz); in hfs_make_catalog()
1916 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz), in hfs_make_catalog()
1917 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz), in hfs_make_catalog()
1973 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz); in hfs_make_extents()
1994 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz), in hfs_make_extents()
1995 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz), in hfs_make_extents()
2043 tsk_getu64(fs->endian, hfs->fs->alloc_file.logic_sz); in hfs_make_blockmap()
2124 tsk_getu64(fs->endian, hfs->fs->start_file.logic_sz); in hfs_make_startfile()
2202 tsk_getu64(fs->endian, hfs->fs->attr_file.logic_sz); in hfs_make_attrfile()
4997 tsk_getu64(fs->endian, forkx->logic_sz), in hfs_load_attrs()
[all …]
H A Dusn_journal.c99 record->usn = tsk_getu64(endian, &buf[24]); in parse_v2_record()
102 timestamp = tsk_getu64(endian, &buf[32]); in parse_v2_record()
H A Dntfs_dent.cpp278 if (tsk_getu64(fs->endian, fname->flags) & NTFS_FNAME_FLAGS_DIR) in ntfs_dent_copy()
481 if ((tsk_getu64(fs->endian, fname->alloc_fsize) < in ntfs_proc_idxentry()
482 tsk_getu64(fs->endian, fname->real_fsize)) in ntfs_proc_idxentry()
493 if ((is_time(tsk_getu64(fs->endian, fname->crtime)) == 0) || in ntfs_proc_idxentry()
494 (is_time(tsk_getu64(fs->endian, fname->atime)) == 0) || in ntfs_proc_idxentry()
495 (is_time(tsk_getu64(fs->endian, fname->mtime)) == 0)) { in ntfs_proc_idxentry()
H A Dexfatfs.c122 vol_len_in_sectors = tsk_getu64(fs->endian, exfatbs->vol_len_in_sectors); in exfatfs_get_fs_layout()
295 … alloc_bitmap_length_in_bytes = tsk_getu64(fs->endian, dentry->length_of_alloc_bitmap_in_bytes); in exfatfs_get_alloc_bitmap()
365 fs->block_count = tsk_getu64(fs->endian, exfatbs->vol_len_in_sectors); in exfatfs_setup_fs_layout_model()
701 tsk_getu64(a_fs->endian, exfatbs->partition_offset)); in exfatfs_fsstat_fs_info()
H A Dexfatfs_meta.c241 …length_of_alloc_bitmap_in_bytes = tsk_getu64(a_fatfs->fs_info.endian, dentry->length_of_alloc_bitm… in exfatfs_is_alloc_bitmap_dentry()
319 table_size = tsk_getu64(a_fatfs->fs_info.endian, dentry->table_length_in_bytes); in exfatfs_is_upcase_table_dentry()
603 file_size = tsk_getu64(a_endian, dentry->data_length); in exfatfs_is_file_stream_dentry_standalone()
918 a_fs_file->meta->size = tsk_getu64(a_fatfs->fs_info.endian, dentry->table_length_in_bytes); in exfatfs_copy_upcase_table_inode()
1218 fs_meta->size = tsk_getu64(fs->endian, stream_dentry.data_length); in exfatfs_copy_file_inode()
H A Dunix_misc.c206 myaddrs[n] = tsk_getu64(fs->endian, (uint8_t *) & iaddr[n]); in unix_make_data_run_indirect()
H A Dtsk_ntfs.h451 (tsk_getu64(fs->endian, (int)e + tsk_getu16(fs->endian, e->idxlen) - 8))
/dports/sysutils/py-pytsk/pytsk3-20210419/sleuthkit/tsk/fs/
H A Dntfs.c1951 id_new, name, tsk_getu64(fs->endian, in ntfs_proc_attrseq()
4287 tsk_getu64(fs->endian, ntfs->fs->mft_clust)); in ntfs_fsstat()
4356 (tsk_getu64(fs->endian, in ntfs_fsstat()
4458 "\n", tsk_getu64(fs->endian, mft->lsn)); in ntfs_istat()
4522 if (tsk_getu64(fs->endian, si->quota) != 0) { in ntfs_istat()
4524 tsk_getu64(fs->endian, si->quota)); in ntfs_istat()
4527 if (tsk_getu64(fs->endian, si->usn) != 0) { in ntfs_istat()
4595 flags = tsk_getu64(fs->endian, fname->flags); in ntfs_istat()
4706 id1 = tsk_getu64(fs->endian, objid->objid1); in ntfs_istat()
4707 id2 = tsk_getu64(fs->endian, objid->objid2); in ntfs_istat()
[all …]
H A Dffs.c353 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy()
490 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy()
614 fs_meta->size = tsk_getu64(fs->endian, in->di_size); in ffs_dinode_copy()
1340 tsk_getu64(fs->endian, sb2->swuid)); in ffs_fsstat()
1394 tsk_getu64(fs->endian, sb2->cstotal.ino_free)); in ffs_fsstat()
1396 tsk_getu64(fs->endian, sb2->cstotal.dir_num)); in ffs_fsstat()
1468 (fs, (TSK_DADDR_T) tsk_getu64(fs->endian, in ffs_fsstat()
1785 tsk_getu64(fs->endian, in->di_extb[0]), in ffs_istat()
1786 tsk_getu64(fs->endian, in->di_extb[1])); in ffs_istat()
1792 && (tsk_getu64(fs->endian, in ffs_istat()
[all …]
H A Dhfs.c1779 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz); in hfs_make_catalog()
1801 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz), in hfs_make_catalog()
1802 tsk_getu64(fs->endian, hfs->fs->cat_file.logic_sz), in hfs_make_catalog()
1858 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz); in hfs_make_extents()
1879 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz), in hfs_make_extents()
1880 tsk_getu64(fs->endian, hfs->fs->ext_file.logic_sz), in hfs_make_extents()
1928 tsk_getu64(fs->endian, hfs->fs->alloc_file.logic_sz); in hfs_make_blockmap()
2009 tsk_getu64(fs->endian, hfs->fs->start_file.logic_sz); in hfs_make_startfile()
2087 tsk_getu64(fs->endian, hfs->fs->attr_file.logic_sz); in hfs_make_attrfile()
4881 tsk_getu64(fs->endian, forkx->logic_sz), in hfs_load_attrs()
[all …]
H A Dusn_journal.c99 record->usn = tsk_getu64(endian, &buf[24]); in write_png()
102 timestamp = tsk_getu64(endian, &buf[32]); in write_png()
H A Dntfs_dent.cpp278 if (tsk_getu64(fs->endian, fname->flags) & NTFS_FNAME_FLAGS_DIR) in ntfs_dent_copy()
481 if ((tsk_getu64(fs->endian, fname->alloc_fsize) < in ntfs_proc_idxentry()
482 tsk_getu64(fs->endian, fname->real_fsize)) in ntfs_proc_idxentry()
493 if ((is_time(tsk_getu64(fs->endian, fname->crtime)) == 0) || in ntfs_proc_idxentry()
494 (is_time(tsk_getu64(fs->endian, fname->atime)) == 0) || in ntfs_proc_idxentry()
495 (is_time(tsk_getu64(fs->endian, fname->mtime)) == 0)) { in ntfs_proc_idxentry()
H A Dexfatfs.c122 vol_len_in_sectors = tsk_getu64(fs->endian, exfatbs->vol_len_in_sectors); in exfatfs_get_fs_layout()
295 … alloc_bitmap_length_in_bytes = tsk_getu64(fs->endian, dentry->length_of_alloc_bitmap_in_bytes); in exfatfs_get_alloc_bitmap()
365 fs->block_count = tsk_getu64(fs->endian, exfatbs->vol_len_in_sectors); in exfatfs_setup_fs_layout_model()
701 tsk_getu64(a_fs->endian, exfatbs->partition_offset)); in exfatfs_fsstat_fs_info()
H A Dexfatfs_meta.c241 …length_of_alloc_bitmap_in_bytes = tsk_getu64(a_fatfs->fs_info.endian, dentry->length_of_alloc_bitm… in DebugExecWatcher()
319 table_size = tsk_getu64(a_fatfs->fs_info.endian, dentry->table_length_in_bytes);
603 file_size = tsk_getu64(a_endian, dentry->data_length);
918 a_fs_file->meta->size = tsk_getu64(a_fatfs->fs_info.endian, dentry->table_length_in_bytes);
1218 fs_meta->size = tsk_getu64(fs->endian, stream_dentry.data_length);
H A Dunix_misc.c206 myaddrs[n] = tsk_getu64(fs->endian, (uint8_t *) & iaddr[n]); in unix_make_data_run_indirect()
H A Dtsk_ntfs.h451 (tsk_getu64(fs->endian, (int)e + tsk_getu16(fs->endian, e->idxlen) - 8))
/dports/sysutils/py-pytsk/pytsk3-20210419/sleuthkit/tsk/base/
H A Dtsk_endian.c90 if (tsk_getu64(TSK_LIT_ENDIAN, x) == val) { in tsk_guess_end_u64()
96 if (tsk_getu64(TSK_BIG_ENDIAN, x) == val) { in tsk_guess_end_u64()
H A Dtsk_base_i.h171 #define tsk_getu64(endian, x) \ macro
200 ((int64_t)tsk_getu64(endian, x))
/dports/sysutils/sleuthkit/sleuthkit-4.7.0/tsk/base/
H A Dtsk_endian.c90 if (tsk_getu64(TSK_LIT_ENDIAN, x) == val) { in tsk_guess_end_u64()
96 if (tsk_getu64(TSK_BIG_ENDIAN, x) == val) { in tsk_guess_end_u64()
H A Dtsk_base_i.h165 #define tsk_getu64(endian, x) \ macro
194 ((int64_t)tsk_getu64(endian, x))
/dports/sysutils/bulk_extractor/bulk_extractor-2.0.0-beta2/src/tsk3/fs/
H A Dtsk_ntfs.h448 (tsk_getu64(fs->endian, (int)e + tsk_getu16(fs->endian, e->idxlen) - 8))

12