1 /*
2
3 File: file_filevault.c
4
5 Copyright (C) 2011 Christophe GRENIER <grenier@cgsecurity.org>
6
7 This software is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 2 of the License, or
10 (at your option) any later version.
11
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
16
17 You should have received a copy of the GNU General Public License along
18 with this program; if not, write the Free Software Foundation, Inc., 51
19 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
20
21 */
22
23 #ifdef HAVE_CONFIG_H
24 #include <config.h>
25 #endif
26 #ifdef HAVE_STRING_H
27 #include <string.h>
28 #endif
29 #include <stdio.h>
30 #include "types.h"
31 #include "filegen.h"
32
33 static void register_header_check_filevault(file_stat_t *file_stat);
34 static int header_check_filevault(const unsigned char *buffer, const unsigned int buffer_size, const unsigned int safe_header_only, const file_recovery_t *file_recovery, file_recovery_t *file_recovery_new);
35
36 const file_hint_t file_hint_filevault= {
37 .extension="sparseimage",
38 .description="Filevault",
39 .max_filesize=PHOTOREC_MAX_FILE_SIZE,
40 .recover=1,
41 .enable_by_default=1,
42 .register_header_check=®ister_header_check_filevault
43 };
44
header_check_filevault(const unsigned char * buffer,const unsigned int buffer_size,const unsigned int safe_header_only,const file_recovery_t * file_recovery,file_recovery_t * file_recovery_new)45 static int header_check_filevault(const unsigned char *buffer, const unsigned int buffer_size, const unsigned int safe_header_only, const file_recovery_t *file_recovery, file_recovery_t *file_recovery_new)
46 {
47 reset_file_recovery(file_recovery_new);
48 #ifdef DJGPP
49 file_recovery_new->extension="img";
50 #else
51 file_recovery_new->extension=file_hint_filevault.extension;
52 #endif
53 return 1;
54 }
55
register_header_check_filevault(file_stat_t * file_stat)56 static void register_header_check_filevault(file_stat_t *file_stat)
57 {
58 static const unsigned char filevault_header[8]= {
59 'e', 'n', 'c', 'r', 'c', 'd', 's', 'a'
60 };
61 register_header_check(0, filevault_header, sizeof(filevault_header), &header_check_filevault, file_stat);
62 }
63