Stores information about an image that is open and being analyzed.
More...
#include <tsk_img.h>
Public Member Functions
Returns the sector size of the disk.
More...
Returns the size of the image.
More...
returns the image format type.
More...
Opens a single (non-split) disk image file so that it can be read.
More...
Opens one or more disk image files so that they can be read.
More...
Reads data from an open disk image.
More...
Static Public Member Functions
Prints the name and description of the supported image types to a handle.
More...
Returns the supported file format types.
More...
Returns the description of an image format type, given its type ID.
More...
Parses a string that specifies an image format to determine the associated type ID.
More...
Returns the name of an image format type, given its type ID.
More...
Friends
class TskFsInfo
class TskVsInfo
Detailed Description
Stores information about an image that is open and being analyzed.
To use this object, open() should be called first. Otherwise, the get() methods will return undefined values.
Member Function Documentation
unsigned int TskImgInfo::getSectorSize
(
)
const
inline
Returns the size of the image.
- Returns
- total size of image in bytes
References TSK_IMG_INFO::size.
uint8_t TskImgInfo::open
(
const
TSK_TCHAR *
a_image,
unsigned int
a_ssize
)
inline
Opens a single (non-split) disk image file so that it can be read.
See tsk_img_open_sing() for more details.
- Parameters
-
a_image The path to the image file
a_type The disk image type (can be autodetection)
a_ssize Size of device sector in bytes (or 0 for default)
- Returns
- 1 on error and 0 on success
References tsk_img_open_sing().
uint8_t TskImgInfo::open
(
int
a_num_img,
unsigned int
a_ssize
)
inline
Opens one or more disk image files so that they can be read.
e UTF8, then consider See tsk_img_open() for more details.
- Parameters
-
a_num_img The number of images to open (will be > 1 for split images).
a_images The path to the image files (the number of files must be equal to num_img and they must be in a sorted order)
a_type The disk image type (can be autodetection)
a_ssize Size of device sector in bytes (or 0 for default)
- Returns
- 1 on error and 0 on success
References tsk_img_open().
char *
a_buf,
size_t
a_len
)
inline
Reads data from an open disk image.
- Parameters
-
a_off Byte offset to start reading from
a_buf Buffer to read into
a_len Number of bytes to read into buffer
- Returns
- number of bytes read or -1 on error
References tsk_img_read().
static void TskImgInfo::typePrint
(
FILE *
a_file )
inlinestatic
Prints the name and description of the supported image types to a handle.
This is used by the TSK command line tools to print the supported types to the console.
- Parameters
-
a_file Handle to print names and descriptions to.
References tsk_img_type_print().
Returns the supported file format types.
- Returns
- A bit in the return value is set to 1 if the type is supported.
References tsk_img_type_supported().
Returns the description of an image format type, given its type ID.
- Parameters
-
a_type ID of image type
- Returns
- Pointer to string of the description
References tsk_img_type_todesc().
Parses a string that specifies an image format to determine the associated type ID.
This is used by the TSK command line tools to parse the type given on the command line.
- Parameters
-
a_str String of image format type
- Returns
- ID of image type
References tsk_img_type_toid().
Returns the name of an image format type, given its type ID.
- Parameters
-
a_type ID of image type
- Returns
- Pointer to string of the name.
References tsk_img_type_toname().
The documentation for this class was generated from the following file: