The Sleuth Kit  4.10.2
Public Attributes | List of all members
TSK_IMG_INFO Struct Reference

Created when a disk image has been opened and stores general information and handles. More...

#include <tsk_img.h>

Public Attributes

char cache [TSK_IMG_INFO_CACHE_NUM][TSK_IMG_INFO_CACHE_LEN]
 read cache (r/w shared - lock)
 
int cache_age [TSK_IMG_INFO_CACHE_NUM]
 "Age" of corresponding cache entry, higher means more recently used (r/w shared - lock)
 
size_t cache_len [TSK_IMG_INFO_CACHE_NUM]
 Length of cache entry used (0 if never used) (r/w shared - lock)
 
tsk_lock_t cache_lock
 Lock for cache and associated values.
 
TSK_OFF_T cache_off [TSK_IMG_INFO_CACHE_NUM]
 starting byte offset of corresponding cache entry (r/w shared - lock)
 
void(* close )(TSK_IMG_INFO *)
 
TSK_TCHAR ** images
 Image names.
 
void(* imgstat )(TSK_IMG_INFO *, FILE *)
 Pointer to file type specific function.
 
TSK_IMG_TYPE_ENUM itype
 Type of disk image format.
 
int num_img
 Number of image files.
 
unsigned int page_size
 page size of NAND page in bytes (defaults to 2048)
 
ssize_t(* read )(TSK_IMG_INFO *img, TSK_OFF_T off, char *buf, size_t len)
 
unsigned int sector_size
 sector size of device in bytes (typically 512)
 
TSK_OFF_T size
 Total size of image in bytes.
 
unsigned int spare_size
 spare or OOB size of NAND in bytes (defaults to 64)
 
uint32_t tag
 Set to TSK_IMG_INFO_TAG when struct is alloc.
 

Detailed Description

Created when a disk image has been opened and stores general information and handles.


The documentation for this struct was generated from the following file:

Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.