Page MenuHomePhabricator
Files F4823710

ewf_session.h
No OneTemporary
Actions

Size
1 KB
Referenced Files
None
Subscribers
None

ewf_session.h
View Options

/*
* EWF session section (EWF-E01)
*
* Copyright (c) 2006-2011, Joachim Metz <jbmetz@users.sourceforge.net>
*
* Refer to AUTHORS for acknowledgements.
*
* This software is free software: you can redistribute it and/or modify
* it under the terms of the GNU Lesser General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This software is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with this software. If not, see <http://www.gnu.org/licenses/>.
*/
#if !defined( _EWF_SESSION_H )
#define _EWF_SESSION_H
#include <common.h>
#include <types.h>
#if defined( __cplusplus )
extern "C" {
#endif
typedef struct ewf_session_header ewf_session_header_t;
struct ewf_session_header
{
/* Number of sessions
* consists of 4 bytes
*/
uint8_t number_of_sessions[ 4 ];
/* Unknown
* consists of 28 bytes
* contains 0x00
*/
uint8_t unknown1[ 28 ];
/* The section checksum of all (previous) session data
* consists of 4 bytes (32 bits)
* starts with offset 76
*/
uint8_t checksum[ 4 ];
/* The session entry array
* consists of 32 bytes per sector
* as long as necessary
*/
/* The last session entry is followed by a 4 byte checksum
*/
};
typedef struct ewf_session_entry ewf_session_entry_t;
struct ewf_session_entry
{
/* The type
* consists of 4 bytes
*/
uint8_t type[ 4 ];
/* The first sector of the session
* consists of 4 bytes
*/
uint8_t first_sector[ 4 ];
/* Unknown
* consists of 24 bytes
* contains 0x00
*/
uint8_t unknown2[ 24 ];
};
#if defined( __cplusplus )
}
#endif
#endif

File Metadata

Mime Type
text/x-c
Expires
Sun, May 11, 12:47 PM (1 d, 14 h)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
1247700
Default Alt Text
ewf_session.h (1 KB)

Event Timeline