19663SMark.Logan@Sun.COM /**
29663SMark.Logan@Sun.COM * ntfscluster - Part of the Linux-NTFS project.
39663SMark.Logan@Sun.COM *
49663SMark.Logan@Sun.COM * Copyright (c) 2002-2003 Richard Russon
59663SMark.Logan@Sun.COM * Copyright (c) 2005 Anton Altaparmakov
69663SMark.Logan@Sun.COM * Copyright (c) 2005-2006 Szabolcs Szakacsits
79663SMark.Logan@Sun.COM *
89663SMark.Logan@Sun.COM * This utility will locate the owner of any given sector or cluster.
99663SMark.Logan@Sun.COM *
109663SMark.Logan@Sun.COM * This program is free software; you can redistribute it and/or modify
119663SMark.Logan@Sun.COM * it under the terms of the GNU General Public License as published by
129663SMark.Logan@Sun.COM * the Free Software Foundation; either version 2 of the License, or
139663SMark.Logan@Sun.COM * (at your option) any later version.
149663SMark.Logan@Sun.COM *
159663SMark.Logan@Sun.COM * This program is distributed in the hope that it will be useful,
169663SMark.Logan@Sun.COM * but WITHOUT ANY WARRANTY; without even the implied warranty of
179663SMark.Logan@Sun.COM * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
189663SMark.Logan@Sun.COM * GNU General Public License for more details.
199663SMark.Logan@Sun.COM *
209663SMark.Logan@Sun.COM * You should have received a copy of the GNU General Public License
219663SMark.Logan@Sun.COM * along with this program (in the main directory of the Linux-NTFS
229663SMark.Logan@Sun.COM * distribution in the file COPYING); if not, write to the Free Software
239663SMark.Logan@Sun.COM * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
249663SMark.Logan@Sun.COM */
259663SMark.Logan@Sun.COM
269663SMark.Logan@Sun.COM #include "config.h"
279663SMark.Logan@Sun.COM
289663SMark.Logan@Sun.COM #ifdef HAVE_STDIO_H
299663SMark.Logan@Sun.COM #include <stdio.h>
309663SMark.Logan@Sun.COM #endif
319663SMark.Logan@Sun.COM #ifdef HAVE_GETOPT_H
329663SMark.Logan@Sun.COM #include <getopt.h>
339663SMark.Logan@Sun.COM #endif
349663SMark.Logan@Sun.COM #ifdef HAVE_STDLIB_H
359663SMark.Logan@Sun.COM #include <stdlib.h>
369663SMark.Logan@Sun.COM #endif
379663SMark.Logan@Sun.COM #ifdef HAVE_STRING_H
389663SMark.Logan@Sun.COM #include <string.h>
399663SMark.Logan@Sun.COM #endif
409663SMark.Logan@Sun.COM #ifdef HAVE_LIMITS_H
419663SMark.Logan@Sun.COM #include <limits.h>
429663SMark.Logan@Sun.COM #endif
439663SMark.Logan@Sun.COM
44*10465SMark.Logan@Sun.COM #include "compat.h"
459663SMark.Logan@Sun.COM #include "ntfscluster.h"
469663SMark.Logan@Sun.COM #include "types.h"
479663SMark.Logan@Sun.COM #include "attrib.h"
489663SMark.Logan@Sun.COM #include "utils.h"
499663SMark.Logan@Sun.COM #include "volume.h"
509663SMark.Logan@Sun.COM #include "debug.h"
519663SMark.Logan@Sun.COM #include "dir.h"
529663SMark.Logan@Sun.COM #include "cluster.h"
539663SMark.Logan@Sun.COM #include "version.h"
549663SMark.Logan@Sun.COM #include "logging.h"
559663SMark.Logan@Sun.COM
569663SMark.Logan@Sun.COM static const char *EXEC_NAME = "ntfscluster";
579663SMark.Logan@Sun.COM static struct options opts;
589663SMark.Logan@Sun.COM
599663SMark.Logan@Sun.COM /**
609663SMark.Logan@Sun.COM * version - Print version information about the program
619663SMark.Logan@Sun.COM *
629663SMark.Logan@Sun.COM * Print a copyright statement and a brief description of the program.
639663SMark.Logan@Sun.COM *
649663SMark.Logan@Sun.COM * Return: none
659663SMark.Logan@Sun.COM */
version(void)669663SMark.Logan@Sun.COM static void version(void)
679663SMark.Logan@Sun.COM {
689663SMark.Logan@Sun.COM ntfs_log_info("\n%s v%s (libntfs %s) - Find the owner of any given sector or "
699663SMark.Logan@Sun.COM "cluster.\n\n", EXEC_NAME, VERSION,
709663SMark.Logan@Sun.COM ntfs_libntfs_version());
719663SMark.Logan@Sun.COM ntfs_log_info("Copyright (c) 2002-2003 Richard Russon\n");
729663SMark.Logan@Sun.COM ntfs_log_info("Copyright (c) 2005 Anton Altaparmakov\n");
739663SMark.Logan@Sun.COM ntfs_log_info("Copyright (c) 2005-2006 Szabolcs Szakacsits\n");
749663SMark.Logan@Sun.COM ntfs_log_info("\n%s\n%s%s\n", ntfs_gpl, ntfs_bugs, ntfs_home);
759663SMark.Logan@Sun.COM }
769663SMark.Logan@Sun.COM
779663SMark.Logan@Sun.COM /**
789663SMark.Logan@Sun.COM * usage - Print a list of the parameters to the program
799663SMark.Logan@Sun.COM *
809663SMark.Logan@Sun.COM * Print a list of the parameters and options for the program.
819663SMark.Logan@Sun.COM *
829663SMark.Logan@Sun.COM * Return: none
839663SMark.Logan@Sun.COM */
usage(void)849663SMark.Logan@Sun.COM static void usage(void)
859663SMark.Logan@Sun.COM {
869663SMark.Logan@Sun.COM ntfs_log_info("\nUsage: %s [options] device\n"
879663SMark.Logan@Sun.COM " -i, --info Print information about the volume (default)\n"
889663SMark.Logan@Sun.COM "\n"
899663SMark.Logan@Sun.COM " -c, --cluster RANGE Look for objects in this range of clusters\n"
909663SMark.Logan@Sun.COM " -s, --sector RANGE Look for objects in this range of sectors\n"
919663SMark.Logan@Sun.COM " -I, --inode NUM Show information about this inode\n"
929663SMark.Logan@Sun.COM " -F, --filename NAME Show information about this file\n"
939663SMark.Logan@Sun.COM /* " -l, --last Find the last file on the volume\n" */
949663SMark.Logan@Sun.COM "\n"
959663SMark.Logan@Sun.COM " -f, --force Use less caution\n"
969663SMark.Logan@Sun.COM " -q, --quiet Less output\n"
979663SMark.Logan@Sun.COM " -v, --verbose More output\n"
989663SMark.Logan@Sun.COM " -V, --version Version information\n"
999663SMark.Logan@Sun.COM " -h, --help Print this help\n\n",
1009663SMark.Logan@Sun.COM EXEC_NAME);
1019663SMark.Logan@Sun.COM ntfs_log_info("%s%s\n", ntfs_bugs, ntfs_home);
1029663SMark.Logan@Sun.COM }
1039663SMark.Logan@Sun.COM
1049663SMark.Logan@Sun.COM /**
1059663SMark.Logan@Sun.COM * parse_options - Read and validate the programs command line
1069663SMark.Logan@Sun.COM *
1079663SMark.Logan@Sun.COM * Read the command line, verify the syntax and parse the options.
1089663SMark.Logan@Sun.COM * This function is very long, but quite simple.
1099663SMark.Logan@Sun.COM *
1109663SMark.Logan@Sun.COM * Return: 1 Success
1119663SMark.Logan@Sun.COM * 0 Error, one or more problems
1129663SMark.Logan@Sun.COM */
parse_options(int argc,char ** argv)1139663SMark.Logan@Sun.COM static int parse_options(int argc, char **argv)
1149663SMark.Logan@Sun.COM {
1159663SMark.Logan@Sun.COM static const char *sopt = "-c:F:fh?I:ilqs:vV";
1169663SMark.Logan@Sun.COM static const struct option lopt[] = {
1179663SMark.Logan@Sun.COM { "cluster", required_argument, NULL, 'c' },
1189663SMark.Logan@Sun.COM { "filename", required_argument, NULL, 'F' },
1199663SMark.Logan@Sun.COM { "force", no_argument, NULL, 'f' },
1209663SMark.Logan@Sun.COM { "help", no_argument, NULL, 'h' },
1219663SMark.Logan@Sun.COM { "info", no_argument, NULL, 'i' },
1229663SMark.Logan@Sun.COM { "inode", required_argument, NULL, 'I' },
1239663SMark.Logan@Sun.COM { "last", no_argument, NULL, 'l' },
1249663SMark.Logan@Sun.COM { "quiet", no_argument, NULL, 'q' },
1259663SMark.Logan@Sun.COM { "sector", required_argument, NULL, 's' },
1269663SMark.Logan@Sun.COM { "verbose", no_argument, NULL, 'v' },
1279663SMark.Logan@Sun.COM { "version", no_argument, NULL, 'V' },
1289663SMark.Logan@Sun.COM { NULL, 0, NULL, 0 }
1299663SMark.Logan@Sun.COM };
1309663SMark.Logan@Sun.COM
1319663SMark.Logan@Sun.COM int c = -1;
1329663SMark.Logan@Sun.COM int err = 0;
1339663SMark.Logan@Sun.COM int ver = 0;
1349663SMark.Logan@Sun.COM int help = 0;
1359663SMark.Logan@Sun.COM int levels = 0;
1369663SMark.Logan@Sun.COM char *end = NULL;
1379663SMark.Logan@Sun.COM
1389663SMark.Logan@Sun.COM opterr = 0; /* We'll handle the errors, thank you. */
1399663SMark.Logan@Sun.COM
1409663SMark.Logan@Sun.COM opts.action = act_none;
1419663SMark.Logan@Sun.COM opts.range_begin = -1;
1429663SMark.Logan@Sun.COM opts.range_end = -1;
1439663SMark.Logan@Sun.COM
1449663SMark.Logan@Sun.COM while ((c = getopt_long(argc, argv, sopt, lopt, NULL)) != -1) {
1459663SMark.Logan@Sun.COM switch (c) {
1469663SMark.Logan@Sun.COM case 1: /* A non-option argument */
1479663SMark.Logan@Sun.COM if (!opts.device) {
1489663SMark.Logan@Sun.COM opts.device = argv[optind-1];
1499663SMark.Logan@Sun.COM } else {
1509663SMark.Logan@Sun.COM opts.device = NULL;
1519663SMark.Logan@Sun.COM err++;
1529663SMark.Logan@Sun.COM }
1539663SMark.Logan@Sun.COM break;
1549663SMark.Logan@Sun.COM
1559663SMark.Logan@Sun.COM case 'c':
1569663SMark.Logan@Sun.COM if ((opts.action == act_none) &&
1579663SMark.Logan@Sun.COM (utils_parse_range(optarg, &opts.range_begin, &opts.range_end, FALSE)))
1589663SMark.Logan@Sun.COM opts.action = act_cluster;
1599663SMark.Logan@Sun.COM else
1609663SMark.Logan@Sun.COM opts.action = act_error;
1619663SMark.Logan@Sun.COM break;
1629663SMark.Logan@Sun.COM case 'F':
1639663SMark.Logan@Sun.COM if (opts.action == act_none) {
1649663SMark.Logan@Sun.COM opts.action = act_file;
1659663SMark.Logan@Sun.COM opts.filename = optarg;
1669663SMark.Logan@Sun.COM } else {
1679663SMark.Logan@Sun.COM opts.action = act_error;
1689663SMark.Logan@Sun.COM }
1699663SMark.Logan@Sun.COM break;
1709663SMark.Logan@Sun.COM case 'f':
1719663SMark.Logan@Sun.COM opts.force++;
1729663SMark.Logan@Sun.COM break;
1739663SMark.Logan@Sun.COM case 'h':
1749663SMark.Logan@Sun.COM case '?':
1759663SMark.Logan@Sun.COM if (strncmp (argv[optind-1], "--log-", 6) == 0) {
1769663SMark.Logan@Sun.COM if (!ntfs_log_parse_option (argv[optind-1]))
1779663SMark.Logan@Sun.COM err++;
1789663SMark.Logan@Sun.COM break;
1799663SMark.Logan@Sun.COM }
1809663SMark.Logan@Sun.COM help++;
1819663SMark.Logan@Sun.COM break;
1829663SMark.Logan@Sun.COM case 'I':
1839663SMark.Logan@Sun.COM if (opts.action == act_none) {
1849663SMark.Logan@Sun.COM opts.action = act_inode;
1859663SMark.Logan@Sun.COM opts.inode = strtol(optarg, &end, 0);
1869663SMark.Logan@Sun.COM if (end && *end)
1879663SMark.Logan@Sun.COM err++;
1889663SMark.Logan@Sun.COM } else {
1899663SMark.Logan@Sun.COM opts.action = act_error;
1909663SMark.Logan@Sun.COM }
1919663SMark.Logan@Sun.COM break;
1929663SMark.Logan@Sun.COM case 'i':
1939663SMark.Logan@Sun.COM if (opts.action == act_none)
1949663SMark.Logan@Sun.COM opts.action = act_info;
1959663SMark.Logan@Sun.COM else
1969663SMark.Logan@Sun.COM opts.action = act_error;
1979663SMark.Logan@Sun.COM break;
1989663SMark.Logan@Sun.COM case 'l':
1999663SMark.Logan@Sun.COM if (opts.action == act_none)
2009663SMark.Logan@Sun.COM opts.action = act_last;
2019663SMark.Logan@Sun.COM else
2029663SMark.Logan@Sun.COM opts.action = act_error;
2039663SMark.Logan@Sun.COM break;
2049663SMark.Logan@Sun.COM case 'q':
2059663SMark.Logan@Sun.COM opts.quiet++;
2069663SMark.Logan@Sun.COM ntfs_log_clear_levels(NTFS_LOG_LEVEL_QUIET);
2079663SMark.Logan@Sun.COM break;
2089663SMark.Logan@Sun.COM case 's':
2099663SMark.Logan@Sun.COM if ((opts.action == act_none) &&
2109663SMark.Logan@Sun.COM (utils_parse_range(optarg, &opts.range_begin, &opts.range_end, FALSE)))
2119663SMark.Logan@Sun.COM opts.action = act_sector;
2129663SMark.Logan@Sun.COM else
2139663SMark.Logan@Sun.COM opts.action = act_error;
2149663SMark.Logan@Sun.COM break;
2159663SMark.Logan@Sun.COM case 'v':
2169663SMark.Logan@Sun.COM opts.verbose++;
2179663SMark.Logan@Sun.COM ntfs_log_set_levels(NTFS_LOG_LEVEL_VERBOSE);
2189663SMark.Logan@Sun.COM break;
2199663SMark.Logan@Sun.COM case 'V':
2209663SMark.Logan@Sun.COM ver++;
2219663SMark.Logan@Sun.COM break;
2229663SMark.Logan@Sun.COM default:
2239663SMark.Logan@Sun.COM if ((optopt == 'c') || (optopt == 's'))
2249663SMark.Logan@Sun.COM ntfs_log_error("Option '%s' requires an argument.\n", argv[optind-1]);
2259663SMark.Logan@Sun.COM else
2269663SMark.Logan@Sun.COM ntfs_log_error("Unknown option '%s'.\n", argv[optind-1]);
2279663SMark.Logan@Sun.COM err++;
2289663SMark.Logan@Sun.COM break;
2299663SMark.Logan@Sun.COM }
2309663SMark.Logan@Sun.COM }
2319663SMark.Logan@Sun.COM
2329663SMark.Logan@Sun.COM /* Make sure we're in sync with the log levels */
2339663SMark.Logan@Sun.COM levels = ntfs_log_get_levels();
2349663SMark.Logan@Sun.COM if (levels & NTFS_LOG_LEVEL_VERBOSE)
2359663SMark.Logan@Sun.COM opts.verbose++;
2369663SMark.Logan@Sun.COM if (!(levels & NTFS_LOG_LEVEL_QUIET))
2379663SMark.Logan@Sun.COM opts.quiet++;
2389663SMark.Logan@Sun.COM
2399663SMark.Logan@Sun.COM if (help || ver) {
2409663SMark.Logan@Sun.COM opts.quiet = 0;
2419663SMark.Logan@Sun.COM } else {
2429663SMark.Logan@Sun.COM if (opts.action == act_none)
2439663SMark.Logan@Sun.COM opts.action = act_info;
2449663SMark.Logan@Sun.COM if (opts.action == act_info)
2459663SMark.Logan@Sun.COM opts.quiet = 0;
2469663SMark.Logan@Sun.COM
2479663SMark.Logan@Sun.COM if (opts.device == NULL) {
2489663SMark.Logan@Sun.COM if (argc > 1)
2499663SMark.Logan@Sun.COM ntfs_log_error("You must specify exactly one device.\n");
2509663SMark.Logan@Sun.COM err++;
2519663SMark.Logan@Sun.COM }
2529663SMark.Logan@Sun.COM
2539663SMark.Logan@Sun.COM if (opts.quiet && opts.verbose) {
2549663SMark.Logan@Sun.COM ntfs_log_error("You may not use --quiet and --verbose at the same time.\n");
2559663SMark.Logan@Sun.COM err++;
2569663SMark.Logan@Sun.COM }
2579663SMark.Logan@Sun.COM
2589663SMark.Logan@Sun.COM if (opts.action == act_error) {
2599663SMark.Logan@Sun.COM ntfs_log_error("You may only specify one action: --info, --cluster, --sector or --last.\n");
2609663SMark.Logan@Sun.COM err++;
2619663SMark.Logan@Sun.COM } else if (opts.range_begin > opts.range_end) {
2629663SMark.Logan@Sun.COM ntfs_log_error("The range must be in ascending order.\n");
2639663SMark.Logan@Sun.COM err++;
2649663SMark.Logan@Sun.COM }
2659663SMark.Logan@Sun.COM }
2669663SMark.Logan@Sun.COM
2679663SMark.Logan@Sun.COM if (ver)
2689663SMark.Logan@Sun.COM version();
2699663SMark.Logan@Sun.COM if (help || err)
2709663SMark.Logan@Sun.COM usage();
2719663SMark.Logan@Sun.COM
2729663SMark.Logan@Sun.COM return (!err && !help && !ver);
2739663SMark.Logan@Sun.COM }
2749663SMark.Logan@Sun.COM
2759663SMark.Logan@Sun.COM
2769663SMark.Logan@Sun.COM /**
2779663SMark.Logan@Sun.COM * info
2789663SMark.Logan@Sun.COM */
info(ntfs_volume * vol)2799663SMark.Logan@Sun.COM static int info(ntfs_volume *vol)
2809663SMark.Logan@Sun.COM {
2819663SMark.Logan@Sun.COM u64 a, b, c, d, e, f, g, h, i, j, k, l, m, n, o, p, q, r, s, t, u;
2829663SMark.Logan@Sun.COM int cb, sb, cps;
2839663SMark.Logan@Sun.COM u64 uc = 0, mc = 0, fc = 0;
2849663SMark.Logan@Sun.COM
2859663SMark.Logan@Sun.COM struct mft_search_ctx *m_ctx;
2869663SMark.Logan@Sun.COM ntfs_attr_search_ctx *a_ctx;
2879663SMark.Logan@Sun.COM runlist_element *rl;
2889663SMark.Logan@Sun.COM ATTR_RECORD *rec;
2899663SMark.Logan@Sun.COM int z;
2909663SMark.Logan@Sun.COM int inuse = 0;
2919663SMark.Logan@Sun.COM
2929663SMark.Logan@Sun.COM m_ctx = mft_get_search_ctx(vol);
2939663SMark.Logan@Sun.COM m_ctx->flags_search = FEMR_IN_USE | FEMR_METADATA | FEMR_BASE_RECORD | FEMR_NOT_BASE_RECORD;
2949663SMark.Logan@Sun.COM while (mft_next_record(m_ctx) == 0) {
2959663SMark.Logan@Sun.COM
2969663SMark.Logan@Sun.COM if (!(m_ctx->flags_match & FEMR_IN_USE))
2979663SMark.Logan@Sun.COM continue;
2989663SMark.Logan@Sun.COM
2999663SMark.Logan@Sun.COM inuse++;
3009663SMark.Logan@Sun.COM
3019663SMark.Logan@Sun.COM a_ctx = ntfs_attr_get_search_ctx(m_ctx->inode, NULL);
3029663SMark.Logan@Sun.COM
3039663SMark.Logan@Sun.COM while ((rec = find_attribute(AT_UNUSED, a_ctx))) {
3049663SMark.Logan@Sun.COM
3059663SMark.Logan@Sun.COM if (!rec->non_resident)
3069663SMark.Logan@Sun.COM continue;
3079663SMark.Logan@Sun.COM
3089663SMark.Logan@Sun.COM rl = ntfs_mapping_pairs_decompress(vol, rec, NULL);
3099663SMark.Logan@Sun.COM
3109663SMark.Logan@Sun.COM for (z = 0; rl[z].length > 0; z++)
3119663SMark.Logan@Sun.COM {
3129663SMark.Logan@Sun.COM if (rl[z].lcn >= 0) {
3139663SMark.Logan@Sun.COM if (m_ctx->flags_match & FEMR_METADATA)
3149663SMark.Logan@Sun.COM mc += rl[z].length;
3159663SMark.Logan@Sun.COM else
3169663SMark.Logan@Sun.COM uc += rl[z].length;
3179663SMark.Logan@Sun.COM }
3189663SMark.Logan@Sun.COM
3199663SMark.Logan@Sun.COM }
3209663SMark.Logan@Sun.COM
3219663SMark.Logan@Sun.COM free(rl);
3229663SMark.Logan@Sun.COM }
3239663SMark.Logan@Sun.COM
3249663SMark.Logan@Sun.COM ntfs_attr_put_search_ctx(a_ctx);
3259663SMark.Logan@Sun.COM }
3269663SMark.Logan@Sun.COM mft_put_search_ctx(m_ctx);
3279663SMark.Logan@Sun.COM
3289663SMark.Logan@Sun.COM cb = vol->cluster_size_bits;
3299663SMark.Logan@Sun.COM sb = vol->sector_size_bits;
3309663SMark.Logan@Sun.COM cps = cb - sb;
3319663SMark.Logan@Sun.COM
3329663SMark.Logan@Sun.COM fc = vol->nr_clusters-mc-uc;
3339663SMark.Logan@Sun.COM fc <<= cb;
3349663SMark.Logan@Sun.COM mc <<= cb;
3359663SMark.Logan@Sun.COM uc <<= cb;
3369663SMark.Logan@Sun.COM
3379663SMark.Logan@Sun.COM a = vol->sector_size;
3389663SMark.Logan@Sun.COM b = vol->cluster_size;
3399663SMark.Logan@Sun.COM c = 1 << cps;
3409663SMark.Logan@Sun.COM d = vol->nr_clusters << cb;
3419663SMark.Logan@Sun.COM e = vol->nr_clusters;
3429663SMark.Logan@Sun.COM f = vol->nr_clusters >> cps;
3439663SMark.Logan@Sun.COM g = vol->mft_na->initialized_size >> vol->mft_record_size_bits;
3449663SMark.Logan@Sun.COM h = inuse;
3459663SMark.Logan@Sun.COM i = h * 100 / g;
3469663SMark.Logan@Sun.COM j = fc;
3479663SMark.Logan@Sun.COM k = fc >> sb;
3489663SMark.Logan@Sun.COM l = fc >> cb;
3499663SMark.Logan@Sun.COM m = fc * 100 / b / e;
3509663SMark.Logan@Sun.COM n = uc;
3519663SMark.Logan@Sun.COM o = uc >> sb;
3529663SMark.Logan@Sun.COM p = uc >> cb;
3539663SMark.Logan@Sun.COM q = uc * 100 / b / e;
3549663SMark.Logan@Sun.COM r = mc;
3559663SMark.Logan@Sun.COM s = mc >> sb;
3569663SMark.Logan@Sun.COM t = mc >> cb;
3579663SMark.Logan@Sun.COM u = mc * 100 / b / e;
3589663SMark.Logan@Sun.COM
3599663SMark.Logan@Sun.COM ntfs_log_info("bytes per sector : %llu\n", (unsigned long long)a);
3609663SMark.Logan@Sun.COM ntfs_log_info("bytes per cluster : %llu\n", (unsigned long long)b);
3619663SMark.Logan@Sun.COM ntfs_log_info("sectors per cluster : %llu\n", (unsigned long long)c);
3629663SMark.Logan@Sun.COM ntfs_log_info("bytes per volume : %llu\n", (unsigned long long)d);
3639663SMark.Logan@Sun.COM ntfs_log_info("sectors per volume : %llu\n", (unsigned long long)e);
3649663SMark.Logan@Sun.COM ntfs_log_info("clusters per volume : %llu\n", (unsigned long long)f);
3659663SMark.Logan@Sun.COM ntfs_log_info("initialized mft records : %llu\n", (unsigned long long)g);
3669663SMark.Logan@Sun.COM ntfs_log_info("mft records in use : %llu\n", (unsigned long long)h);
3679663SMark.Logan@Sun.COM ntfs_log_info("mft records percentage : %llu\n", (unsigned long long)i);
3689663SMark.Logan@Sun.COM ntfs_log_info("bytes of free space : %llu\n", (unsigned long long)j);
3699663SMark.Logan@Sun.COM ntfs_log_info("sectors of free space : %llu\n", (unsigned long long)k);
3709663SMark.Logan@Sun.COM ntfs_log_info("clusters of free space : %llu\n", (unsigned long long)l);
3719663SMark.Logan@Sun.COM ntfs_log_info("percentage free space : %llu\n", (unsigned long long)m);
3729663SMark.Logan@Sun.COM ntfs_log_info("bytes of user data : %llu\n", (unsigned long long)n);
3739663SMark.Logan@Sun.COM ntfs_log_info("sectors of user data : %llu\n", (unsigned long long)o);
3749663SMark.Logan@Sun.COM ntfs_log_info("clusters of user data : %llu\n", (unsigned long long)p);
3759663SMark.Logan@Sun.COM ntfs_log_info("percentage user data : %llu\n", (unsigned long long)q);
3769663SMark.Logan@Sun.COM ntfs_log_info("bytes of metadata : %llu\n", (unsigned long long)r);
3779663SMark.Logan@Sun.COM ntfs_log_info("sectors of metadata : %llu\n", (unsigned long long)s);
3789663SMark.Logan@Sun.COM ntfs_log_info("clusters of metadata : %llu\n", (unsigned long long)t);
3799663SMark.Logan@Sun.COM ntfs_log_info("percentage metadata : %llu\n", (unsigned long long)u);
3809663SMark.Logan@Sun.COM
3819663SMark.Logan@Sun.COM return 0;
3829663SMark.Logan@Sun.COM }
3839663SMark.Logan@Sun.COM
3849663SMark.Logan@Sun.COM /**
3859663SMark.Logan@Sun.COM * dump_file
3869663SMark.Logan@Sun.COM */
dump_file(ntfs_volume * vol,ntfs_inode * ino)3879663SMark.Logan@Sun.COM static int dump_file(ntfs_volume *vol, ntfs_inode *ino)
3889663SMark.Logan@Sun.COM {
3899663SMark.Logan@Sun.COM char buffer[1024];
3909663SMark.Logan@Sun.COM ntfs_attr_search_ctx *ctx;
3919663SMark.Logan@Sun.COM ATTR_RECORD *rec;
3929663SMark.Logan@Sun.COM int i;
3939663SMark.Logan@Sun.COM runlist *runs;
3949663SMark.Logan@Sun.COM
3959663SMark.Logan@Sun.COM utils_inode_get_name(ino, buffer, sizeof(buffer));
3969663SMark.Logan@Sun.COM
3979663SMark.Logan@Sun.COM ntfs_log_info("Dump: %s\n", buffer);
3989663SMark.Logan@Sun.COM
3999663SMark.Logan@Sun.COM ctx = ntfs_attr_get_search_ctx(ino, NULL);
4009663SMark.Logan@Sun.COM
4019663SMark.Logan@Sun.COM while ((rec = find_attribute(AT_UNUSED, ctx))) {
4029663SMark.Logan@Sun.COM ntfs_log_info(" 0x%02x - ", rec->type);
4039663SMark.Logan@Sun.COM if (rec->non_resident) {
4049663SMark.Logan@Sun.COM ntfs_log_info("non-resident\n");
4059663SMark.Logan@Sun.COM runs = ntfs_mapping_pairs_decompress(vol, rec, NULL);
4069663SMark.Logan@Sun.COM if (runs) {
4079663SMark.Logan@Sun.COM ntfs_log_info(" VCN LCN Length\n");
4089663SMark.Logan@Sun.COM for (i = 0; runs[i].length > 0; i++) {
4099663SMark.Logan@Sun.COM ntfs_log_info(" %8lld %8lld %8lld\n",
4109663SMark.Logan@Sun.COM (long long)runs[i].vcn,
4119663SMark.Logan@Sun.COM (long long)runs[i].lcn,
4129663SMark.Logan@Sun.COM (long long)
4139663SMark.Logan@Sun.COM runs[i].length);
4149663SMark.Logan@Sun.COM }
4159663SMark.Logan@Sun.COM free(runs);
4169663SMark.Logan@Sun.COM }
4179663SMark.Logan@Sun.COM } else {
4189663SMark.Logan@Sun.COM ntfs_log_info("resident\n");
4199663SMark.Logan@Sun.COM }
4209663SMark.Logan@Sun.COM }
4219663SMark.Logan@Sun.COM
4229663SMark.Logan@Sun.COM ntfs_attr_put_search_ctx(ctx);
4239663SMark.Logan@Sun.COM return 0;
4249663SMark.Logan@Sun.COM }
4259663SMark.Logan@Sun.COM
4269663SMark.Logan@Sun.COM /**
4279663SMark.Logan@Sun.COM * print_match
4289663SMark.Logan@Sun.COM */
print_match(ntfs_inode * ino,ATTR_RECORD * attr,runlist_element * run,void * data)4299663SMark.Logan@Sun.COM static int print_match(ntfs_inode *ino, ATTR_RECORD *attr,
4309663SMark.Logan@Sun.COM runlist_element *run, void *data __attribute__((unused)))
4319663SMark.Logan@Sun.COM {
4329663SMark.Logan@Sun.COM char *buffer;
4339663SMark.Logan@Sun.COM
4349663SMark.Logan@Sun.COM if (!ino || !attr || !run)
4359663SMark.Logan@Sun.COM return 1;
4369663SMark.Logan@Sun.COM
4379663SMark.Logan@Sun.COM buffer = malloc(MAX_PATH);
4389663SMark.Logan@Sun.COM if (!buffer) {
4399663SMark.Logan@Sun.COM ntfs_log_error("!buffer\n");
4409663SMark.Logan@Sun.COM return 1;
4419663SMark.Logan@Sun.COM }
4429663SMark.Logan@Sun.COM
4439663SMark.Logan@Sun.COM utils_inode_get_name(ino, buffer, MAX_PATH);
4449663SMark.Logan@Sun.COM ntfs_log_info("Inode %llu %s", (unsigned long long)ino->mft_no, buffer);
4459663SMark.Logan@Sun.COM
4469663SMark.Logan@Sun.COM utils_attr_get_name(ino->vol, attr, buffer, MAX_PATH);
4479663SMark.Logan@Sun.COM ntfs_log_info("/%s\n", buffer);
4489663SMark.Logan@Sun.COM
4499663SMark.Logan@Sun.COM free(buffer);
4509663SMark.Logan@Sun.COM return 0;
4519663SMark.Logan@Sun.COM }
4529663SMark.Logan@Sun.COM
4539663SMark.Logan@Sun.COM /**
4549663SMark.Logan@Sun.COM * find_last
4559663SMark.Logan@Sun.COM */
find_last(ntfs_inode * ino,ATTR_RECORD * attr,runlist_element * run,void * data)4569663SMark.Logan@Sun.COM static int find_last(ntfs_inode *ino, ATTR_RECORD *attr, runlist_element *run,
4579663SMark.Logan@Sun.COM void *data)
4589663SMark.Logan@Sun.COM {
4599663SMark.Logan@Sun.COM struct match *m;
4609663SMark.Logan@Sun.COM
4619663SMark.Logan@Sun.COM if (!ino || !attr || !run || !data)
4629663SMark.Logan@Sun.COM return 1;
4639663SMark.Logan@Sun.COM
4649663SMark.Logan@Sun.COM m = data;
4659663SMark.Logan@Sun.COM
4669663SMark.Logan@Sun.COM if ((run->lcn + run->length) > m->lcn) {
4679663SMark.Logan@Sun.COM m->inum = ino->mft_no;
4689663SMark.Logan@Sun.COM m->lcn = run->lcn + run->length;
4699663SMark.Logan@Sun.COM }
4709663SMark.Logan@Sun.COM
4719663SMark.Logan@Sun.COM return 0;
4729663SMark.Logan@Sun.COM }
4739663SMark.Logan@Sun.COM
4749663SMark.Logan@Sun.COM /**
4759663SMark.Logan@Sun.COM * main - Begin here
4769663SMark.Logan@Sun.COM *
4779663SMark.Logan@Sun.COM * Start from here.
4789663SMark.Logan@Sun.COM *
4799663SMark.Logan@Sun.COM * Return: 0 Success, the program worked
4809663SMark.Logan@Sun.COM * 1 Error, something went wrong
4819663SMark.Logan@Sun.COM */
main(int argc,char * argv[])4829663SMark.Logan@Sun.COM int main(int argc, char *argv[])
4839663SMark.Logan@Sun.COM {
4849663SMark.Logan@Sun.COM ntfs_volume *vol;
4859663SMark.Logan@Sun.COM ntfs_inode *ino = NULL;
4869663SMark.Logan@Sun.COM struct match m;
4879663SMark.Logan@Sun.COM int result = 1;
4889663SMark.Logan@Sun.COM
4899663SMark.Logan@Sun.COM ntfs_log_set_handler(ntfs_log_handler_outerr);
4909663SMark.Logan@Sun.COM
4919663SMark.Logan@Sun.COM if (!parse_options(argc, argv))
4929663SMark.Logan@Sun.COM return 1;
4939663SMark.Logan@Sun.COM
4949663SMark.Logan@Sun.COM utils_set_locale();
4959663SMark.Logan@Sun.COM
4969663SMark.Logan@Sun.COM vol = utils_mount_volume(opts.device, NTFS_MNT_RDONLY |
4979663SMark.Logan@Sun.COM (opts.force ? NTFS_MNT_FORCE : 0));
4989663SMark.Logan@Sun.COM if (!vol)
4999663SMark.Logan@Sun.COM return 1;
5009663SMark.Logan@Sun.COM
5019663SMark.Logan@Sun.COM switch (opts.action) {
5029663SMark.Logan@Sun.COM case act_sector:
5039663SMark.Logan@Sun.COM if (opts.range_begin == opts.range_end)
5049663SMark.Logan@Sun.COM ntfs_log_quiet("Searching for sector %llu\n",
5059663SMark.Logan@Sun.COM (unsigned long long)opts.range_begin);
5069663SMark.Logan@Sun.COM else
5079663SMark.Logan@Sun.COM ntfs_log_quiet("Searching for sector range %llu-%llu\n", (unsigned long long)opts.range_begin, (unsigned long long)opts.range_end);
5089663SMark.Logan@Sun.COM /* Convert to clusters */
5099663SMark.Logan@Sun.COM opts.range_begin >>= (vol->cluster_size_bits - vol->sector_size_bits);
5109663SMark.Logan@Sun.COM opts.range_end >>= (vol->cluster_size_bits - vol->sector_size_bits);
5119663SMark.Logan@Sun.COM result = cluster_find(vol, opts.range_begin, opts.range_end, (cluster_cb*)&print_match, NULL);
5129663SMark.Logan@Sun.COM break;
5139663SMark.Logan@Sun.COM case act_cluster:
5149663SMark.Logan@Sun.COM if (opts.range_begin == opts.range_end)
5159663SMark.Logan@Sun.COM ntfs_log_quiet("Searching for cluster %llu\n",
5169663SMark.Logan@Sun.COM (unsigned long long)opts.range_begin);
5179663SMark.Logan@Sun.COM else
5189663SMark.Logan@Sun.COM ntfs_log_quiet("Searching for cluster range %llu-%llu\n", (unsigned long long)opts.range_begin, (unsigned long long)opts.range_end);
5199663SMark.Logan@Sun.COM result = cluster_find(vol, opts.range_begin, opts.range_end, (cluster_cb*)&print_match, NULL);
5209663SMark.Logan@Sun.COM break;
5219663SMark.Logan@Sun.COM case act_file:
5229663SMark.Logan@Sun.COM ino = ntfs_pathname_to_inode(vol, NULL, opts.filename);
5239663SMark.Logan@Sun.COM if (ino)
5249663SMark.Logan@Sun.COM result = dump_file(vol, ino);
5259663SMark.Logan@Sun.COM break;
5269663SMark.Logan@Sun.COM case act_inode:
5279663SMark.Logan@Sun.COM ino = ntfs_inode_open(vol, opts.inode);
5289663SMark.Logan@Sun.COM if (ino) {
5299663SMark.Logan@Sun.COM result = dump_file(vol, ino);
5309663SMark.Logan@Sun.COM ntfs_inode_close(ino);
5319663SMark.Logan@Sun.COM } else {
5329663SMark.Logan@Sun.COM ntfs_log_error("Cannot open inode %llu\n",
5339663SMark.Logan@Sun.COM (unsigned long long)opts.inode);
5349663SMark.Logan@Sun.COM }
5359663SMark.Logan@Sun.COM break;
5369663SMark.Logan@Sun.COM case act_last:
5379663SMark.Logan@Sun.COM memset(&m, 0, sizeof(m));
5389663SMark.Logan@Sun.COM m.lcn = -1;
5399663SMark.Logan@Sun.COM result = cluster_find(vol, 0, LONG_MAX, (cluster_cb*)&find_last, &m);
5409663SMark.Logan@Sun.COM if (m.lcn >= 0) {
5419663SMark.Logan@Sun.COM ino = ntfs_inode_open(vol, m.inum);
5429663SMark.Logan@Sun.COM if (ino) {
5439663SMark.Logan@Sun.COM result = dump_file(vol, ino);
5449663SMark.Logan@Sun.COM ntfs_inode_close(ino);
5459663SMark.Logan@Sun.COM } else {
5469663SMark.Logan@Sun.COM ntfs_log_error("Cannot open inode %llu\n",
5479663SMark.Logan@Sun.COM (unsigned long long)
5489663SMark.Logan@Sun.COM opts.inode);
5499663SMark.Logan@Sun.COM }
5509663SMark.Logan@Sun.COM result = 0;
5519663SMark.Logan@Sun.COM } else {
5529663SMark.Logan@Sun.COM result = 1;
5539663SMark.Logan@Sun.COM }
5549663SMark.Logan@Sun.COM break;
5559663SMark.Logan@Sun.COM case act_info:
5569663SMark.Logan@Sun.COM default:
5579663SMark.Logan@Sun.COM result = info(vol);
5589663SMark.Logan@Sun.COM break;
5599663SMark.Logan@Sun.COM }
5609663SMark.Logan@Sun.COM
5619663SMark.Logan@Sun.COM ntfs_umount(vol, FALSE);
5629663SMark.Logan@Sun.COM return result;
5639663SMark.Logan@Sun.COM }
5649663SMark.Logan@Sun.COM
5659663SMark.Logan@Sun.COM
566