Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
S
Sleuthkit
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Iterations
Requirements
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Locked files
Build
Pipelines
Jobs
Pipeline schedules
Test cases
Artifacts
Deploy
Releases
Package registry
Model registry
Operate
Environments
Terraform modules
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Code review analytics
Issue analytics
Insights
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
IRT
Sleuthkit
Commits
7eb541f3
Commit
7eb541f3
authored
7 years ago
by
Ann Priestman
Browse files
Options
Downloads
Patches
Plain Diff
Cleanup
parent
9132b271
No related branches found
No related tags found
No related merge requests found
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
bindings/java/src/org/sleuthkit/datamodel/SleuthkitJNI.java
+1
-1
1 addition, 1 deletion
bindings/java/src/org/sleuthkit/datamodel/SleuthkitJNI.java
tsk/auto/auto_db.cpp
+3
-3
3 additions, 3 deletions
tsk/auto/auto_db.cpp
with
4 additions
and
4 deletions
bindings/java/src/org/sleuthkit/datamodel/SleuthkitJNI.java
+
1
−
1
View file @
7eb541f3
...
@@ -1195,7 +1195,7 @@ public static boolean isImageSupported(String imagePath) {
...
@@ -1195,7 +1195,7 @@ public static boolean isImageSupported(String imagePath) {
private
static
native
long
initAddImgNat
(
long
db
,
String
timezone
,
boolean
addUnallocSpace
,
boolean
skipFatFsOrphans
)
throws
TskCoreException
;
private
static
native
long
initAddImgNat
(
long
db
,
String
timezone
,
boolean
addUnallocSpace
,
boolean
skipFatFsOrphans
)
throws
TskCoreException
;
private
static
native
long
initializeAddImgNat
(
long
db
,
String
timezone
,
boolean
addFileSystems
,
boolean
addUnallocSpace
,
boolean
skipFatFsOrphans
)
throws
TskCoreException
;
private
static
native
long
initializeAddImgNat
(
long
db
,
String
timezone
,
boolean
addFileSystems
,
boolean
addUnallocSpace
,
boolean
skipFatFsOrphans
)
throws
TskCoreException
;
private
static
native
void
runOpenAndAddImgNat
(
long
process
,
String
deviceId
,
String
[]
imgPath
,
int
splits
,
String
timezone
)
throws
TskCoreException
,
TskDataException
;
private
static
native
void
runOpenAndAddImgNat
(
long
process
,
String
deviceId
,
String
[]
imgPath
,
int
splits
,
String
timezone
)
throws
TskCoreException
,
TskDataException
;
private
static
native
void
runAddImgNat
(
long
process
,
String
deviceId
,
long
a_img_info
,
String
timeZone
,
String
imageWriterPath
)
throws
TskCoreException
,
TskDataException
;
private
static
native
void
runAddImgNat
(
long
process
,
String
deviceId
,
long
a_img_info
,
String
timeZone
,
String
imageWriterPath
)
throws
TskCoreException
,
TskDataException
;
...
...
This diff is collapsed.
Click to expand it.
tsk/auto/auto_db.cpp
+
3
−
3
View file @
7eb541f3
...
@@ -904,7 +904,7 @@ TSK_WALK_RET_ENUM TskAutoDb::fsWalkUnallocBlocksCb(const TSK_FS_BLOCK *a_block,
...
@@ -904,7 +904,7 @@ TSK_WALK_RET_ENUM TskAutoDb::fsWalkUnallocBlocksCb(const TSK_FS_BLOCK *a_block,
// We want to keep consecutive blocks in the same run, so simply update prevBlock and the size
// We want to keep consecutive blocks in the same run, so simply update prevBlock and the size
// if this one is consecutive with the last call. But, if we have hit the max chunk
// if this one is consecutive with the last call. But, if we have hit the max chunk
// size, then break up this set of consecutive blocks.
// size, then break up this set of consecutive blocks.
if
((
a_block
->
addr
==
unallocBlockWlkTrack
->
prevBlock
+
1
)
&&
((
unallocBlockWlkTrack
->
m
in
ChunkSize
<=
0
)
||
if
((
a_block
->
addr
==
unallocBlockWlkTrack
->
prevBlock
+
1
)
&&
((
unallocBlockWlkTrack
->
m
ax
ChunkSize
<=
0
)
||
(
unallocBlockWlkTrack
->
size
<
unallocBlockWlkTrack
->
maxChunkSize
)))
{
(
unallocBlockWlkTrack
->
size
<
unallocBlockWlkTrack
->
maxChunkSize
)))
{
unallocBlockWlkTrack
->
prevBlock
=
a_block
->
addr
;
unallocBlockWlkTrack
->
prevBlock
=
a_block
->
addr
;
unallocBlockWlkTrack
->
size
+=
unallocBlockWlkTrack
->
fsInfo
.
block_size
;
unallocBlockWlkTrack
->
size
+=
unallocBlockWlkTrack
->
fsInfo
.
block_size
;
...
@@ -919,10 +919,10 @@ TSK_WALK_RET_ENUM TskAutoDb::fsWalkUnallocBlocksCb(const TSK_FS_BLOCK *a_block,
...
@@ -919,10 +919,10 @@ TSK_WALK_RET_ENUM TskAutoDb::fsWalkUnallocBlocksCb(const TSK_FS_BLOCK *a_block,
unallocBlockWlkTrack
->
ranges
.
push_back
(
TSK_DB_FILE_LAYOUT_RANGE
(
rangeStartOffset
,
rangeSizeBytes
,
unallocBlockWlkTrack
->
nextSequenceNo
++
));
unallocBlockWlkTrack
->
ranges
.
push_back
(
TSK_DB_FILE_LAYOUT_RANGE
(
rangeStartOffset
,
rangeSizeBytes
,
unallocBlockWlkTrack
->
nextSequenceNo
++
));
// Return (instead of adding this run) if we are going to:
// Return (instead of adding this run) if we are going to:
// a) Make one big file with all unallocated space (
c
hunkSize == 0)
// a) Make one big file with all unallocated space (
minC
hunkSize == 0)
// or
// or
// b) Only make an unallocated file once we have at least chunkSize bytes
// b) Only make an unallocated file once we have at least chunkSize bytes
// of data in our current run (
c
hunkSize > 0)
// of data in our current run (
minC
hunkSize > 0)
// In either case, reset the range pointers and add this block to the size
// In either case, reset the range pointers and add this block to the size
if
((
unallocBlockWlkTrack
->
minChunkSize
==
0
)
||
if
((
unallocBlockWlkTrack
->
minChunkSize
==
0
)
||
((
unallocBlockWlkTrack
->
minChunkSize
>
0
)
&&
((
unallocBlockWlkTrack
->
minChunkSize
>
0
)
&&
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment