Also add missing defines about index size and index header for INDEX_ROOT attribute.
Implemented their support in NtfsDumpFileAttributes().

svn path=/trunk/; revision=64233
This commit is contained in:
Pierre Schweitzer 2014-09-22 20:26:21 +00:00
parent d907725b5d
commit cff39969d6
2 changed files with 22 additions and 0 deletions

View file

@ -175,6 +175,16 @@ NtfsDumpIndexRootAttribute(PATTRIBUTE Attribute)
ASSERT(IndexRootAttr->CollationRule == COLLATION_FILE_NAME);
DbgPrint(" $INDEX_ROOT (%uB, %u) ", IndexRootAttr->SizeOfEntry, IndexRootAttr->ClustersPerIndexRecord);
if (IndexRootAttr->Header.Flags == INDEX_ROOT_SMALL)
{
DbgPrint(" (small) ");
}
else
{
ASSERT(IndexRootAttr->Header.Flags == INDEX_ROOT_LARGE);
DbgPrint(" (large) ");
}
}

View file

@ -194,6 +194,8 @@ typedef enum
#define COLLATION_NTOFS_SECURITY_HASH 0x12
#define COLLATION_NTOFS_ULONGS 0x13
#define INDEX_ROOT_SMALL 0x0
#define INDEX_ROOT_LARGE 0x1
typedef struct
{
@ -311,6 +313,15 @@ typedef struct
WCHAR Name[1];
} FILENAME_ATTRIBUTE, *PFILENAME_ATTRIBUTE;
typedef struct
{
ULONG FirstEntryOffset;
ULONG TotalSizeOfEntries;
ULONG AllocatedSize;
UCHAR Flags;
UCHAR Padding[3];
} INDEX_HEADER_ATTRIBUTE, *PINDEX_HEADER_ATTRIBUTE;
typedef struct
{
ULONG AttributeType;
@ -318,6 +329,7 @@ typedef struct
ULONG SizeOfEntry;
UCHAR ClustersPerIndexRecord;
UCHAR Padding[3];
INDEX_HEADER_ATTRIBUTE Header;
} INDEX_ROOT_ATTRIBUTE, *PINDEX_ROOT_ATTRIBUTE;
typedef struct