2012-08-06 21:21:14 +00:00
|
|
|
using System;
|
|
|
|
|
using System.IO;
|
|
|
|
|
using System.Text;
|
|
|
|
|
using FileSystemIDandChk;
|
|
|
|
|
|
|
|
|
|
namespace FileSystemIDandChk.Plugins
|
|
|
|
|
{
|
|
|
|
|
class BFS : Plugin
|
|
|
|
|
{
|
|
|
|
|
private const UInt32 BFS_MAGIC = 0x1BADFACE;
|
|
|
|
|
|
|
|
|
|
public BFS(PluginBase Core)
|
|
|
|
|
{
|
|
|
|
|
base.Name = "UNIX Boot filesystem";
|
|
|
|
|
base.PluginUUID = new Guid("1E6E0DA6-F7E4-494C-80C6-CB5929E96155");
|
|
|
|
|
}
|
|
|
|
|
|
2014-04-14 01:14:20 +00:00
|
|
|
public override bool Identify(ImagePlugins.ImagePlugin imagePlugin, ulong partitionOffset)
|
2012-08-06 21:21:14 +00:00
|
|
|
{
|
|
|
|
|
UInt32 magic;
|
|
|
|
|
|
2014-04-14 01:14:20 +00:00
|
|
|
magic = BitConverter.ToUInt32 (imagePlugin.ReadSector (0 + partitionOffset), 0);
|
2012-08-06 21:21:14 +00:00
|
|
|
|
|
|
|
|
if(magic == BFS_MAGIC)
|
|
|
|
|
return true;
|
|
|
|
|
else
|
|
|
|
|
return false;
|
|
|
|
|
}
|
|
|
|
|
|
2014-04-14 01:14:20 +00:00
|
|
|
public override void GetInformation (ImagePlugins.ImagePlugin imagePlugin, ulong partitionOffset, out string information)
|
2012-08-06 21:21:14 +00:00
|
|
|
{
|
|
|
|
|
information = "";
|
|
|
|
|
|
|
|
|
|
StringBuilder sb = new StringBuilder();
|
2014-04-14 01:14:20 +00:00
|
|
|
byte[] bfs_sb_sector = imagePlugin.ReadSector (0 + partitionOffset);
|
|
|
|
|
byte[] sb_strings = new byte[6];
|
2012-08-06 21:21:14 +00:00
|
|
|
|
|
|
|
|
BFSSuperBlock bfs_sb = new BFSSuperBlock();
|
|
|
|
|
|
2014-04-14 01:14:20 +00:00
|
|
|
bfs_sb.s_magic = BitConverter.ToUInt32 (bfs_sb_sector, 0x00);
|
|
|
|
|
bfs_sb.s_start = BitConverter.ToUInt32 (bfs_sb_sector, 0x04);
|
|
|
|
|
bfs_sb.s_end = BitConverter.ToUInt32 (bfs_sb_sector, 0x08);
|
|
|
|
|
bfs_sb.s_from = BitConverter.ToUInt32 (bfs_sb_sector, 0x0C);
|
|
|
|
|
bfs_sb.s_to = BitConverter.ToUInt32 (bfs_sb_sector, 0x10);
|
|
|
|
|
bfs_sb.s_bfrom = BitConverter.ToInt32 (bfs_sb_sector, 0x14);
|
|
|
|
|
bfs_sb.s_bto = BitConverter.ToInt32 (bfs_sb_sector, 0x18);
|
|
|
|
|
Array.Copy (bfs_sb_sector, 0x1C, sb_strings, 0, 6);
|
|
|
|
|
bfs_sb.s_fsname = StringHandlers.CToString(sb_strings);
|
|
|
|
|
Array.Copy (bfs_sb_sector, 0x22, sb_strings, 0, 6);
|
|
|
|
|
bfs_sb.s_volume = StringHandlers.CToString(sb_strings);
|
2012-08-06 21:21:14 +00:00
|
|
|
|
|
|
|
|
if(MainClass.isDebug)
|
|
|
|
|
{
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_magic: 0x{0:X8}", bfs_sb.s_magic);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_start: 0x{0:X8}", bfs_sb.s_start);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_end: 0x{0:X8}", bfs_sb.s_end);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_from: 0x{0:X8}", bfs_sb.s_from);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_to: 0x{0:X8}", bfs_sb.s_to);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_bfrom: 0x{0:X8}", bfs_sb.s_bfrom);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_bto: 0x{0:X8}", bfs_sb.s_bto);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_fsname: 0x{0}", bfs_sb.s_fsname);
|
|
|
|
|
Console.WriteLine("(BFS) bfs_sb.s_volume: 0x{0}", bfs_sb.s_volume);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
sb.AppendLine("UNIX Boot filesystem");
|
|
|
|
|
sb.AppendFormat("Volume goes from byte {0} to byte {1}, for {2} bytes", bfs_sb.s_start, bfs_sb.s_end, bfs_sb.s_end-bfs_sb.s_start).AppendLine();
|
|
|
|
|
sb.AppendFormat("Filesystem name: {0}", bfs_sb.s_fsname).AppendLine();
|
|
|
|
|
sb.AppendFormat("Volume name: {0}", bfs_sb.s_volume).AppendLine();
|
|
|
|
|
|
|
|
|
|
information = sb.ToString();
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private struct BFSSuperBlock
|
|
|
|
|
{
|
|
|
|
|
public UInt32 s_magic; // 0x00, 0x1BADFACE
|
|
|
|
|
public UInt32 s_start; // 0x04, start in bytes of volume
|
|
|
|
|
public UInt32 s_end; // 0x08, end in bytes of volume
|
|
|
|
|
public UInt32 s_from; // 0x0C, unknown :p
|
|
|
|
|
public UInt32 s_to; // 0x10, unknown :p
|
|
|
|
|
public Int32 s_bfrom; // 0x14, unknown :p
|
|
|
|
|
public Int32 s_bto; // 0x18, unknown :p
|
|
|
|
|
public string s_fsname; // 0x1C, 6 bytes, filesystem name
|
|
|
|
|
public string s_volume; // 0x22, 6 bytes, volume name
|
|
|
|
|
}
|
|
|
|
|
}
|
2014-04-14 01:14:20 +00:00
|
|
|
}
|