// /*************************************************************************** // The Disc Image Chef // ---------------------------------------------------------------------------- // // Filename : VMfs.cs // Author(s) : Natalia Portillo // // Component : VMware file system plugin. // // --[ Description ] ---------------------------------------------------------- // // Identifies the VMware file system and shows information. // // --[ License ] -------------------------------------------------------------- // // This library is free software; you can redistribute it and/or modify // it under the terms of the GNU Lesser General Public License as // published by the Free Software Foundation; either version 2.1 of the // License, or (at your option) any later version. // // This library is distributed in the hope that it will be useful, but // WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU // Lesser General Public License for more details. // // You should have received a copy of the GNU Lesser General Public // License along with this library; if not, see . // // ---------------------------------------------------------------------------- // Copyright © 2011-2020 Natalia Portillo // ****************************************************************************/ using System; using System.Runtime.InteropServices; using System.Text; using DiscImageChef.CommonTypes; using DiscImageChef.CommonTypes.Interfaces; using Schemas; using Marshal = DiscImageChef.Helpers.Marshal; namespace DiscImageChef.Filesystems { public class VMfs : IFilesystem { /// /// Identifier for VMfs /// const uint VMFS_MAGIC = 0xC001D00D; const uint VMFS_BASE = 0x00100000; public FileSystemType XmlFsType { get; private set; } public Encoding Encoding { get; private set; } public string Name => "VMware filesystem"; public Guid Id => new Guid("EE52BDB8-B49C-4122-A3DA-AD21CBE79843"); public string Author => "Natalia Portillo"; public bool Identify(IMediaImage imagePlugin, Partition partition) { if(partition.Start >= partition.End) return false; ulong vmfsSuperOff = VMFS_BASE / imagePlugin.Info.SectorSize; if(partition.Start + vmfsSuperOff > partition.End) return false; byte[] sector = imagePlugin.ReadSector(partition.Start + vmfsSuperOff); uint magic = BitConverter.ToUInt32(sector, 0x00); return magic == VMFS_MAGIC; } public void GetInformation(IMediaImage imagePlugin, Partition partition, out string information, Encoding encoding) { Encoding = encoding ?? Encoding.UTF8; ulong vmfsSuperOff = VMFS_BASE / imagePlugin.Info.SectorSize; byte[] sector = imagePlugin.ReadSector(partition.Start + vmfsSuperOff); VolumeInfo volInfo = Marshal.ByteArrayToStructureLittleEndian(sector); StringBuilder sbInformation = new StringBuilder(); sbInformation.AppendLine("VMware file system"); uint ctimeSecs = (uint)(volInfo.ctime / 1000000); uint ctimeNanoSecs = (uint)(volInfo.ctime % 1000000); uint mtimeSecs = (uint)(volInfo.mtime / 1000000); uint mtimeNanoSecs = (uint)(volInfo.mtime % 1000000); sbInformation.AppendFormat("Volume version {0}", volInfo.version).AppendLine(); sbInformation.AppendFormat("Volume name {0}", StringHandlers.CToString(volInfo.name, Encoding)) .AppendLine(); sbInformation.AppendFormat("Volume size {0} bytes", volInfo.size * 256).AppendLine(); sbInformation.AppendFormat("Volume UUID {0}", volInfo.uuid).AppendLine(); sbInformation .AppendFormat("Volume created on {0}", DateHandlers.UnixUnsignedToDateTime(ctimeSecs, ctimeNanoSecs)) .AppendLine(); sbInformation.AppendFormat("Volume last modified on {0}", DateHandlers.UnixUnsignedToDateTime(mtimeSecs, mtimeNanoSecs)).AppendLine(); information = sbInformation.ToString(); XmlFsType = new FileSystemType { Type = "VMware file system", CreationDate = DateHandlers.UnixUnsignedToDateTime(ctimeSecs, ctimeNanoSecs), CreationDateSpecified = true, ModificationDate = DateHandlers.UnixUnsignedToDateTime(mtimeSecs, mtimeNanoSecs), ModificationDateSpecified = true, Clusters = volInfo.size * 256 / imagePlugin.Info.SectorSize, ClusterSize = imagePlugin.Info.SectorSize, VolumeSerial = volInfo.uuid.ToString() }; } [Flags] enum VMfsFlags : byte { RecyledFolder = 64, CaseSensitive = 128 } [StructLayout(LayoutKind.Sequential, Pack = 1)] struct VolumeInfo { public readonly uint magic; public readonly uint version; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 6)] public readonly byte[] unknown1; public readonly byte lun; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 3)] public readonly byte[] unknown2; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 28)] public readonly byte[] name; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 49)] public readonly byte[] unknown3; public readonly uint size; [MarshalAs(UnmanagedType.ByValArray, SizeConst = 31)] public readonly byte[] unknown4; public readonly Guid uuid; public readonly ulong ctime; public readonly ulong mtime; } } }