Lines Matching defs:rec
944 * @rec: the mft record of the possible parent
946 * Check that @rec is the parent of the file represented by @name.
947 * If @rec is a directory, but it is created after @name, then we
948 * can't determine whether @rec is really @name's parent.
950 * Return: @rec's filename, either same name space as @name or lowest space.
953 static FILE_NAME_ATTR* verify_parent(struct filename* name, MFT_RECORD* rec)
960 if (!name || !rec)
963 if (!(rec->flags & MFT_RECORD_IS_DIRECTORY)) {
967 ctx = ntfs_attr_get_search_ctx(NULL, rec);
1013 MFT_RECORD* rec;
1020 rec = calloc(1, vol->mft_record_size);
1021 if (!rec) {
1034 vol->mft_record_size, rec) < 1) {
1037 } else if ((filename_attr = verify_parent(name, rec))) {
1053 if (rec) {
1054 free(rec);
1076 ATTR_RECORD *rec;
1084 rec = find_attribute(AT_DATA, ctx);
1085 if (rec) {
1092 off_name = (long)rec - (long)mft + 0x58;
1149 ATTR_RECORD *rec;
1163 while ((rec = find_attribute(AT_FILE_NAME, ctx))) {
1165 attr = (FILE_NAME_ATTR *)((char *)rec +
1166 le16_to_cpu(rec->value_offset));
1220 rec = find_attribute(AT_STANDARD_INFORMATION, ctx);
1221 if (rec) {
1222 attr = (FILE_NAME_ATTR *)((char *)rec +
1223 le16_to_cpu(rec->value_offset));
1231 rec = find_attribute(AT_DATA, ctx);
1232 if (rec) {
1233 attr = (FILE_NAME_ATTR *)((char *)rec +
1234 le16_to_cpu(rec->value_offset));
1264 ATTR_RECORD *rec;
1276 while ((rec = find_attribute(AT_DATA, ctx))) {
1285 data->resident = !rec->non_resident;
1286 data->compressed = (rec->flags & ATTR_IS_COMPRESSED) ? 1 : 0;
1287 data->encrypted = (rec->flags & ATTR_IS_ENCRYPTED) ? 1 : 0;
1289 if (rec->name_length) {
1290 data->uname = (ntfschar *)((char *)rec +
1291 le16_to_cpu(rec->name_offset));
1292 data->uname_len = rec->name_length;
1302 data->size_data = le32_to_cpu(rec->value_length);
1303 data->data = (char*)rec +
1304 le16_to_cpu(rec->value_offset);
1306 data->size_alloc = sle64_to_cpu(rec->allocated_size);
1307 data->size_data = sle64_to_cpu(rec->data_size);
1308 data->size_init = sle64_to_cpu(rec->initialized_size);
1309 data->size_vcn = sle64_to_cpu(rec->highest_vcn) + 1;
1312 data->runlist = ntfs_mapping_pairs_decompress(vol, rec, NULL);