drivers/filesystems/ntfs/ntfs.h

   1 #ifndef NTFS_H
   2 #define NTFS_H
   3
   4 #include <ntifs.h>
   5 #include <pseh/pseh2.h>
   6
   7 #ifdef __GNUC__
   8 #define INIT_SECTION __attribute__((section ("INIT")))
   9 #else
  10 #define INIT_SECTION /* Done via alloc_text for MSC */
  11 #endif
  12
  13 #define CACHEPAGESIZE(pDeviceExt) \
  14         ((pDeviceExt)->NtfsInfo.UCHARsPerCluster > PAGE_SIZE ? \
  15          (pDeviceExt)->NtfsInfo.UCHARsPerCluster : PAGE_SIZE)
  16
  17 #define TAG_NTFS 'SFTN'
  18
  19 #define ROUND_UP(N, S) ((((N) + (S) - 1) / (S)) * (S))
  20 #define ROUND_DOWN(N, S) ((N) - ((N) % (S)))
  21
  22 #define DEVICE_NAME L"\\Ntfs"
  23
  24 #include <pshpack1.h>
  25 typedef struct _BIOS_PARAMETERS_BLOCK
  26 {
  27     USHORT    BytesPerSector;                   // 0x0B
  28     UCHAR     SectorsPerCluster;                // 0x0D
  29     UCHAR     Unused0[7];                               // 0x0E, checked when volume is mounted
  30     UCHAR     MediaId;                          // 0x15
  31     UCHAR     Unused1[2];                               // 0x16
  32     USHORT    SectorsPerTrack;          // 0x18
  33     USHORT    Heads;                                    // 0x1A
  34     UCHAR     Unused2[4];                               // 0x1C
  35     UCHAR     Unused3[4];                               // 0x20, checked when volume is mounted
  36 } BIOS_PARAMETERS_BLOCK, *PBIOS_PARAMETERS_BLOCK;
  37
  38 typedef struct _EXTENDED_BIOS_PARAMETERS_BLOCK
  39 {
  40     USHORT    Unknown[2];                               // 0x24, always 80 00 80 00
  41     ULONGLONG SectorCount;                      // 0x28
  42     ULONGLONG MftLocation;                      // 0x30
  43     ULONGLONG MftMirrLocation;          // 0x38
  44     CHAR      ClustersPerMftRecord;     // 0x40
  45     UCHAR     Unused4[3];                               // 0x41
  46     CHAR      ClustersPerIndexRecord; // 0x44
  47     UCHAR     Unused5[3];                               // 0x45
  48     ULONGLONG SerialNumber;                     // 0x48
  49     UCHAR     Checksum[4];                      // 0x50
  50 } EXTENDED_BIOS_PARAMETERS_BLOCK, *PEXTENDED_BIOS_PARAMETERS_BLOCK;
  51
  52 typedef struct _BOOT_SECTOR
  53 {
  54     UCHAR     Jump[3];                          // 0x00
  55     UCHAR     OEMID[8];                         // 0x03
  56     BIOS_PARAMETERS_BLOCK BPB;
  57     EXTENDED_BIOS_PARAMETERS_BLOCK EBPB;
  58     UCHAR     BootStrap[426];                   // 0x54
  59     USHORT    EndSector;                                // 0x1FE
  60 } BOOT_SECTOR, *PBOOT_SECTOR;
  61 #include <poppack.h>
  62
  63 //typedef struct _BootSector BootSector;
  64
  65 typedef struct _NTFS_INFO
  66 {
  67     ULONG BytesPerSector;
  68     ULONG SectorsPerCluster;
  69     ULONG BytesPerCluster;
  70     ULONGLONG SectorCount;
  71     ULONGLONG ClusterCount;
  72     ULARGE_INTEGER MftStart;
  73     ULARGE_INTEGER MftMirrStart;
  74     ULONG BytesPerFileRecord;
  75     ULONG BytesPerIndexRecord;
  76
  77     ULONGLONG SerialNumber;
  78     USHORT VolumeLabelLength;
  79     WCHAR VolumeLabel[MAXIMUM_VOLUME_LABEL_LENGTH];
  80     UCHAR MajorVersion;
  81     UCHAR MinorVersion;
  82     USHORT Flags;
  83
  84     ULONG MftZoneReservation;
  85 } NTFS_INFO, *PNTFS_INFO;
  86
  87 #define NTFS_TYPE_CCB         '20SF'
  88 #define NTFS_TYPE_FCB         '30SF'
  89 #define NTFS_TYPE_VCB         '50SF'
  90 #define NTFS_TYPE_IRP_CONTEXT '60SF'
  91 #define NTFS_TYPE_GLOBAL_DATA '70SF'
  92
  93 typedef struct
  94 {
  95     ULONG Type;
  96     ULONG Size;
  97 } NTFSIDENTIFIER, *PNTFSIDENTIFIER;
  98
  99 typedef struct
 100 {
 101     NTFSIDENTIFIER Identifier;
 102
 103     ERESOURCE DirResource;
 104 //    ERESOURCE FatResource;
 105
 106     KSPIN_LOCK FcbListLock;
 107     LIST_ENTRY FcbListHead;
 108
 109     PVPB Vpb;
 110     PDEVICE_OBJECT StorageDevice;
 111     PFILE_OBJECT StreamFileObject;
 112
 113     struct _NTFS_ATTR_CONTEXT* MFTContext;
 114     struct _FILE_RECORD_HEADER* MasterFileTable;
 115     struct _FCB *VolumeFcb;
 116
 117     NTFS_INFO NtfsInfo;
 118
 119     ULONG Flags;
 120     ULONG OpenHandleCount;
 121
 122 } DEVICE_EXTENSION, *PDEVICE_EXTENSION, NTFS_VCB, *PNTFS_VCB;
 123
 124 #define VCB_VOLUME_LOCKED       0x0001
 125
 126 typedef struct
 127 {
 128     NTFSIDENTIFIER Identifier;
 129     LIST_ENTRY     NextCCB;
 130     PFILE_OBJECT   PtrFileObject;
 131     LARGE_INTEGER  CurrentByteOffset;
 132     /* for DirectoryControl */
 133     ULONG Entry;
 134     /* for DirectoryControl */
 135     PWCHAR DirectorySearchPattern;
 136     ULONG LastCluster;
 137     ULONG LastOffset;
 138 } NTFS_CCB, *PNTFS_CCB;
 139
 140 #define TAG_CCB 'BCCI'
 141 #define TAG_FCB 'BCFI'
 142
 143 typedef struct
 144 {
 145     NTFSIDENTIFIER Identifier;
 146     ERESOURCE Resource;
 147     PDRIVER_OBJECT DriverObject;
 148     PDEVICE_OBJECT DeviceObject;
 149     CACHE_MANAGER_CALLBACKS CacheMgrCallbacks;
 150     ULONG Flags;
 151     FAST_IO_DISPATCH FastIoDispatch;
 152     NPAGED_LOOKASIDE_LIST IrpContextLookasideList;
 153     NPAGED_LOOKASIDE_LIST FcbLookasideList;
 154     BOOLEAN EnableWriteSupport;
 155 } NTFS_GLOBAL_DATA, *PNTFS_GLOBAL_DATA;
 156
 157
 158 typedef enum
 159 {
 160     AttributeStandardInformation = 0x10,
 161     AttributeAttributeList = 0x20,
 162     AttributeFileName = 0x30,
 163     AttributeObjectId = 0x40,
 164     AttributeSecurityDescriptor = 0x50,
 165     AttributeVolumeName = 0x60,
 166     AttributeVolumeInformation = 0x70,
 167     AttributeData = 0x80,
 168     AttributeIndexRoot = 0x90,
 169     AttributeIndexAllocation = 0xA0,
 170     AttributeBitmap = 0xB0,
 171     AttributeReparsePoint = 0xC0,
 172     AttributeEAInformation = 0xD0,
 173     AttributeEA = 0xE0,
 174     AttributePropertySet = 0xF0,
 175     AttributeLoggedUtilityStream = 0x100,
 176     AttributeEnd = 0xFFFFFFFF
 177 } ATTRIBUTE_TYPE, *PATTRIBUTE_TYPE;
 178
 179 // FILE_RECORD_END seems to follow AttributeEnd in every file record starting with $Quota.
 180 // No clue what data is being represented here.
 181 #define FILE_RECORD_END              0x11477982
 182
 183 #define NTFS_FILE_MFT                0
 184 #define NTFS_FILE_MFTMIRR            1
 185 #define NTFS_FILE_LOGFILE            2
 186 #define NTFS_FILE_VOLUME            3
 187 #define NTFS_FILE_ATTRDEF            4
 188 #define NTFS_FILE_ROOT                5
 189 #define NTFS_FILE_BITMAP            6
 190 #define NTFS_FILE_BOOT                7
 191 #define NTFS_FILE_BADCLUS            8
 192 #define NTFS_FILE_QUOTA                9
 193 #define NTFS_FILE_UPCASE            10
 194 #define NTFS_FILE_EXTEND            11
 195
 196 #define NTFS_MFT_MASK 0x0000FFFFFFFFFFFFULL
 197
 198 #define COLLATION_BINARY              0x00
 199 #define COLLATION_FILE_NAME           0x01
 200 #define COLLATION_UNICODE_STRING      0x02
 201 #define COLLATION_NTOFS_ULONG         0x10
 202 #define COLLATION_NTOFS_SID           0x11
 203 #define COLLATION_NTOFS_SECURITY_HASH 0x12
 204 #define COLLATION_NTOFS_ULONGS        0x13
 205
 206 #define INDEX_ROOT_SMALL 0x0
 207 #define INDEX_ROOT_LARGE 0x1
 208
 209 #define NTFS_INDEX_ENTRY_NODE            1
 210 #define NTFS_INDEX_ENTRY_END            2
 211
 212 #define NTFS_FILE_NAME_POSIX            0
 213 #define NTFS_FILE_NAME_WIN32            1
 214 #define NTFS_FILE_NAME_DOS            2
 215 #define NTFS_FILE_NAME_WIN32_AND_DOS        3
 216
 217 #define NTFS_FILE_TYPE_READ_ONLY  0x1
 218 #define NTFS_FILE_TYPE_HIDDEN     0x2
 219 #define NTFS_FILE_TYPE_SYSTEM     0x4
 220 #define NTFS_FILE_TYPE_ARCHIVE    0x20
 221 #define NTFS_FILE_TYPE_REPARSE    0x400
 222 #define NTFS_FILE_TYPE_COMPRESSED 0x800
 223 #define NTFS_FILE_TYPE_DIRECTORY  0x10000000
 224
 225 typedef struct
 226 {
 227     ULONG Type;             /* Magic number 'FILE' */
 228     USHORT UsaOffset;       /* Offset to the update sequence */
 229     USHORT UsaCount;        /* Size in words of Update Sequence Number & Array (S) */
 230     ULONGLONG Lsn;          /* $LogFile Sequence Number (LSN) */
 231 } NTFS_RECORD_HEADER, *PNTFS_RECORD_HEADER;
 232
 233 /* NTFS_RECORD_HEADER.Type */
 234 #define NRH_FILE_TYPE  0x454C4946  /* 'FILE' */
 235 #define NRH_INDX_TYPE  0x58444E49  /* 'INDX' */
 236
 237
 238 typedef struct _FILE_RECORD_HEADER
 239 {
 240     NTFS_RECORD_HEADER Ntfs;
 241     USHORT SequenceNumber;        /* Sequence number */
 242     USHORT LinkCount;             /* Hard link count */
 243     USHORT AttributeOffset;       /* Offset to the first Attribute */
 244     USHORT Flags;                 /* Flags */
 245     ULONG BytesInUse;             /* Real size of the FILE record */
 246     ULONG BytesAllocated;         /* Allocated size of the FILE record */
 247     ULONGLONG BaseFileRecord;     /* File reference to the base FILE record */
 248     USHORT NextAttributeNumber;   /* Next Attribute Id */
 249     USHORT Padding;               /* Align to 4 UCHAR boundary (XP) */
 250     ULONG MFTRecordNumber;        /* Number of this MFT Record (XP) */
 251 } FILE_RECORD_HEADER, *PFILE_RECORD_HEADER;
 252
 253 /* Flags in FILE_RECORD_HEADER */
 254
 255 #define FRH_IN_USE    0x0001    /* Record is in use */
 256 #define FRH_DIRECTORY 0x0002    /* Record is a directory */
 257 #define FRH_UNKNOWN1  0x0004    /* Don't know */
 258 #define FRH_UNKNOWN2  0x0008    /* Don't know */
 259
 260 typedef struct
 261 {
 262     ULONG        Type;
 263     ULONG        Length;
 264     UCHAR        IsNonResident;
 265     UCHAR        NameLength;
 266     USHORT        NameOffset;
 267     USHORT        Flags;
 268     USHORT        Instance;
 269     union
 270     {
 271         // Resident attributes
 272         struct
 273         {
 274             ULONG        ValueLength;
 275             USHORT        ValueOffset;
 276             UCHAR        Flags;
 277             UCHAR        Reserved;
 278         } Resident;
 279         // Non-resident attributes
 280         struct
 281         {
 282             ULONGLONG        LowestVCN;
 283             ULONGLONG        HighestVCN;
 284             USHORT        MappingPairsOffset;
 285             USHORT        CompressionUnit;
 286             UCHAR        Reserved[4];
 287             LONGLONG        AllocatedSize;
 288             LONGLONG        DataSize;
 289             LONGLONG        InitializedSize;
 290             LONGLONG        CompressedSize;
 291         } NonResident;
 292     };
 293 } NTFS_ATTR_RECORD, *PNTFS_ATTR_RECORD;
 294
 295 typedef struct
 296 {
 297     ULONGLONG CreationTime;
 298     ULONGLONG ChangeTime;
 299     ULONGLONG LastWriteTime;
 300     ULONGLONG LastAccessTime;
 301     ULONG FileAttribute;
 302     ULONG AlignmentOrReserved[3];
 303 #if 0
 304     ULONG QuotaId;
 305     ULONG SecurityId;
 306     ULONGLONG QuotaCharge;
 307     USN Usn;
 308 #endif
 309 } STANDARD_INFORMATION, *PSTANDARD_INFORMATION;
 310
 311
 312 typedef struct
 313 {
 314     ATTRIBUTE_TYPE AttributeType;
 315     USHORT Length;
 316     UCHAR NameLength;
 317     UCHAR NameOffset;
 318     ULONGLONG StartVcn; // LowVcn
 319     ULONGLONG FileReferenceNumber;
 320     USHORT AttributeNumber;
 321     USHORT AlignmentOrReserved[3];
 322 } ATTRIBUTE_LIST, *PATTRIBUTE_LIST;
 323
 324
 325 typedef struct
 326 {
 327     ULONGLONG DirectoryFileReferenceNumber;
 328     ULONGLONG CreationTime;
 329     ULONGLONG ChangeTime;
 330     ULONGLONG LastWriteTime;
 331     ULONGLONG LastAccessTime;
 332     ULONGLONG AllocatedSize;
 333     ULONGLONG DataSize;
 334     ULONG FileAttributes;
 335     union
 336     {
 337         struct
 338         {
 339             USHORT PackedEaSize;
 340             USHORT AlignmentOrReserved;
 341         } EaInfo;
 342         ULONG ReparseTag;
 343     } Extended;
 344     UCHAR NameLength;
 345     UCHAR NameType;
 346     WCHAR Name[1];
 347 } FILENAME_ATTRIBUTE, *PFILENAME_ATTRIBUTE;
 348
 349 typedef struct
 350 {
 351     ULONG FirstEntryOffset;
 352     ULONG TotalSizeOfEntries;
 353     ULONG AllocatedSize;
 354     UCHAR Flags;
 355     UCHAR Padding[3];
 356 } INDEX_HEADER_ATTRIBUTE, *PINDEX_HEADER_ATTRIBUTE;
 357
 358 typedef struct
 359 {
 360     ULONG AttributeType;
 361     ULONG CollationRule;
 362     ULONG SizeOfEntry;
 363     UCHAR ClustersPerIndexRecord;
 364     UCHAR Padding[3];
 365     INDEX_HEADER_ATTRIBUTE Header;
 366 } INDEX_ROOT_ATTRIBUTE, *PINDEX_ROOT_ATTRIBUTE;
 367
 368 typedef struct
 369 {
 370     NTFS_RECORD_HEADER Ntfs;
 371     ULONGLONG VCN;
 372     INDEX_HEADER_ATTRIBUTE Header;
 373 } INDEX_BUFFER, *PINDEX_BUFFER;
 374
 375 typedef struct
 376 {
 377     union
 378     {
 379         struct
 380         {
 381             ULONGLONG    IndexedFile;
 382         } Directory;
 383         struct
 384         {
 385             USHORT    DataOffset;
 386             USHORT    DataLength;
 387             ULONG    Reserved;
 388         } ViewIndex;
 389     } Data;
 390     USHORT            Length;
 391     USHORT            KeyLength;
 392     USHORT            Flags;
 393     USHORT            Reserved;
 394     FILENAME_ATTRIBUTE    FileName;
 395 } INDEX_ENTRY_ATTRIBUTE, *PINDEX_ENTRY_ATTRIBUTE;
 396
 397 typedef struct
 398 {
 399     ULONGLONG Unknown1;
 400     UCHAR MajorVersion;
 401     UCHAR MinorVersion;
 402     USHORT Flags;
 403     ULONG Unknown2;
 404 } VOLINFO_ATTRIBUTE, *PVOLINFO_ATTRIBUTE;
 405
 406 typedef struct {
 407     ULONG ReparseTag;
 408     USHORT DataLength;
 409     USHORT Reserved;
 410     UCHAR Data[1];
 411 } REPARSE_POINT_ATTRIBUTE, *PREPARSE_POINT_ATTRIBUTE;
 412
 413 #define IRPCONTEXT_CANWAIT 0x1
 414 #define IRPCONTEXT_COMPLETE 0x2
 415 #define IRPCONTEXT_QUEUE 0x4
 416
 417 typedef struct
 418 {
 419     NTFSIDENTIFIER Identifier;
 420     ULONG Flags;
 421     PIO_STACK_LOCATION Stack;
 422     UCHAR MajorFunction;
 423     UCHAR MinorFunction;
 424     WORK_QUEUE_ITEM WorkQueueItem;
 425     PIRP Irp;
 426     BOOLEAN IsTopLevel;
 427     PDEVICE_OBJECT DeviceObject;
 428     PFILE_OBJECT FileObject;
 429     NTSTATUS SavedExceptionCode;
 430     CCHAR PriorityBoost;
 431 } NTFS_IRP_CONTEXT, *PNTFS_IRP_CONTEXT;
 432
 433 typedef struct _NTFS_ATTR_CONTEXT
 434 {
 435     PUCHAR            CacheRun;
 436     ULONGLONG            CacheRunOffset;
 437     LONGLONG            CacheRunStartLCN;
 438     ULONGLONG            CacheRunLength;
 439     LONGLONG            CacheRunLastLCN;
 440     ULONGLONG            CacheRunCurrentOffset;
 441     LARGE_MCB           DataRunsMCB;
 442     ULONGLONG           FileMFTIndex;
 443     NTFS_ATTR_RECORD    Record;
 444 } NTFS_ATTR_CONTEXT, *PNTFS_ATTR_CONTEXT;
 445
 446 #define FCB_CACHE_INITIALIZED   0x0001
 447 #define FCB_IS_VOLUME_STREAM    0x0002
 448 #define FCB_IS_VOLUME           0x0004
 449 #define MAX_PATH                260
 450
 451 typedef struct _FCB
 452 {
 453     NTFSIDENTIFIER Identifier;
 454
 455     FSRTL_COMMON_FCB_HEADER RFCB;
 456     SECTION_OBJECT_POINTERS SectionObjectPointers;
 457
 458     PFILE_OBJECT FileObject;
 459     PNTFS_VCB Vcb;
 460
 461     WCHAR Stream[MAX_PATH];
 462     WCHAR *ObjectName;          /* point on filename (250 chars max) in PathName */
 463     WCHAR PathName[MAX_PATH];   /* path+filename 260 max */
 464
 465     ERESOURCE PagingIoResource;
 466     ERESOURCE MainResource;
 467
 468     LIST_ENTRY FcbListEntry;
 469     struct _FCB* ParentFcb;
 470
 471     ULONG DirIndex;
 472
 473     LONG RefCount;
 474     ULONG Flags;
 475     ULONG OpenHandleCount;
 476
 477     ULONGLONG MFTIndex;
 478     USHORT LinkCount;
 479
 480     FILENAME_ATTRIBUTE Entry;
 481
 482 } NTFS_FCB, *PNTFS_FCB;
 483
 484 typedef struct _FIND_ATTR_CONTXT
 485 {
 486     PDEVICE_EXTENSION Vcb;
 487     BOOLEAN OnlyResident;
 488     PNTFS_ATTR_RECORD FirstAttr;
 489     PNTFS_ATTR_RECORD CurrAttr;
 490     PNTFS_ATTR_RECORD LastAttr;
 491     PNTFS_ATTR_RECORD NonResidentStart;
 492     PNTFS_ATTR_RECORD NonResidentEnd;
 493     ULONG Offset;
 494 } FIND_ATTR_CONTXT, *PFIND_ATTR_CONTXT;
 495
 496 typedef struct
 497 {
 498     USHORT USN;
 499     USHORT Array[];
 500 } FIXUP_ARRAY, *PFIXUP_ARRAY;
 501
 502 extern PNTFS_GLOBAL_DATA NtfsGlobalData;
 503
 504 FORCEINLINE
 505 NTSTATUS
 506 NtfsMarkIrpContextForQueue(PNTFS_IRP_CONTEXT IrpContext)
 507 {
 508     PULONG Flags = &IrpContext->Flags;
 509
 510     *Flags &= ~IRPCONTEXT_COMPLETE;
 511     *Flags |= IRPCONTEXT_QUEUE;
 512
 513     return STATUS_PENDING;
 514 }
 515
 516 /* attrib.c */
 517
 518 //VOID
 519 //NtfsDumpAttribute(PATTRIBUTE Attribute);
 520
 521 NTSTATUS
 522 AddData(PFILE_RECORD_HEADER FileRecord,
 523         PNTFS_ATTR_RECORD AttributeAddress);
 524
 525 NTSTATUS
 526 AddRun(PNTFS_VCB Vcb,
 527        PNTFS_ATTR_CONTEXT AttrContext,
 528        ULONG AttrOffset,
 529        PFILE_RECORD_HEADER FileRecord,
 530        ULONGLONG NextAssignedCluster,
 531        ULONG RunLength);
 532
 533 NTSTATUS
 534 AddFileName(PFILE_RECORD_HEADER FileRecord,
 535             PNTFS_ATTR_RECORD AttributeAddress,
 536             PDEVICE_EXTENSION DeviceExt,
 537             PFILE_OBJECT FileObject);
 538
 539 NTSTATUS
 540 AddStandardInformation(PFILE_RECORD_HEADER FileRecord,
 541                        PNTFS_ATTR_RECORD AttributeAddress);
 542
 543 NTSTATUS
 544 ConvertDataRunsToLargeMCB(PUCHAR DataRun,
 545                           PLARGE_MCB DataRunsMCB,
 546                           PULONGLONG pNextVBN);
 547
 548 NTSTATUS
 549 ConvertLargeMCBToDataRuns(PLARGE_MCB DataRunsMCB,
 550                           PUCHAR RunBuffer,
 551                           ULONG MaxBufferSize,
 552                           PULONG UsedBufferSize);
 553
 554 PUCHAR
 555 DecodeRun(PUCHAR DataRun,
 556           LONGLONG *DataRunOffset,
 557           ULONGLONG *DataRunLength);
 558
 559 VOID
 560 NtfsDumpDataRuns(PVOID StartOfRun,
 561                  ULONGLONG CurrentLCN);
 562
 563 VOID
 564 NtfsDumpFileAttributes(PDEVICE_EXTENSION Vcb,
 565                        PFILE_RECORD_HEADER FileRecord);
 566
 567 PSTANDARD_INFORMATION
 568 GetStandardInformationFromRecord(PDEVICE_EXTENSION Vcb,
 569                                  PFILE_RECORD_HEADER FileRecord);
 570
 571 PFILENAME_ATTRIBUTE
 572 GetFileNameFromRecord(PDEVICE_EXTENSION Vcb,
 573                       PFILE_RECORD_HEADER FileRecord,
 574                       UCHAR NameType);
 575
 576 UCHAR
 577 GetPackedByteCount(LONGLONG NumberToPack,
 578                    BOOLEAN IsSigned);
 579
 580 NTSTATUS
 581 GetLastClusterInDataRun(PDEVICE_EXTENSION Vcb,
 582                         PNTFS_ATTR_RECORD Attribute,
 583                         PULONGLONG LastCluster);
 584
 585 PFILENAME_ATTRIBUTE
 586 GetBestFileNameFromRecord(PDEVICE_EXTENSION Vcb,
 587                           PFILE_RECORD_HEADER FileRecord);
 588
 589 NTSTATUS
 590 FindFirstAttribute(PFIND_ATTR_CONTXT Context,
 591                    PDEVICE_EXTENSION Vcb,
 592                    PFILE_RECORD_HEADER FileRecord,
 593                    BOOLEAN OnlyResident,
 594                    PNTFS_ATTR_RECORD * Attribute);
 595
 596 NTSTATUS
 597 FindNextAttribute(PFIND_ATTR_CONTXT Context,
 598                   PNTFS_ATTR_RECORD * Attribute);
 599
 600 VOID
 601 FindCloseAttribute(PFIND_ATTR_CONTXT Context);
 602
 603 NTSTATUS
 604 FreeClusters(PNTFS_VCB Vcb,
 605              PNTFS_ATTR_CONTEXT AttrContext,
 606              ULONG AttrOffset,
 607              PFILE_RECORD_HEADER FileRecord,
 608              ULONG ClustersToFree);
 609
 610 /* blockdev.c */
 611
 612 NTSTATUS
 613 NtfsReadDisk(IN PDEVICE_OBJECT DeviceObject,
 614              IN LONGLONG StartingOffset,
 615              IN ULONG Length,
 616              IN ULONG SectorSize,
 617              IN OUT PUCHAR Buffer,
 618              IN BOOLEAN Override);
 619
 620 NTSTATUS
 621 NtfsWriteDisk(IN PDEVICE_OBJECT DeviceObject,
 622               IN LONGLONG StartingOffset,
 623               IN ULONG Length,
 624               IN ULONG SectorSize,
 625               IN const PUCHAR Buffer);
 626
 627 NTSTATUS
 628 NtfsReadSectors(IN PDEVICE_OBJECT DeviceObject,
 629                 IN ULONG DiskSector,
 630                 IN ULONG SectorCount,
 631                 IN ULONG SectorSize,
 632                 IN OUT PUCHAR Buffer,
 633                 IN BOOLEAN Override);
 634
 635 NTSTATUS
 636 NtfsDeviceIoControl(IN PDEVICE_OBJECT DeviceObject,
 637                     IN ULONG ControlCode,
 638                     IN PVOID InputBuffer,
 639                     IN ULONG InputBufferSize,
 640                     IN OUT PVOID OutputBuffer,
 641                     IN OUT PULONG OutputBufferSize,
 642                     IN BOOLEAN Override);
 643
 644
 645 /* close.c */
 646
 647 NTSTATUS
 648 NtfsCleanup(PNTFS_IRP_CONTEXT IrpContext);
 649
 650
 651 /* close.c */
 652
 653 NTSTATUS
 654 NtfsCloseFile(PDEVICE_EXTENSION DeviceExt,
 655               PFILE_OBJECT FileObject);
 656
 657 NTSTATUS
 658 NtfsClose(PNTFS_IRP_CONTEXT IrpContext);
 659
 660
 661 /* create.c */
 662
 663 NTSTATUS
 664 NtfsCreate(PNTFS_IRP_CONTEXT IrpContext);
 665
 666 NTSTATUS
 667 NtfsCreateFileRecord(PDEVICE_EXTENSION DeviceExt,
 668                      PFILE_OBJECT FileObject);
 669
 670 /* devctl.c */
 671
 672 NTSTATUS
 673 NtfsDeviceControl(PNTFS_IRP_CONTEXT IrpContext);
 674
 675
 676 /* dirctl.c */
 677
 678 ULONGLONG
 679 NtfsGetFileSize(PDEVICE_EXTENSION DeviceExt,
 680                 PFILE_RECORD_HEADER FileRecord,
 681                 PCWSTR Stream,
 682                 ULONG StreamLength,
 683                 PULONGLONG AllocatedSize);
 684
 685 NTSTATUS
 686 NtfsDirectoryControl(PNTFS_IRP_CONTEXT IrpContext);
 687
 688
 689 /* dispatch.c */
 690
 691 DRIVER_DISPATCH NtfsFsdDispatch;
 692 NTSTATUS NTAPI
 693 NtfsFsdDispatch(PDEVICE_OBJECT DeviceObject,
 694                 PIRP Irp);
 695
 696
 697 /* fastio.c */
 698
 699 BOOLEAN NTAPI
 700 NtfsAcqLazyWrite(PVOID Context,
 701                  BOOLEAN Wait);
 702
 703 VOID NTAPI
 704 NtfsRelLazyWrite(PVOID Context);
 705
 706 BOOLEAN NTAPI
 707 NtfsAcqReadAhead(PVOID Context,
 708                  BOOLEAN Wait);
 709
 710 VOID NTAPI
 711 NtfsRelReadAhead(PVOID Context);
 712
 713 FAST_IO_CHECK_IF_POSSIBLE NtfsFastIoCheckIfPossible;
 714 FAST_IO_READ NtfsFastIoRead;
 715 FAST_IO_WRITE NtfsFastIoWrite;
 716
 717
 718 /* fcb.c */
 719
 720 PNTFS_FCB
 721 NtfsCreateFCB(PCWSTR FileName,
 722               PCWSTR Stream,
 723               PNTFS_VCB Vcb);
 724
 725 VOID
 726 NtfsDestroyFCB(PNTFS_FCB Fcb);
 727
 728 BOOLEAN
 729 NtfsFCBIsDirectory(PNTFS_FCB Fcb);
 730
 731 BOOLEAN
 732 NtfsFCBIsReparsePoint(PNTFS_FCB Fcb);
 733
 734 BOOLEAN
 735 NtfsFCBIsCompressed(PNTFS_FCB Fcb);
 736
 737 BOOLEAN
 738 NtfsFCBIsRoot(PNTFS_FCB Fcb);
 739
 740 VOID
 741 NtfsGrabFCB(PNTFS_VCB Vcb,
 742             PNTFS_FCB Fcb);
 743
 744 VOID
 745 NtfsReleaseFCB(PNTFS_VCB Vcb,
 746                PNTFS_FCB Fcb);
 747
 748 VOID
 749 NtfsAddFCBToTable(PNTFS_VCB Vcb,
 750                   PNTFS_FCB Fcb);
 751
 752 PNTFS_FCB
 753 NtfsGrabFCBFromTable(PNTFS_VCB Vcb,
 754                      PCWSTR FileName);
 755
 756 NTSTATUS
 757 NtfsFCBInitializeCache(PNTFS_VCB Vcb,
 758                        PNTFS_FCB Fcb);
 759
 760 PNTFS_FCB
 761 NtfsMakeRootFCB(PNTFS_VCB Vcb);
 762
 763 PNTFS_FCB
 764 NtfsOpenRootFCB(PNTFS_VCB Vcb);
 765
 766 NTSTATUS
 767 NtfsAttachFCBToFileObject(PNTFS_VCB Vcb,
 768                           PNTFS_FCB Fcb,
 769                           PFILE_OBJECT FileObject);
 770
 771 NTSTATUS
 772 NtfsGetFCBForFile(PNTFS_VCB Vcb,
 773                   PNTFS_FCB *pParentFCB,
 774                   PNTFS_FCB *pFCB,
 775                   const PWSTR pFileName);
 776
 777 NTSTATUS
 778 NtfsReadFCBAttribute(PNTFS_VCB Vcb,
 779                      PNTFS_FCB pFCB,
 780                      ULONG Type,
 781                      PCWSTR Name,
 782                      ULONG NameLength,
 783                      PVOID * Data);
 784
 785 NTSTATUS
 786 NtfsMakeFCBFromDirEntry(PNTFS_VCB Vcb,
 787                         PNTFS_FCB DirectoryFCB,
 788                         PUNICODE_STRING Name,
 789                         PCWSTR Stream,
 790                         PFILE_RECORD_HEADER Record,
 791                         ULONGLONG MFTIndex,
 792                         PNTFS_FCB * fileFCB);
 793
 794
 795 /* finfo.c */
 796
 797 NTSTATUS
 798 NtfsQueryInformation(PNTFS_IRP_CONTEXT IrpContext);
 799
 800 NTSTATUS
 801 NtfsSetEndOfFile(PNTFS_FCB Fcb,
 802                  PFILE_OBJECT FileObject,
 803                  PDEVICE_EXTENSION DeviceExt,
 804                  ULONG IrpFlags,
 805                  PLARGE_INTEGER NewFileSize);
 806
 807 NTSTATUS
 808 NtfsSetInformation(PNTFS_IRP_CONTEXT IrpContext);
 809
 810 /* fsctl.c */
 811
 812 NTSTATUS
 813 NtfsFileSystemControl(PNTFS_IRP_CONTEXT IrpContext);
 814
 815
 816 /* mft.c */
 817 NTSTATUS
 818 AddNewMftEntry(PFILE_RECORD_HEADER FileRecord,
 819                PDEVICE_EXTENSION DeviceExt);
 820
 821 PNTFS_ATTR_CONTEXT
 822 PrepareAttributeContext(PNTFS_ATTR_RECORD AttrRecord);
 823
 824 VOID
 825 ReleaseAttributeContext(PNTFS_ATTR_CONTEXT Context);
 826
 827 ULONG
 828 ReadAttribute(PDEVICE_EXTENSION Vcb,
 829               PNTFS_ATTR_CONTEXT Context,
 830               ULONGLONG Offset,
 831               PCHAR Buffer,
 832               ULONG Length);
 833
 834 NTSTATUS
 835 WriteAttribute(PDEVICE_EXTENSION Vcb,
 836                PNTFS_ATTR_CONTEXT Context,
 837                ULONGLONG Offset,
 838                const PUCHAR Buffer,
 839                ULONG Length,
 840                PULONG LengthWritten);
 841
 842 ULONGLONG
 843 AttributeDataLength(PNTFS_ATTR_RECORD AttrRecord);
 844
 845 NTSTATUS
 846 SetAttributeDataLength(PFILE_OBJECT FileObject,
 847                        PNTFS_FCB Fcb,
 848                        PNTFS_ATTR_CONTEXT AttrContext,
 849                        ULONG AttrOffset,
 850                        PFILE_RECORD_HEADER FileRecord,
 851                        PLARGE_INTEGER DataSize);
 852
 853 VOID
 854 SetFileRecordEnd(PFILE_RECORD_HEADER FileRecord,
 855                  PNTFS_ATTR_RECORD AttrEnd,
 856                  ULONG EndMarker);
 857
 858 ULONGLONG
 859 AttributeAllocatedLength(PNTFS_ATTR_RECORD AttrRecord);
 860
 861 BOOLEAN
 862 CompareFileName(PUNICODE_STRING FileName,
 863                 PINDEX_ENTRY_ATTRIBUTE IndexEntry,
 864                 BOOLEAN DirSearch);
 865
 866 NTSTATUS
 867 ReadFileRecord(PDEVICE_EXTENSION Vcb,
 868                ULONGLONG index,
 869                PFILE_RECORD_HEADER file);
 870
 871 NTSTATUS
 872 UpdateIndexEntryFileNameSize(PDEVICE_EXTENSION Vcb,
 873                              PFILE_RECORD_HEADER MftRecord,
 874                              PCHAR IndexRecord,
 875                              ULONG IndexBlockSize,
 876                              PINDEX_ENTRY_ATTRIBUTE FirstEntry,
 877                              PINDEX_ENTRY_ATTRIBUTE LastEntry,
 878                              PUNICODE_STRING FileName,
 879                              PULONG StartEntry,
 880                              PULONG CurrentEntry,
 881                              BOOLEAN DirSearch,
 882                              ULONGLONG NewDataSize,
 883                              ULONGLONG NewAllocatedSize);
 884
 885 NTSTATUS
 886 UpdateFileNameRecord(PDEVICE_EXTENSION Vcb,
 887                      ULONGLONG ParentMFTIndex,
 888                      PUNICODE_STRING FileName,
 889                      BOOLEAN DirSearch,
 890                      ULONGLONG NewDataSize,
 891                      ULONGLONG NewAllocationSize);
 892
 893 NTSTATUS
 894 UpdateFileRecord(PDEVICE_EXTENSION Vcb,
 895                  ULONGLONG MftIndex,
 896                  PFILE_RECORD_HEADER FileRecord);
 897
 898 NTSTATUS
 899 FindAttribute(PDEVICE_EXTENSION Vcb,
 900               PFILE_RECORD_HEADER MftRecord,
 901               ULONG Type,
 902               PCWSTR Name,
 903               ULONG NameLength,
 904               PNTFS_ATTR_CONTEXT * AttrCtx,
 905               PULONG Offset);
 906
 907 VOID
 908 ReadVCN(PDEVICE_EXTENSION Vcb,
 909         PFILE_RECORD_HEADER file,
 910         ATTRIBUTE_TYPE type,
 911         ULONGLONG vcn,
 912         ULONG count,
 913         PVOID buffer);
 914
 915 NTSTATUS
 916 FixupUpdateSequenceArray(PDEVICE_EXTENSION Vcb,
 917                          PNTFS_RECORD_HEADER Record);
 918
 919 NTSTATUS
 920 AddFixupArray(PDEVICE_EXTENSION Vcb,
 921               PNTFS_RECORD_HEADER Record);
 922
 923 NTSTATUS
 924 ReadLCN(PDEVICE_EXTENSION Vcb,
 925         ULONGLONG lcn,
 926         ULONG count,
 927         PVOID buffer);
 928
 929 VOID
 930 EnumerAttribute(PFILE_RECORD_HEADER file,
 931                 PDEVICE_EXTENSION Vcb,
 932                 PDEVICE_OBJECT DeviceObject);
 933
 934 NTSTATUS
 935 NtfsLookupFile(PDEVICE_EXTENSION Vcb,
 936                PUNICODE_STRING PathName,
 937                PFILE_RECORD_HEADER *FileRecord,
 938                PULONGLONG MFTIndex);
 939
 940 NTSTATUS
 941 NtfsLookupFileAt(PDEVICE_EXTENSION Vcb,
 942                  PUNICODE_STRING PathName,
 943                  PFILE_RECORD_HEADER *FileRecord,
 944                  PULONGLONG MFTIndex,
 945                  ULONGLONG CurrentMFTIndex);
 946
 947 VOID
 948 NtfsDumpFileRecord(PDEVICE_EXTENSION Vcb,
 949                    PFILE_RECORD_HEADER FileRecord);
 950
 951 NTSTATUS
 952 NtfsFindFileAt(PDEVICE_EXTENSION Vcb,
 953                PUNICODE_STRING SearchPattern,
 954                PULONG FirstEntry,
 955                PFILE_RECORD_HEADER *FileRecord,
 956                PULONGLONG MFTIndex,
 957                ULONGLONG CurrentMFTIndex);
 958
 959 NTSTATUS
 960 NtfsFindMftRecord(PDEVICE_EXTENSION Vcb,
 961                   ULONGLONG MFTIndex,
 962                   PUNICODE_STRING FileName,
 963                   PULONG FirstEntry,
 964                   BOOLEAN DirSearch,
 965                   ULONGLONG *OutMFTIndex);
 966
 967 /* misc.c */
 968
 969 BOOLEAN
 970 NtfsIsIrpTopLevel(PIRP Irp);
 971
 972 PNTFS_IRP_CONTEXT
 973 NtfsAllocateIrpContext(PDEVICE_OBJECT DeviceObject,
 974                        PIRP Irp);
 975
 976 PVOID
 977 NtfsGetUserBuffer(PIRP Irp,
 978                   BOOLEAN Paging);
 979
 980 NTSTATUS
 981 NtfsLockUserBuffer(IN PIRP Irp,
 982                    IN ULONG Length,
 983                    IN LOCK_OPERATION Operation);
 984
 985 #if 0
 986 BOOLEAN
 987 wstrcmpjoki(PWSTR s1, PWSTR s2);
 988
 989 VOID
 990 CdfsSwapString(PWCHAR Out,
 991                PUCHAR In,
 992                ULONG Count);
 993 #endif
 994
 995 VOID
 996 NtfsFileFlagsToAttributes(ULONG NtfsAttributes,
 997                           PULONG FileAttributes);
 998
 999
1000 /* rw.c */
1001
1002 NTSTATUS
1003 NtfsRead(PNTFS_IRP_CONTEXT IrpContext);
1004
1005 NTSTATUS
1006 NtfsWrite(PNTFS_IRP_CONTEXT IrpContext);
1007
1008
1009 /* volinfo.c */
1010
1011 NTSTATUS
1012 NtfsAllocateClusters(PDEVICE_EXTENSION DeviceExt,
1013                      ULONG FirstDesiredCluster,
1014                      ULONG DesiredClusters,
1015                      PULONG FirstAssignedCluster,
1016                      PULONG AssignedClusters);
1017
1018 ULONGLONG
1019 NtfsGetFreeClusters(PDEVICE_EXTENSION DeviceExt);
1020
1021 NTSTATUS
1022 NtfsQueryVolumeInformation(PNTFS_IRP_CONTEXT IrpContext);
1023
1024 NTSTATUS
1025 NtfsSetVolumeInformation(PNTFS_IRP_CONTEXT IrpContext);
1026
1027
1028 /* ntfs.c */
1029
1030 DRIVER_INITIALIZE DriverEntry;
1031
1032 VOID
1033 NTAPI
1034 NtfsInitializeFunctionPointers(PDRIVER_OBJECT DriverObject);
1035
1036 #endif /* NTFS_H */