drivers/filesystems/ntfs/ntfs.h

   1 #ifndef NTFS_H
   2 #define NTFS_H
   3
   4 #include <ntifs.h>
   5 #include <pseh/pseh2.h>
   6
   7 #ifdef __GNUC__
   8 #define INIT_SECTION __attribute__((section ("INIT")))
   9 #else
  10 #define INIT_SECTION /* Done via alloc_text for MSC */
  11 #endif
  12
  13 #define CACHEPAGESIZE(pDeviceExt) \
  14         ((pDeviceExt)->NtfsInfo.UCHARsPerCluster > PAGE_SIZE ? \
  15          (pDeviceExt)->NtfsInfo.UCHARsPerCluster : PAGE_SIZE)
  16
  17 #define TAG_NTFS 'SFTN'
  18
  19 #define ROUND_UP(N, S) ((((N) + (S) - 1) / (S)) * (S))
  20 #define ROUND_DOWN(N, S) ((N) - ((N) % (S)))
  21
  22 #define DEVICE_NAME L"\\Ntfs"
  23
  24 #include <pshpack1.h>
  25 typedef struct _BIOS_PARAMETERS_BLOCK
  26 {
  27     USHORT    BytesPerSector;                   // 0x0B
  28     UCHAR     SectorsPerCluster;                // 0x0D
  29     UCHAR     Unused0[7];                               // 0x0E, checked when volume is mounted
  30     UCHAR     MediaId;                          // 0x15
  31     UCHAR     Unused1[2];                               // 0x16
  32     USHORT    SectorsPerTrack;          // 0x18
  33     USHORT    Heads;                                    // 0x1A
  34     UCHAR     Unused2[4];                               // 0x1C
  35     UCHAR     Unused3[4];                               // 0x20, checked when volume is mounted
  36 } BIOS_PARAMETERS_BLOCK, *PBIOS_PARAMETERS_BLOCK;
  37
  38 typedef struct _EXTENDED_BIOS_PARAMETERS_BLOCK
  39 {
  40     USHORT    Unknown[2];                               // 0x24, always 80 00 80 00
  41     ULONGLONG SectorCount;                      // 0x28
  42     ULONGLONG MftLocation;                      // 0x30
  43     ULONGLONG MftMirrLocation;          // 0x38
  44     CHAR      ClustersPerMftRecord;     // 0x40
  45     UCHAR     Unused4[3];                               // 0x41
  46     CHAR      ClustersPerIndexRecord; // 0x44
  47     UCHAR     Unused5[3];                               // 0x45
  48     ULONGLONG SerialNumber;                     // 0x48
  49     UCHAR     Checksum[4];                      // 0x50
  50 } EXTENDED_BIOS_PARAMETERS_BLOCK, *PEXTENDED_BIOS_PARAMETERS_BLOCK;
  51
  52 typedef struct _BOOT_SECTOR
  53 {
  54     UCHAR     Jump[3];                          // 0x00
  55     UCHAR     OEMID[8];                         // 0x03
  56     BIOS_PARAMETERS_BLOCK BPB;
  57     EXTENDED_BIOS_PARAMETERS_BLOCK EBPB;
  58     UCHAR     BootStrap[426];                   // 0x54
  59     USHORT    EndSector;                                // 0x1FE
  60 } BOOT_SECTOR, *PBOOT_SECTOR;
  61 #include <poppack.h>
  62
  63 //typedef struct _BootSector BootSector;
  64
  65 typedef struct _NTFS_INFO
  66 {
  67     ULONG BytesPerSector;
  68     ULONG SectorsPerCluster;
  69     ULONG BytesPerCluster;
  70     ULONGLONG SectorCount;
  71     ULONGLONG ClusterCount;
  72     ULARGE_INTEGER MftStart;
  73     ULARGE_INTEGER MftMirrStart;
  74     ULONG BytesPerFileRecord;
  75     ULONG BytesPerIndexRecord;
  76
  77     ULONGLONG SerialNumber;
  78     USHORT VolumeLabelLength;
  79     WCHAR VolumeLabel[MAXIMUM_VOLUME_LABEL_LENGTH];
  80     UCHAR MajorVersion;
  81     UCHAR MinorVersion;
  82     USHORT Flags;
  83
  84     ULONG MftZoneReservation;
  85 } NTFS_INFO, *PNTFS_INFO;
  86
  87 #define NTFS_TYPE_CCB         '20SF'
  88 #define NTFS_TYPE_FCB         '30SF'
  89 #define NTFS_TYPE_VCB         '50SF'
  90 #define NTFS_TYPE_IRP_CONTEXT '60SF'
  91 #define NTFS_TYPE_GLOBAL_DATA '70SF'
  92
  93 typedef struct
  94 {
  95     ULONG Type;
  96     ULONG Size;
  97 } NTFSIDENTIFIER, *PNTFSIDENTIFIER;
  98
  99 typedef struct
 100 {
 101     NTFSIDENTIFIER Identifier;
 102
 103     ERESOURCE DirResource;
 104 //    ERESOURCE FatResource;
 105
 106     KSPIN_LOCK FcbListLock;
 107     LIST_ENTRY FcbListHead;
 108
 109     PVPB Vpb;
 110     PDEVICE_OBJECT StorageDevice;
 111     PFILE_OBJECT StreamFileObject;
 112
 113     struct _NTFS_ATTR_CONTEXT* MFTContext;
 114     struct _FILE_RECORD_HEADER* MasterFileTable;
 115     struct _FCB *VolumeFcb;
 116
 117     NTFS_INFO NtfsInfo;
 118
 119     ULONG Flags;
 120     ULONG OpenHandleCount;
 121
 122 } DEVICE_EXTENSION, *PDEVICE_EXTENSION, NTFS_VCB, *PNTFS_VCB;
 123
 124 #define VCB_VOLUME_LOCKED       0x0001
 125
 126 typedef struct
 127 {
 128     NTFSIDENTIFIER Identifier;
 129     LIST_ENTRY     NextCCB;
 130     PFILE_OBJECT   PtrFileObject;
 131     LARGE_INTEGER  CurrentByteOffset;
 132     /* for DirectoryControl */
 133     ULONG Entry;
 134     /* for DirectoryControl */
 135     PWCHAR DirectorySearchPattern;
 136     ULONG LastCluster;
 137     ULONG LastOffset;
 138 } NTFS_CCB, *PNTFS_CCB;
 139
 140 #define TAG_CCB 'BCCI'
 141 #define TAG_FCB 'BCFI'
 142
 143 typedef struct
 144 {
 145     NTFSIDENTIFIER Identifier;
 146     ERESOURCE Resource;
 147     PDRIVER_OBJECT DriverObject;
 148     PDEVICE_OBJECT DeviceObject;
 149     CACHE_MANAGER_CALLBACKS CacheMgrCallbacks;
 150     ULONG Flags;
 151     FAST_IO_DISPATCH FastIoDispatch;
 152     NPAGED_LOOKASIDE_LIST IrpContextLookasideList;
 153     NPAGED_LOOKASIDE_LIST FcbLookasideList;
 154     BOOLEAN EnableWriteSupport;
 155 } NTFS_GLOBAL_DATA, *PNTFS_GLOBAL_DATA;
 156
 157
 158 typedef enum
 159 {
 160     AttributeStandardInformation = 0x10,
 161     AttributeAttributeList = 0x20,
 162     AttributeFileName = 0x30,
 163     AttributeObjectId = 0x40,
 164     AttributeSecurityDescriptor = 0x50,
 165     AttributeVolumeName = 0x60,
 166     AttributeVolumeInformation = 0x70,
 167     AttributeData = 0x80,
 168     AttributeIndexRoot = 0x90,
 169     AttributeIndexAllocation = 0xA0,
 170     AttributeBitmap = 0xB0,
 171     AttributeReparsePoint = 0xC0,
 172     AttributeEAInformation = 0xD0,
 173     AttributeEA = 0xE0,
 174     AttributePropertySet = 0xF0,
 175     AttributeLoggedUtilityStream = 0x100,
 176     AttributeEnd = 0xFFFFFFFF
 177 } ATTRIBUTE_TYPE, *PATTRIBUTE_TYPE;
 178
 179 // FILE_RECORD_END seems to follow AttributeEnd in every file record starting with $Quota.
 180 // No clue what data is being represented here.
 181 #define FILE_RECORD_END              0x11477982
 182
 183 #define NTFS_FILE_MFT                0
 184 #define NTFS_FILE_MFTMIRR            1
 185 #define NTFS_FILE_LOGFILE            2
 186 #define NTFS_FILE_VOLUME            3
 187 #define NTFS_FILE_ATTRDEF            4
 188 #define NTFS_FILE_ROOT                5
 189 #define NTFS_FILE_BITMAP            6
 190 #define NTFS_FILE_BOOT                7
 191 #define NTFS_FILE_BADCLUS            8
 192 #define NTFS_FILE_QUOTA                9
 193 #define NTFS_FILE_UPCASE            10
 194 #define NTFS_FILE_EXTEND            11
 195
 196 #define NTFS_MFT_MASK 0x0000FFFFFFFFFFFFULL
 197
 198 #define COLLATION_BINARY              0x00
 199 #define COLLATION_FILE_NAME           0x01
 200 #define COLLATION_UNICODE_STRING      0x02
 201 #define COLLATION_NTOFS_ULONG         0x10
 202 #define COLLATION_NTOFS_SID           0x11
 203 #define COLLATION_NTOFS_SECURITY_HASH 0x12
 204 #define COLLATION_NTOFS_ULONGS        0x13
 205
 206 #define INDEX_ROOT_SMALL 0x0
 207 #define INDEX_ROOT_LARGE 0x1
 208
 209 #define NTFS_INDEX_ENTRY_NODE            1
 210 #define NTFS_INDEX_ENTRY_END            2
 211
 212 #define NTFS_FILE_NAME_POSIX            0
 213 #define NTFS_FILE_NAME_WIN32            1
 214 #define NTFS_FILE_NAME_DOS            2
 215 #define NTFS_FILE_NAME_WIN32_AND_DOS        3
 216
 217 #define NTFS_FILE_TYPE_READ_ONLY  0x1
 218 #define NTFS_FILE_TYPE_HIDDEN     0x2
 219 #define NTFS_FILE_TYPE_SYSTEM     0x4
 220 #define NTFS_FILE_TYPE_ARCHIVE    0x20
 221 #define NTFS_FILE_TYPE_REPARSE    0x400
 222 #define NTFS_FILE_TYPE_COMPRESSED 0x800
 223 #define NTFS_FILE_TYPE_DIRECTORY  0x10000000
 224
 225 typedef struct
 226 {
 227     ULONG Type;             /* Magic number 'FILE' */
 228     USHORT UsaOffset;       /* Offset to the update sequence */
 229     USHORT UsaCount;        /* Size in words of Update Sequence Number & Array (S) */
 230     ULONGLONG Lsn;          /* $LogFile Sequence Number (LSN) */
 231 } NTFS_RECORD_HEADER, *PNTFS_RECORD_HEADER;
 232
 233 /* NTFS_RECORD_HEADER.Type */
 234 #define NRH_FILE_TYPE  0x454C4946  /* 'FILE' */
 235 #define NRH_INDX_TYPE  0x58444E49  /* 'INDX' */
 236
 237
 238 typedef struct _FILE_RECORD_HEADER
 239 {
 240     NTFS_RECORD_HEADER Ntfs;
 241     USHORT SequenceNumber;        /* Sequence number */
 242     USHORT LinkCount;             /* Hard link count */
 243     USHORT AttributeOffset;       /* Offset to the first Attribute */
 244     USHORT Flags;                 /* Flags */
 245     ULONG BytesInUse;             /* Real size of the FILE record */
 246     ULONG BytesAllocated;         /* Allocated size of the FILE record */
 247     ULONGLONG BaseFileRecord;     /* File reference to the base FILE record */
 248     USHORT NextAttributeNumber;   /* Next Attribute Id */
 249     USHORT Padding;               /* Align to 4 UCHAR boundary (XP) */
 250     ULONG MFTRecordNumber;        /* Number of this MFT Record (XP) */
 251 } FILE_RECORD_HEADER, *PFILE_RECORD_HEADER;
 252
 253 /* Flags in FILE_RECORD_HEADER */
 254
 255 #define FRH_IN_USE    0x0001    /* Record is in use */
 256 #define FRH_DIRECTORY 0x0002    /* Record is a directory */
 257 #define FRH_UNKNOWN1  0x0004    /* Don't know */
 258 #define FRH_UNKNOWN2  0x0008    /* Don't know */
 259
 260 typedef struct
 261 {
 262     ULONG        Type;
 263     ULONG        Length;
 264     UCHAR        IsNonResident;
 265     UCHAR        NameLength;
 266     USHORT        NameOffset;
 267     USHORT        Flags;
 268     USHORT        Instance;
 269     union
 270     {
 271         // Resident attributes
 272         struct
 273         {
 274             ULONG        ValueLength;
 275             USHORT        ValueOffset;
 276             UCHAR        Flags;
 277             UCHAR        Reserved;
 278         } Resident;
 279         // Non-resident attributes
 280         struct
 281         {
 282             ULONGLONG        LowestVCN;
 283             ULONGLONG        HighestVCN;
 284             USHORT        MappingPairsOffset;
 285             USHORT        CompressionUnit;
 286             UCHAR        Reserved[4];
 287             LONGLONG        AllocatedSize;
 288             LONGLONG        DataSize;
 289             LONGLONG        InitializedSize;
 290             LONGLONG        CompressedSize;
 291         } NonResident;
 292     };
 293 } NTFS_ATTR_RECORD, *PNTFS_ATTR_RECORD;
 294
 295 typedef struct
 296 {
 297     ULONGLONG CreationTime;
 298     ULONGLONG ChangeTime;
 299     ULONGLONG LastWriteTime;
 300     ULONGLONG LastAccessTime;
 301     ULONG FileAttribute;
 302     ULONG AlignmentOrReserved[3];
 303 #if 0
 304     ULONG QuotaId;
 305     ULONG SecurityId;
 306     ULONGLONG QuotaCharge;
 307     USN Usn;
 308 #endif
 309 } STANDARD_INFORMATION, *PSTANDARD_INFORMATION;
 310
 311
 312 typedef struct
 313 {
 314     ATTRIBUTE_TYPE AttributeType;
 315     USHORT Length;
 316     UCHAR NameLength;
 317     UCHAR NameOffset;
 318     ULONGLONG StartVcn; // LowVcn
 319     ULONGLONG FileReferenceNumber;
 320     USHORT AttributeNumber;
 321     USHORT AlignmentOrReserved[3];
 322 } ATTRIBUTE_LIST, *PATTRIBUTE_LIST;
 323
 324
 325 typedef struct
 326 {
 327     ULONGLONG DirectoryFileReferenceNumber;
 328     ULONGLONG CreationTime;
 329     ULONGLONG ChangeTime;
 330     ULONGLONG LastWriteTime;
 331     ULONGLONG LastAccessTime;
 332     ULONGLONG AllocatedSize;
 333     ULONGLONG DataSize;
 334     ULONG FileAttributes;
 335     union
 336     {
 337         struct
 338         {
 339             USHORT PackedEaSize;
 340             USHORT AlignmentOrReserved;
 341         } EaInfo;
 342         ULONG ReparseTag;
 343     } Extended;
 344     UCHAR NameLength;
 345     UCHAR NameType;
 346     WCHAR Name[1];
 347 } FILENAME_ATTRIBUTE, *PFILENAME_ATTRIBUTE;
 348
 349 typedef struct
 350 {
 351     ULONG FirstEntryOffset;
 352     ULONG TotalSizeOfEntries;
 353     ULONG AllocatedSize;
 354     UCHAR Flags;
 355     UCHAR Padding[3];
 356 } INDEX_HEADER_ATTRIBUTE, *PINDEX_HEADER_ATTRIBUTE;
 357
 358 typedef struct
 359 {
 360     ULONG AttributeType;
 361     ULONG CollationRule;
 362     ULONG SizeOfEntry;
 363     UCHAR ClustersPerIndexRecord;
 364     UCHAR Padding[3];
 365     INDEX_HEADER_ATTRIBUTE Header;
 366 } INDEX_ROOT_ATTRIBUTE, *PINDEX_ROOT_ATTRIBUTE;
 367
 368 typedef struct
 369 {
 370     NTFS_RECORD_HEADER Ntfs;
 371     ULONGLONG VCN;
 372     INDEX_HEADER_ATTRIBUTE Header;
 373 } INDEX_BUFFER, *PINDEX_BUFFER;
 374
 375 typedef struct
 376 {
 377     union
 378     {
 379         struct
 380         {
 381             ULONGLONG    IndexedFile;
 382         } Directory;
 383         struct
 384         {
 385             USHORT    DataOffset;
 386             USHORT    DataLength;
 387             ULONG    Reserved;
 388         } ViewIndex;
 389     } Data;
 390     USHORT            Length;
 391     USHORT            KeyLength;
 392     USHORT            Flags;
 393     USHORT            Reserved;
 394     FILENAME_ATTRIBUTE    FileName;
 395 } INDEX_ENTRY_ATTRIBUTE, *PINDEX_ENTRY_ATTRIBUTE;
 396
 397 typedef struct
 398 {
 399     ULONGLONG Unknown1;
 400     UCHAR MajorVersion;
 401     UCHAR MinorVersion;
 402     USHORT Flags;
 403     ULONG Unknown2;
 404 } VOLINFO_ATTRIBUTE, *PVOLINFO_ATTRIBUTE;
 405
 406 typedef struct {
 407     ULONG ReparseTag;
 408     USHORT DataLength;
 409     USHORT Reserved;
 410     UCHAR Data[1];
 411 } REPARSE_POINT_ATTRIBUTE, *PREPARSE_POINT_ATTRIBUTE;
 412
 413 #define IRPCONTEXT_CANWAIT 0x1
 414 #define IRPCONTEXT_COMPLETE 0x2
 415 #define IRPCONTEXT_QUEUE 0x4
 416
 417 typedef struct
 418 {
 419     NTFSIDENTIFIER Identifier;
 420     ULONG Flags;
 421     PIO_STACK_LOCATION Stack;
 422     UCHAR MajorFunction;
 423     UCHAR MinorFunction;
 424     WORK_QUEUE_ITEM WorkQueueItem;
 425     PIRP Irp;
 426     BOOLEAN IsTopLevel;
 427     PDEVICE_OBJECT DeviceObject;
 428     PFILE_OBJECT FileObject;
 429     NTSTATUS SavedExceptionCode;
 430     CCHAR PriorityBoost;
 431 } NTFS_IRP_CONTEXT, *PNTFS_IRP_CONTEXT;
 432
 433 typedef struct _NTFS_ATTR_CONTEXT
 434 {
 435     PUCHAR            CacheRun;
 436     ULONGLONG            CacheRunOffset;
 437     LONGLONG            CacheRunStartLCN;
 438     ULONGLONG            CacheRunLength;
 439     LONGLONG            CacheRunLastLCN;
 440     ULONGLONG            CacheRunCurrentOffset;
 441     LARGE_MCB           DataRunsMCB;
 442     ULONGLONG           FileMFTIndex;
 443     NTFS_ATTR_RECORD    Record;
 444 } NTFS_ATTR_CONTEXT, *PNTFS_ATTR_CONTEXT;
 445
 446 #define FCB_CACHE_INITIALIZED   0x0001
 447 #define FCB_IS_VOLUME_STREAM    0x0002
 448 #define FCB_IS_VOLUME           0x0004
 449 #define MAX_PATH                260
 450
 451 typedef struct _FCB
 452 {
 453     NTFSIDENTIFIER Identifier;
 454
 455     FSRTL_COMMON_FCB_HEADER RFCB;
 456     SECTION_OBJECT_POINTERS SectionObjectPointers;
 457
 458     PFILE_OBJECT FileObject;
 459     PNTFS_VCB Vcb;
 460
 461     WCHAR Stream[MAX_PATH];
 462     WCHAR *ObjectName;          /* point on filename (250 chars max) in PathName */
 463     WCHAR PathName[MAX_PATH];   /* path+filename 260 max */
 464
 465     ERESOURCE PagingIoResource;
 466     ERESOURCE MainResource;
 467
 468     LIST_ENTRY FcbListEntry;
 469     struct _FCB* ParentFcb;
 470
 471     ULONG DirIndex;
 472
 473     LONG RefCount;
 474     ULONG Flags;
 475     ULONG OpenHandleCount;
 476
 477     ULONGLONG MFTIndex;
 478     USHORT LinkCount;
 479
 480     FILENAME_ATTRIBUTE Entry;
 481
 482 } NTFS_FCB, *PNTFS_FCB;
 483
 484 typedef struct _FIND_ATTR_CONTXT
 485 {
 486     PDEVICE_EXTENSION Vcb;
 487     BOOLEAN OnlyResident;
 488     PNTFS_ATTR_RECORD FirstAttr;
 489     PNTFS_ATTR_RECORD CurrAttr;
 490     PNTFS_ATTR_RECORD LastAttr;
 491     PNTFS_ATTR_RECORD NonResidentStart;
 492     PNTFS_ATTR_RECORD NonResidentEnd;
 493     ULONG Offset;
 494 } FIND_ATTR_CONTXT, *PFIND_ATTR_CONTXT;
 495
 496 typedef struct
 497 {
 498     USHORT USN;
 499     USHORT Array[];
 500 } FIXUP_ARRAY, *PFIXUP_ARRAY;
 501
 502 extern PNTFS_GLOBAL_DATA NtfsGlobalData;
 503
 504 FORCEINLINE
 505 NTSTATUS
 506 NtfsMarkIrpContextForQueue(PNTFS_IRP_CONTEXT IrpContext)
 507 {
 508     PULONG Flags = &IrpContext->Flags;
 509
 510     *Flags &= ~IRPCONTEXT_COMPLETE;
 511     *Flags |= IRPCONTEXT_QUEUE;
 512
 513     return STATUS_PENDING;
 514 }
 515
 516 /* attrib.c */
 517
 518 //VOID
 519 //NtfsDumpAttribute(PATTRIBUTE Attribute);
 520
 521 NTSTATUS
 522 AddData(PFILE_RECORD_HEADER FileRecord,
 523         PNTFS_ATTR_RECORD AttributeAddress);
 524
 525 NTSTATUS
 526 AddRun(PNTFS_VCB Vcb,
 527        PNTFS_ATTR_CONTEXT AttrContext,
 528        ULONG AttrOffset,
 529        PFILE_RECORD_HEADER FileRecord,
 530        ULONGLONG NextAssignedCluster,
 531        ULONG RunLength);
 532
 533 NTSTATUS
 534 AddFileName(PFILE_RECORD_HEADER FileRecord,
 535             PNTFS_ATTR_RECORD AttributeAddress,
 536             PDEVICE_EXTENSION DeviceExt,
 537             PFILE_OBJECT FileObject,
 538             PULONGLONG ParentMftIndex);
 539
 540 NTSTATUS
 541 AddStandardInformation(PFILE_RECORD_HEADER FileRecord,
 542                        PNTFS_ATTR_RECORD AttributeAddress);
 543
 544 NTSTATUS
 545 ConvertDataRunsToLargeMCB(PUCHAR DataRun,
 546                           PLARGE_MCB DataRunsMCB,
 547                           PULONGLONG pNextVBN);
 548
 549 NTSTATUS
 550 ConvertLargeMCBToDataRuns(PLARGE_MCB DataRunsMCB,
 551                           PUCHAR RunBuffer,
 552                           ULONG MaxBufferSize,
 553                           PULONG UsedBufferSize);
 554
 555 PUCHAR
 556 DecodeRun(PUCHAR DataRun,
 557           LONGLONG *DataRunOffset,
 558           ULONGLONG *DataRunLength);
 559
 560 VOID
 561 NtfsDumpDataRuns(PVOID StartOfRun,
 562                  ULONGLONG CurrentLCN);
 563
 564 VOID
 565 NtfsDumpFileAttributes(PDEVICE_EXTENSION Vcb,
 566                        PFILE_RECORD_HEADER FileRecord);
 567
 568 PSTANDARD_INFORMATION
 569 GetStandardInformationFromRecord(PDEVICE_EXTENSION Vcb,
 570                                  PFILE_RECORD_HEADER FileRecord);
 571
 572 PFILENAME_ATTRIBUTE
 573 GetFileNameFromRecord(PDEVICE_EXTENSION Vcb,
 574                       PFILE_RECORD_HEADER FileRecord,
 575                       UCHAR NameType);
 576
 577 UCHAR
 578 GetPackedByteCount(LONGLONG NumberToPack,
 579                    BOOLEAN IsSigned);
 580
 581 NTSTATUS
 582 GetLastClusterInDataRun(PDEVICE_EXTENSION Vcb,
 583                         PNTFS_ATTR_RECORD Attribute,
 584                         PULONGLONG LastCluster);
 585
 586 PFILENAME_ATTRIBUTE
 587 GetBestFileNameFromRecord(PDEVICE_EXTENSION Vcb,
 588                           PFILE_RECORD_HEADER FileRecord);
 589
 590 NTSTATUS
 591 FindFirstAttribute(PFIND_ATTR_CONTXT Context,
 592                    PDEVICE_EXTENSION Vcb,
 593                    PFILE_RECORD_HEADER FileRecord,
 594                    BOOLEAN OnlyResident,
 595                    PNTFS_ATTR_RECORD * Attribute);
 596
 597 NTSTATUS
 598 FindNextAttribute(PFIND_ATTR_CONTXT Context,
 599                   PNTFS_ATTR_RECORD * Attribute);
 600
 601 VOID
 602 FindCloseAttribute(PFIND_ATTR_CONTXT Context);
 603
 604 NTSTATUS
 605 FreeClusters(PNTFS_VCB Vcb,
 606              PNTFS_ATTR_CONTEXT AttrContext,
 607              ULONG AttrOffset,
 608              PFILE_RECORD_HEADER FileRecord,
 609              ULONG ClustersToFree);
 610
 611 /* blockdev.c */
 612
 613 NTSTATUS
 614 NtfsReadDisk(IN PDEVICE_OBJECT DeviceObject,
 615              IN LONGLONG StartingOffset,
 616              IN ULONG Length,
 617              IN ULONG SectorSize,
 618              IN OUT PUCHAR Buffer,
 619              IN BOOLEAN Override);
 620
 621 NTSTATUS
 622 NtfsWriteDisk(IN PDEVICE_OBJECT DeviceObject,
 623               IN LONGLONG StartingOffset,
 624               IN ULONG Length,
 625               IN ULONG SectorSize,
 626               IN const PUCHAR Buffer);
 627
 628 NTSTATUS
 629 NtfsReadSectors(IN PDEVICE_OBJECT DeviceObject,
 630                 IN ULONG DiskSector,
 631                 IN ULONG SectorCount,
 632                 IN ULONG SectorSize,
 633                 IN OUT PUCHAR Buffer,
 634                 IN BOOLEAN Override);
 635
 636 NTSTATUS
 637 NtfsDeviceIoControl(IN PDEVICE_OBJECT DeviceObject,
 638                     IN ULONG ControlCode,
 639                     IN PVOID InputBuffer,
 640                     IN ULONG InputBufferSize,
 641                     IN OUT PVOID OutputBuffer,
 642                     IN OUT PULONG OutputBufferSize,
 643                     IN BOOLEAN Override);
 644
 645
 646 /* close.c */
 647
 648 NTSTATUS
 649 NtfsCleanup(PNTFS_IRP_CONTEXT IrpContext);
 650
 651
 652 /* close.c */
 653
 654 NTSTATUS
 655 NtfsCloseFile(PDEVICE_EXTENSION DeviceExt,
 656               PFILE_OBJECT FileObject);
 657
 658 NTSTATUS
 659 NtfsClose(PNTFS_IRP_CONTEXT IrpContext);
 660
 661
 662 /* create.c */
 663
 664 NTSTATUS
 665 NtfsCreate(PNTFS_IRP_CONTEXT IrpContext);
 666
 667 NTSTATUS
 668 NtfsCreateFileRecord(PDEVICE_EXTENSION DeviceExt,
 669                      PFILE_OBJECT FileObject);
 670
 671 /* devctl.c */
 672
 673 NTSTATUS
 674 NtfsDeviceControl(PNTFS_IRP_CONTEXT IrpContext);
 675
 676
 677 /* dirctl.c */
 678
 679 NTSTATUS
 680 NtfsAddFilenameToDirectory(PDEVICE_EXTENSION DeviceExt,
 681                            ULONGLONG DirectoryMftIndex,
 682                            ULONGLONG FileMftIndex,
 683                            PFILENAME_ATTRIBUTE FilenameAttribute);
 684
 685 ULONGLONG
 686 NtfsGetFileSize(PDEVICE_EXTENSION DeviceExt,
 687                 PFILE_RECORD_HEADER FileRecord,
 688                 PCWSTR Stream,
 689                 ULONG StreamLength,
 690                 PULONGLONG AllocatedSize);
 691
 692 NTSTATUS
 693 NtfsDirectoryControl(PNTFS_IRP_CONTEXT IrpContext);
 694
 695
 696 /* dispatch.c */
 697
 698 DRIVER_DISPATCH NtfsFsdDispatch;
 699 NTSTATUS NTAPI
 700 NtfsFsdDispatch(PDEVICE_OBJECT DeviceObject,
 701                 PIRP Irp);
 702
 703
 704 /* fastio.c */
 705
 706 BOOLEAN NTAPI
 707 NtfsAcqLazyWrite(PVOID Context,
 708                  BOOLEAN Wait);
 709
 710 VOID NTAPI
 711 NtfsRelLazyWrite(PVOID Context);
 712
 713 BOOLEAN NTAPI
 714 NtfsAcqReadAhead(PVOID Context,
 715                  BOOLEAN Wait);
 716
 717 VOID NTAPI
 718 NtfsRelReadAhead(PVOID Context);
 719
 720 FAST_IO_CHECK_IF_POSSIBLE NtfsFastIoCheckIfPossible;
 721 FAST_IO_READ NtfsFastIoRead;
 722 FAST_IO_WRITE NtfsFastIoWrite;
 723
 724
 725 /* fcb.c */
 726
 727 PNTFS_FCB
 728 NtfsCreateFCB(PCWSTR FileName,
 729               PCWSTR Stream,
 730               PNTFS_VCB Vcb);
 731
 732 VOID
 733 NtfsDestroyFCB(PNTFS_FCB Fcb);
 734
 735 BOOLEAN
 736 NtfsFCBIsDirectory(PNTFS_FCB Fcb);
 737
 738 BOOLEAN
 739 NtfsFCBIsReparsePoint(PNTFS_FCB Fcb);
 740
 741 BOOLEAN
 742 NtfsFCBIsCompressed(PNTFS_FCB Fcb);
 743
 744 BOOLEAN
 745 NtfsFCBIsRoot(PNTFS_FCB Fcb);
 746
 747 VOID
 748 NtfsGrabFCB(PNTFS_VCB Vcb,
 749             PNTFS_FCB Fcb);
 750
 751 VOID
 752 NtfsReleaseFCB(PNTFS_VCB Vcb,
 753                PNTFS_FCB Fcb);
 754
 755 VOID
 756 NtfsAddFCBToTable(PNTFS_VCB Vcb,
 757                   PNTFS_FCB Fcb);
 758
 759 PNTFS_FCB
 760 NtfsGrabFCBFromTable(PNTFS_VCB Vcb,
 761                      PCWSTR FileName);
 762
 763 NTSTATUS
 764 NtfsFCBInitializeCache(PNTFS_VCB Vcb,
 765                        PNTFS_FCB Fcb);
 766
 767 PNTFS_FCB
 768 NtfsMakeRootFCB(PNTFS_VCB Vcb);
 769
 770 PNTFS_FCB
 771 NtfsOpenRootFCB(PNTFS_VCB Vcb);
 772
 773 NTSTATUS
 774 NtfsAttachFCBToFileObject(PNTFS_VCB Vcb,
 775                           PNTFS_FCB Fcb,
 776                           PFILE_OBJECT FileObject);
 777
 778 NTSTATUS
 779 NtfsGetFCBForFile(PNTFS_VCB Vcb,
 780                   PNTFS_FCB *pParentFCB,
 781                   PNTFS_FCB *pFCB,
 782                   const PWSTR pFileName);
 783
 784 NTSTATUS
 785 NtfsReadFCBAttribute(PNTFS_VCB Vcb,
 786                      PNTFS_FCB pFCB,
 787                      ULONG Type,
 788                      PCWSTR Name,
 789                      ULONG NameLength,
 790                      PVOID * Data);
 791
 792 NTSTATUS
 793 NtfsMakeFCBFromDirEntry(PNTFS_VCB Vcb,
 794                         PNTFS_FCB DirectoryFCB,
 795                         PUNICODE_STRING Name,
 796                         PCWSTR Stream,
 797                         PFILE_RECORD_HEADER Record,
 798                         ULONGLONG MFTIndex,
 799                         PNTFS_FCB * fileFCB);
 800
 801
 802 /* finfo.c */
 803
 804 NTSTATUS
 805 NtfsQueryInformation(PNTFS_IRP_CONTEXT IrpContext);
 806
 807 NTSTATUS
 808 NtfsSetEndOfFile(PNTFS_FCB Fcb,
 809                  PFILE_OBJECT FileObject,
 810                  PDEVICE_EXTENSION DeviceExt,
 811                  ULONG IrpFlags,
 812                  PLARGE_INTEGER NewFileSize);
 813
 814 NTSTATUS
 815 NtfsSetInformation(PNTFS_IRP_CONTEXT IrpContext);
 816
 817 /* fsctl.c */
 818
 819 NTSTATUS
 820 NtfsFileSystemControl(PNTFS_IRP_CONTEXT IrpContext);
 821
 822
 823 /* mft.c */
 824 NTSTATUS
 825 AddNewMftEntry(PFILE_RECORD_HEADER FileRecord,
 826                PDEVICE_EXTENSION DeviceExt,
 827                PULONGLONG DestinationIndex);
 828
 829 PNTFS_ATTR_CONTEXT
 830 PrepareAttributeContext(PNTFS_ATTR_RECORD AttrRecord);
 831
 832 VOID
 833 ReleaseAttributeContext(PNTFS_ATTR_CONTEXT Context);
 834
 835 ULONG
 836 ReadAttribute(PDEVICE_EXTENSION Vcb,
 837               PNTFS_ATTR_CONTEXT Context,
 838               ULONGLONG Offset,
 839               PCHAR Buffer,
 840               ULONG Length);
 841
 842 NTSTATUS
 843 WriteAttribute(PDEVICE_EXTENSION Vcb,
 844                PNTFS_ATTR_CONTEXT Context,
 845                ULONGLONG Offset,
 846                const PUCHAR Buffer,
 847                ULONG Length,
 848                PULONG LengthWritten);
 849
 850 ULONGLONG
 851 AttributeDataLength(PNTFS_ATTR_RECORD AttrRecord);
 852
 853 VOID
 854 InternalSetResidentAttributeLength(PNTFS_ATTR_CONTEXT AttrContext,
 855                                    PFILE_RECORD_HEADER FileRecord,
 856                                    ULONG AttrOffset,
 857                                    ULONG DataSize);
 858
 859 NTSTATUS
 860 SetAttributeDataLength(PFILE_OBJECT FileObject,
 861                        PNTFS_FCB Fcb,
 862                        PNTFS_ATTR_CONTEXT AttrContext,
 863                        ULONG AttrOffset,
 864                        PFILE_RECORD_HEADER FileRecord,
 865                        PLARGE_INTEGER DataSize);
 866
 867 VOID
 868 SetFileRecordEnd(PFILE_RECORD_HEADER FileRecord,
 869                  PNTFS_ATTR_RECORD AttrEnd,
 870                  ULONG EndMarker);
 871
 872 ULONGLONG
 873 AttributeAllocatedLength(PNTFS_ATTR_RECORD AttrRecord);
 874
 875 BOOLEAN
 876 CompareFileName(PUNICODE_STRING FileName,
 877                 PINDEX_ENTRY_ATTRIBUTE IndexEntry,
 878                 BOOLEAN DirSearch);
 879
 880 NTSTATUS
 881 ReadFileRecord(PDEVICE_EXTENSION Vcb,
 882                ULONGLONG index,
 883                PFILE_RECORD_HEADER file);
 884
 885 NTSTATUS
 886 UpdateIndexEntryFileNameSize(PDEVICE_EXTENSION Vcb,
 887                              PFILE_RECORD_HEADER MftRecord,
 888                              PCHAR IndexRecord,
 889                              ULONG IndexBlockSize,
 890                              PINDEX_ENTRY_ATTRIBUTE FirstEntry,
 891                              PINDEX_ENTRY_ATTRIBUTE LastEntry,
 892                              PUNICODE_STRING FileName,
 893                              PULONG StartEntry,
 894                              PULONG CurrentEntry,
 895                              BOOLEAN DirSearch,
 896                              ULONGLONG NewDataSize,
 897                              ULONGLONG NewAllocatedSize);
 898
 899 NTSTATUS
 900 UpdateFileNameRecord(PDEVICE_EXTENSION Vcb,
 901                      ULONGLONG ParentMFTIndex,
 902                      PUNICODE_STRING FileName,
 903                      BOOLEAN DirSearch,
 904                      ULONGLONG NewDataSize,
 905                      ULONGLONG NewAllocationSize);
 906
 907 NTSTATUS
 908 UpdateFileRecord(PDEVICE_EXTENSION Vcb,
 909                  ULONGLONG MftIndex,
 910                  PFILE_RECORD_HEADER FileRecord);
 911
 912 NTSTATUS
 913 FindAttribute(PDEVICE_EXTENSION Vcb,
 914               PFILE_RECORD_HEADER MftRecord,
 915               ULONG Type,
 916               PCWSTR Name,
 917               ULONG NameLength,
 918               PNTFS_ATTR_CONTEXT * AttrCtx,
 919               PULONG Offset);
 920
 921 VOID
 922 ReadVCN(PDEVICE_EXTENSION Vcb,
 923         PFILE_RECORD_HEADER file,
 924         ATTRIBUTE_TYPE type,
 925         ULONGLONG vcn,
 926         ULONG count,
 927         PVOID buffer);
 928
 929 NTSTATUS
 930 FixupUpdateSequenceArray(PDEVICE_EXTENSION Vcb,
 931                          PNTFS_RECORD_HEADER Record);
 932
 933 NTSTATUS
 934 AddFixupArray(PDEVICE_EXTENSION Vcb,
 935               PNTFS_RECORD_HEADER Record);
 936
 937 NTSTATUS
 938 ReadLCN(PDEVICE_EXTENSION Vcb,
 939         ULONGLONG lcn,
 940         ULONG count,
 941         PVOID buffer);
 942
 943 VOID
 944 EnumerAttribute(PFILE_RECORD_HEADER file,
 945                 PDEVICE_EXTENSION Vcb,
 946                 PDEVICE_OBJECT DeviceObject);
 947
 948 NTSTATUS
 949 NtfsLookupFile(PDEVICE_EXTENSION Vcb,
 950                PUNICODE_STRING PathName,
 951                PFILE_RECORD_HEADER *FileRecord,
 952                PULONGLONG MFTIndex);
 953
 954 NTSTATUS
 955 NtfsLookupFileAt(PDEVICE_EXTENSION Vcb,
 956                  PUNICODE_STRING PathName,
 957                  PFILE_RECORD_HEADER *FileRecord,
 958                  PULONGLONG MFTIndex,
 959                  ULONGLONG CurrentMFTIndex);
 960
 961 VOID
 962 NtfsDumpFileRecord(PDEVICE_EXTENSION Vcb,
 963                    PFILE_RECORD_HEADER FileRecord);
 964
 965 NTSTATUS
 966 NtfsFindFileAt(PDEVICE_EXTENSION Vcb,
 967                PUNICODE_STRING SearchPattern,
 968                PULONG FirstEntry,
 969                PFILE_RECORD_HEADER *FileRecord,
 970                PULONGLONG MFTIndex,
 971                ULONGLONG CurrentMFTIndex);
 972
 973 NTSTATUS
 974 NtfsFindMftRecord(PDEVICE_EXTENSION Vcb,
 975                   ULONGLONG MFTIndex,
 976                   PUNICODE_STRING FileName,
 977                   PULONG FirstEntry,
 978                   BOOLEAN DirSearch,
 979                   ULONGLONG *OutMFTIndex);
 980
 981 /* misc.c */
 982
 983 BOOLEAN
 984 NtfsIsIrpTopLevel(PIRP Irp);
 985
 986 PNTFS_IRP_CONTEXT
 987 NtfsAllocateIrpContext(PDEVICE_OBJECT DeviceObject,
 988                        PIRP Irp);
 989
 990 PVOID
 991 NtfsGetUserBuffer(PIRP Irp,
 992                   BOOLEAN Paging);
 993
 994 NTSTATUS
 995 NtfsLockUserBuffer(IN PIRP Irp,
 996                    IN ULONG Length,
 997                    IN LOCK_OPERATION Operation);
 998
 999 #if 0
1000 BOOLEAN
1001 wstrcmpjoki(PWSTR s1, PWSTR s2);
1002
1003 VOID
1004 CdfsSwapString(PWCHAR Out,
1005                PUCHAR In,
1006                ULONG Count);
1007 #endif
1008
1009 VOID
1010 NtfsFileFlagsToAttributes(ULONG NtfsAttributes,
1011                           PULONG FileAttributes);
1012
1013
1014 /* rw.c */
1015
1016 NTSTATUS
1017 NtfsRead(PNTFS_IRP_CONTEXT IrpContext);
1018
1019 NTSTATUS
1020 NtfsWrite(PNTFS_IRP_CONTEXT IrpContext);
1021
1022
1023 /* volinfo.c */
1024
1025 NTSTATUS
1026 NtfsAllocateClusters(PDEVICE_EXTENSION DeviceExt,
1027                      ULONG FirstDesiredCluster,
1028                      ULONG DesiredClusters,
1029                      PULONG FirstAssignedCluster,
1030                      PULONG AssignedClusters);
1031
1032 ULONGLONG
1033 NtfsGetFreeClusters(PDEVICE_EXTENSION DeviceExt);
1034
1035 NTSTATUS
1036 NtfsQueryVolumeInformation(PNTFS_IRP_CONTEXT IrpContext);
1037
1038 NTSTATUS
1039 NtfsSetVolumeInformation(PNTFS_IRP_CONTEXT IrpContext);
1040
1041
1042 /* ntfs.c */
1043
1044 DRIVER_INITIALIZE DriverEntry;
1045
1046 VOID
1047 NTAPI
1048 NtfsInitializeFunctionPointers(PDRIVER_OBJECT DriverObject);
1049
1050 #endif /* NTFS_H */