reactos/drivers/filesystems/ntfs/mft.c

   1 /*
   2  *  ReactOS kernel
   3  *  Copyright (C) 2002, 2014 ReactOS Team
   4  *
   5  *  This program is free software; you can redistribute it and/or modify
   6  *  it under the terms of the GNU General Public License as published by
   7  *  the Free Software Foundation; either version 2 of the License, or
   8  *  (at your option) any later version.
   9  *
  10  *  This program is distributed in the hope that it will be useful,
  11  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  13  *  GNU General Public License for more details.
  14  *
  15  *  You should have received a copy of the GNU General Public License
  16  *  along with this program; if not, write to the Free Software
  17  *  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.
  18  *
  19  * COPYRIGHT:        See COPYING in the top level directory
  20  * PROJECT:          ReactOS kernel
  21  * FILE:             drivers/filesystem/ntfs/mft.c
  22  * PURPOSE:          NTFS filesystem driver
  23  * PROGRAMMERS:      Eric Kohl
  24  *                   Valentin Verkhovsky
  25  *                   Pierre Schweitzer (pierre@reactos.org)
  26  *                   Hervé Poussineau (hpoussin@reactos.org)
  27  */
  28
  29 /* INCLUDES *****************************************************************/
  30
  31 #include "ntfs.h"
  32
  33 #define NDEBUG
  34 #include <debug.h>
  35
  36 /* FUNCTIONS ****************************************************************/
  37
  38 PNTFS_ATTR_CONTEXT
  39 PrepareAttributeContext(PNTFS_ATTR_RECORD AttrRecord)
  40 {
  41     PNTFS_ATTR_CONTEXT Context;
  42
  43     Context = ExAllocatePoolWithTag(NonPagedPool,
  44                                     FIELD_OFFSET(NTFS_ATTR_CONTEXT, Record) + AttrRecord->Length,
  45                                     TAG_NTFS);
  46     RtlCopyMemory(&Context->Record, AttrRecord, AttrRecord->Length);
  47     if (AttrRecord->IsNonResident)
  48     {
  49         LONGLONG DataRunOffset;
  50         ULONGLONG DataRunLength;
  51
  52         Context->CacheRun = (PUCHAR)&Context->Record + Context->Record.NonResident.MappingPairsOffset;
  53         Context->CacheRunOffset = 0;
  54         Context->CacheRun = DecodeRun(Context->CacheRun, &DataRunOffset, &DataRunLength);
  55         Context->CacheRunLength = DataRunLength;
  56         if (DataRunOffset != -1)
  57         {
  58             /* Normal run. */
  59             Context->CacheRunStartLCN =
  60             Context->CacheRunLastLCN = DataRunOffset;
  61         }
  62         else
  63         {
  64             /* Sparse run. */
  65             Context->CacheRunStartLCN = -1;
  66             Context->CacheRunLastLCN = 0;
  67         }
  68         Context->CacheRunCurrentOffset = 0;
  69     }
  70
  71     return Context;
  72 }
  73
  74
  75 VOID
  76 ReleaseAttributeContext(PNTFS_ATTR_CONTEXT Context)
  77 {
  78     ExFreePoolWithTag(Context, TAG_NTFS);
  79 }
  80
  81
  82 PNTFS_ATTR_CONTEXT
  83 FindAttributeHelper(PDEVICE_EXTENSION Vcb,
  84                     PNTFS_ATTR_RECORD AttrRecord,
  85                     PNTFS_ATTR_RECORD AttrRecordEnd,
  86                     ULONG Type,
  87                     PCWSTR Name,
  88                     ULONG NameLength)
  89 {
  90     DPRINT("FindAttributeHelper(%p, %p, %p, 0x%x, %S, %u)\n", Vcb, AttrRecord, AttrRecordEnd, Type, Name, NameLength);
  91
  92     while (AttrRecord < AttrRecordEnd)
  93     {
  94         DPRINT("AttrRecord->Type = 0x%x\n", AttrRecord->Type);
  95
  96         if (AttrRecord->Type == AttributeEnd)
  97             break;
  98
  99         if (AttrRecord->Type == AttributeAttributeList)
 100         {
 101             PNTFS_ATTR_CONTEXT Context;
 102             PNTFS_ATTR_CONTEXT ListContext;
 103             PVOID ListBuffer;
 104             ULONGLONG ListSize;
 105             PNTFS_ATTR_RECORD ListAttrRecord;
 106             PNTFS_ATTR_RECORD ListAttrRecordEnd;
 107
 108             ListContext = PrepareAttributeContext(AttrRecord);
 109
 110             ListSize = AttributeDataLength(&ListContext->Record);
 111             if(ListSize <= 0xFFFFFFFF)
 112                 ListBuffer = ExAllocatePoolWithTag(NonPagedPool, (ULONG)ListSize, TAG_NTFS);
 113             else
 114                 ListBuffer = NULL;
 115
 116             if(!ListBuffer)
 117             {
 118                 DPRINT("Failed to allocate memory: %x\n", (ULONG)ListSize);
 119                 continue;
 120             }
 121
 122             ListAttrRecord = (PNTFS_ATTR_RECORD)ListBuffer;
 123             ListAttrRecordEnd = (PNTFS_ATTR_RECORD)((PCHAR)ListBuffer + ListSize);
 124
 125             if (ReadAttribute(Vcb, ListContext, 0, ListBuffer, (ULONG)ListSize) == ListSize)
 126             {
 127                 Context = FindAttributeHelper(Vcb, ListAttrRecord, ListAttrRecordEnd,
 128                                               Type, Name, NameLength);
 129
 130                 ReleaseAttributeContext(ListContext);
 131                 ExFreePoolWithTag(ListBuffer, TAG_NTFS);
 132
 133                 if (Context != NULL)
 134                 {
 135                     if (AttrRecord->IsNonResident) DPRINT("Found context = %p\n", Context);
 136                     return Context;
 137                 }
 138             }
 139         }
 140
 141         if (AttrRecord->Type == Type)
 142         {
 143             if (AttrRecord->NameLength == NameLength)
 144             {
 145                 PWCHAR AttrName;
 146
 147                 AttrName = (PWCHAR)((PCHAR)AttrRecord + AttrRecord->NameOffset);
 148                 DPRINT("%.*S, %.*S\n", AttrRecord->NameLength, AttrName, NameLength, Name);
 149                 if (RtlCompareMemory(AttrName, Name, NameLength << 1) == (NameLength << 1))
 150                 {
 151                     /* Found it, fill up the context and return. */
 152                     DPRINT("Found context\n");
 153                     return PrepareAttributeContext(AttrRecord);
 154                 }
 155             }
 156         }
 157
 158         if (AttrRecord->Length == 0)
 159         {
 160             DPRINT("Null length attribute record\n");
 161             return NULL;
 162         }
 163         AttrRecord = (PNTFS_ATTR_RECORD)((PCHAR)AttrRecord + AttrRecord->Length);
 164     }
 165
 166     DPRINT("Ended\n");
 167     return NULL;
 168 }
 169
 170
 171 NTSTATUS
 172 FindAttribute(PDEVICE_EXTENSION Vcb,
 173               PFILE_RECORD_HEADER MftRecord,
 174               ULONG Type,
 175               PCWSTR Name,
 176               ULONG NameLength,
 177               PNTFS_ATTR_CONTEXT * AttrCtx)
 178 {
 179     PNTFS_ATTR_RECORD AttrRecord;
 180     PNTFS_ATTR_RECORD AttrRecordEnd;
 181
 182     DPRINT("FindAttribute(%p, %p, 0x%x, %S, %u, %p)\n", Vcb, MftRecord, Type, Name, NameLength, AttrCtx);
 183
 184     AttrRecord = (PNTFS_ATTR_RECORD)((PCHAR)MftRecord + MftRecord->AttributeOffset);
 185     AttrRecordEnd = (PNTFS_ATTR_RECORD)((PCHAR)MftRecord + Vcb->NtfsInfo.BytesPerFileRecord);
 186
 187     *AttrCtx = FindAttributeHelper(Vcb, AttrRecord, AttrRecordEnd, Type, Name, NameLength);
 188     if (*AttrCtx == NULL)
 189     {
 190         return STATUS_OBJECT_NAME_NOT_FOUND;
 191     }
 192
 193     return STATUS_SUCCESS;
 194 }
 195
 196
 197 ULONG
 198 AttributeAllocatedLength(PNTFS_ATTR_RECORD AttrRecord)
 199 {
 200     if (AttrRecord->IsNonResident)
 201         return AttrRecord->NonResident.AllocatedSize;
 202     else
 203         return AttrRecord->Resident.ValueLength;
 204 }
 205
 206
 207 ULONGLONG
 208 AttributeDataLength(PNTFS_ATTR_RECORD AttrRecord)
 209 {
 210     if (AttrRecord->IsNonResident)
 211         return AttrRecord->NonResident.DataSize;
 212     else
 213         return AttrRecord->Resident.ValueLength;
 214 }
 215
 216
 217 ULONG
 218 ReadAttribute(PDEVICE_EXTENSION Vcb,
 219               PNTFS_ATTR_CONTEXT Context,
 220               ULONGLONG Offset,
 221               PCHAR Buffer,
 222               ULONG Length)
 223 {
 224     ULONGLONG LastLCN;
 225     PUCHAR DataRun;
 226     LONGLONG DataRunOffset;
 227     ULONGLONG DataRunLength;
 228     LONGLONG DataRunStartLCN;
 229     ULONGLONG CurrentOffset;
 230     ULONG ReadLength;
 231     ULONG AlreadyRead;
 232     NTSTATUS Status;
 233
 234     if (!Context->Record.IsNonResident)
 235     {
 236         if (Offset > Context->Record.Resident.ValueLength)
 237             return 0;
 238         if (Offset + Length > Context->Record.Resident.ValueLength)
 239             Length = (ULONG)(Context->Record.Resident.ValueLength - Offset);
 240         RtlCopyMemory(Buffer, (PCHAR)&Context->Record + Context->Record.Resident.ValueOffset + Offset, Length);
 241         return Length;
 242     }
 243
 244     /*
 245      * Non-resident attribute
 246      */
 247
 248     /*
 249      * I. Find the corresponding start data run.
 250      */
 251
 252     AlreadyRead = 0;
 253
 254     // FIXME: Cache seems to be non-working. Disable it for now
 255     //if(Context->CacheRunOffset <= Offset && Offset < Context->CacheRunOffset + Context->CacheRunLength * Volume->ClusterSize)
 256     if (0)
 257     {
 258         DataRun = Context->CacheRun;
 259         LastLCN = Context->CacheRunLastLCN;
 260         DataRunStartLCN = Context->CacheRunStartLCN;
 261         DataRunLength = Context->CacheRunLength;
 262         CurrentOffset = Context->CacheRunCurrentOffset;
 263     }
 264     else
 265     {
 266         LastLCN = 0;
 267         DataRun = (PUCHAR)&Context->Record + Context->Record.NonResident.MappingPairsOffset;
 268         CurrentOffset = 0;
 269
 270         while (1)
 271         {
 272             DataRun = DecodeRun(DataRun, &DataRunOffset, &DataRunLength);
 273             if (DataRunOffset != -1)
 274             {
 275                 /* Normal data run. */
 276                 DataRunStartLCN = LastLCN + DataRunOffset;
 277                 LastLCN = DataRunStartLCN;
 278             }
 279             else
 280             {
 281                 /* Sparse data run. */
 282                 DataRunStartLCN = -1;
 283             }
 284
 285             if (Offset >= CurrentOffset &&
 286                 Offset < CurrentOffset + (DataRunLength * Vcb->NtfsInfo.BytesPerCluster))
 287             {
 288                 break;
 289             }
 290
 291             if (*DataRun == 0)
 292             {
 293                 return AlreadyRead;
 294             }
 295
 296             CurrentOffset += DataRunLength * Vcb->NtfsInfo.BytesPerCluster;
 297         }
 298     }
 299
 300     /*
 301      * II. Go through the run list and read the data
 302      */
 303
 304     ReadLength = (ULONG)min(DataRunLength * Vcb->NtfsInfo.BytesPerCluster - (Offset - CurrentOffset), Length);
 305     if (DataRunStartLCN == -1)
 306         RtlZeroMemory(Buffer, ReadLength);
 307     Status = NtfsReadDisk(Vcb->StorageDevice,
 308                           DataRunStartLCN * Vcb->NtfsInfo.BytesPerCluster + Offset - CurrentOffset,
 309                           ReadLength,
 310                           Vcb->NtfsInfo.BytesPerSector,
 311                           (PVOID)Buffer,
 312                           FALSE);
 313     if (NT_SUCCESS(Status))
 314     {
 315         Length -= ReadLength;
 316         Buffer += ReadLength;
 317         AlreadyRead += ReadLength;
 318
 319         if (ReadLength == DataRunLength * Vcb->NtfsInfo.BytesPerCluster - (Offset - CurrentOffset))
 320         {
 321             CurrentOffset += DataRunLength * Vcb->NtfsInfo.BytesPerCluster;
 322             DataRun = DecodeRun(DataRun, &DataRunOffset, &DataRunLength);
 323             if (DataRunLength != (ULONGLONG)-1)
 324             {
 325                 DataRunStartLCN = LastLCN + DataRunOffset;
 326                 LastLCN = DataRunStartLCN;
 327             }
 328             else
 329                 DataRunStartLCN = -1;
 330
 331             if (*DataRun == 0)
 332                 return AlreadyRead;
 333         }
 334
 335         while (Length > 0)
 336         {
 337             ReadLength = (ULONG)min(DataRunLength * Vcb->NtfsInfo.BytesPerCluster, Length);
 338             if (DataRunStartLCN == -1)
 339                 RtlZeroMemory(Buffer, ReadLength);
 340             else
 341             {
 342                 Status = NtfsReadDisk(Vcb->StorageDevice,
 343                                       DataRunStartLCN * Vcb->NtfsInfo.BytesPerCluster,
 344                                       ReadLength,
 345                                       Vcb->NtfsInfo.BytesPerSector,
 346                                       (PVOID)Buffer,
 347                                       FALSE);
 348                 if (!NT_SUCCESS(Status))
 349                     break;
 350             }
 351
 352             Length -= ReadLength;
 353             Buffer += ReadLength;
 354             AlreadyRead += ReadLength;
 355
 356             /* We finished this request, but there still data in this data run. */
 357             if (Length == 0 && ReadLength != DataRunLength * Vcb->NtfsInfo.BytesPerCluster)
 358                 break;
 359
 360             /*
 361              * Go to next run in the list.
 362              */
 363
 364             if (*DataRun == 0)
 365                 break;
 366             CurrentOffset += DataRunLength * Vcb->NtfsInfo.BytesPerCluster;
 367             DataRun = DecodeRun(DataRun, &DataRunOffset, &DataRunLength);
 368             if (DataRunOffset != -1)
 369             {
 370                 /* Normal data run. */
 371                 DataRunStartLCN = LastLCN + DataRunOffset;
 372                 LastLCN = DataRunStartLCN;
 373             }
 374             else
 375             {
 376                 /* Sparse data run. */
 377                 DataRunStartLCN = -1;
 378             }
 379         } /* while */
 380
 381     } /* if Disk */
 382
 383     Context->CacheRun = DataRun;
 384     Context->CacheRunOffset = Offset + AlreadyRead;
 385     Context->CacheRunStartLCN = DataRunStartLCN;
 386     Context->CacheRunLength = DataRunLength;
 387     Context->CacheRunLastLCN = LastLCN;
 388     Context->CacheRunCurrentOffset = CurrentOffset;
 389
 390     return AlreadyRead;
 391 }
 392
 393
 394 NTSTATUS
 395 ReadFileRecord(PDEVICE_EXTENSION Vcb,
 396                ULONGLONG index,
 397                PFILE_RECORD_HEADER file)
 398 {
 399     ULONGLONG BytesRead;
 400
 401     DPRINT("ReadFileRecord(%p, %I64x, %p)\n", Vcb, index, file);
 402
 403     BytesRead = ReadAttribute(Vcb, Vcb->MFTContext, index * Vcb->NtfsInfo.BytesPerFileRecord, (PCHAR)file, Vcb->NtfsInfo.BytesPerFileRecord);
 404     if (BytesRead != Vcb->NtfsInfo.BytesPerFileRecord)
 405     {
 406         DPRINT1("ReadFileRecord failed: %I64u read, %u expected\n", BytesRead, Vcb->NtfsInfo.BytesPerFileRecord);
 407         return STATUS_PARTIAL_COPY;
 408     }
 409
 410     /* Apply update sequence array fixups. */
 411     return FixupUpdateSequenceArray(Vcb, &file->Ntfs);
 412 }
 413
 414
 415 NTSTATUS
 416 FixupUpdateSequenceArray(PDEVICE_EXTENSION Vcb,
 417                          PNTFS_RECORD_HEADER Record)
 418 {
 419     USHORT *USA;
 420     USHORT USANumber;
 421     USHORT USACount;
 422     USHORT *Block;
 423
 424     USA = (USHORT*)((PCHAR)Record + Record->UsaOffset);
 425     USANumber = *(USA++);
 426     USACount = Record->UsaCount - 1; /* Exclude the USA Number. */
 427     Block = (USHORT*)((PCHAR)Record + Vcb->NtfsInfo.BytesPerSector - 2);
 428
 429     while (USACount)
 430     {
 431         if (*Block != USANumber)
 432         {
 433             DPRINT1("Mismatch with USA: %u read, %u expected\n" , *Block, USANumber);
 434             return STATUS_UNSUCCESSFUL;
 435         }
 436         *Block = *(USA++);
 437         Block = (USHORT*)((PCHAR)Block + Vcb->NtfsInfo.BytesPerSector);
 438         USACount--;
 439     }
 440
 441     return STATUS_SUCCESS;
 442 }
 443
 444
 445 NTSTATUS
 446 ReadLCN(PDEVICE_EXTENSION Vcb,
 447         ULONGLONG lcn,
 448         ULONG count,
 449         PVOID buffer)
 450 {
 451     LARGE_INTEGER DiskSector;
 452
 453     DiskSector.QuadPart = lcn;
 454
 455     return NtfsReadSectors(Vcb->StorageDevice,
 456                            DiskSector.u.LowPart * Vcb->NtfsInfo.SectorsPerCluster,
 457                            count * Vcb->NtfsInfo.SectorsPerCluster,
 458                            Vcb->NtfsInfo.BytesPerSector,
 459                            buffer,
 460                            FALSE);
 461 }
 462
 463
 464 BOOLEAN
 465 CompareFileName(PUNICODE_STRING FileName,
 466                 PINDEX_ENTRY_ATTRIBUTE IndexEntry,
 467                 BOOLEAN DirSearch)
 468 {
 469     BOOLEAN Ret, Alloc = FALSE;
 470     UNICODE_STRING EntryName;
 471
 472     EntryName.Buffer = IndexEntry->FileName.Name;
 473     EntryName.Length =
 474     EntryName.MaximumLength = IndexEntry->FileName.NameLength * sizeof(WCHAR);
 475
 476     if (DirSearch)
 477     {
 478         UNICODE_STRING IntFileName;
 479         if (IndexEntry->FileName.NameType != NTFS_FILE_NAME_POSIX)
 480         {
 481             NT_VERIFY(NT_SUCCESS(RtlUpcaseUnicodeString(&IntFileName, FileName, TRUE)));
 482             Alloc = TRUE;
 483         }
 484         else
 485         {
 486             IntFileName = *FileName;
 487         }
 488
 489         Ret = FsRtlIsNameInExpression(&IntFileName, &EntryName, (IndexEntry->FileName.NameType != NTFS_FILE_NAME_POSIX), NULL);
 490
 491         if (Alloc)
 492         {
 493             RtlFreeUnicodeString(&IntFileName);
 494         }
 495
 496         return Ret;
 497     }
 498     else
 499     {
 500         return (RtlCompareUnicodeString(FileName, &EntryName, (IndexEntry->FileName.NameType != NTFS_FILE_NAME_POSIX)) == 0);
 501     }
 502 }
 503
 504 #if 0
 505 static
 506 VOID
 507 DumpIndexEntry(PINDEX_ENTRY_ATTRIBUTE IndexEntry)
 508 {
 509     DPRINT1("Entry: %p\n", IndexEntry);
 510     DPRINT1("\tData.Directory.IndexedFile: %I64x\n", IndexEntry->Data.Directory.IndexedFile);
 511     DPRINT1("\tLength: %u\n", IndexEntry->Length);
 512     DPRINT1("\tKeyLength: %u\n", IndexEntry->KeyLength);
 513     DPRINT1("\tFlags: %x\n", IndexEntry->Flags);
 514     DPRINT1("\tReserved: %x\n", IndexEntry->Reserved);
 515     DPRINT1("\t\tDirectoryFileReferenceNumber: %I64x\n", IndexEntry->FileName.DirectoryFileReferenceNumber);
 516     DPRINT1("\t\tCreationTime: %I64u\n", IndexEntry->FileName.CreationTime);
 517     DPRINT1("\t\tChangeTime: %I64u\n", IndexEntry->FileName.ChangeTime);
 518     DPRINT1("\t\tLastWriteTime: %I64u\n", IndexEntry->FileName.LastWriteTime);
 519     DPRINT1("\t\tLastAccessTime: %I64u\n", IndexEntry->FileName.LastAccessTime);
 520     DPRINT1("\t\tAllocatedSize: %I64u\n", IndexEntry->FileName.AllocatedSize);
 521     DPRINT1("\t\tDataSize: %I64u\n", IndexEntry->FileName.DataSize);
 522     DPRINT1("\t\tFileAttributes: %x\n", IndexEntry->FileName.FileAttributes);
 523     DPRINT1("\t\tNameLength: %u\n", IndexEntry->FileName.NameLength);
 524     DPRINT1("\t\tNameType: %x\n", IndexEntry->FileName.NameType);
 525     DPRINT1("\t\tName: %.*S\n", IndexEntry->FileName.NameLength, IndexEntry->FileName.Name);
 526 }
 527 #endif
 528
 529 NTSTATUS
 530 BrowseIndexEntries(PDEVICE_EXTENSION Vcb,
 531                    PFILE_RECORD_HEADER MftRecord,
 532                    PCHAR IndexRecord,
 533                    ULONG IndexBlockSize,
 534                    PINDEX_ENTRY_ATTRIBUTE FirstEntry,
 535                    PINDEX_ENTRY_ATTRIBUTE LastEntry,
 536                    PUNICODE_STRING FileName,
 537                    PULONG StartEntry,
 538                    PULONG CurrentEntry,
 539                    BOOLEAN DirSearch,
 540                    ULONGLONG *OutMFTIndex)
 541 {
 542     NTSTATUS Status;
 543     ULONG RecordOffset;
 544     PINDEX_ENTRY_ATTRIBUTE IndexEntry;
 545     PNTFS_ATTR_CONTEXT IndexAllocationCtx;
 546     ULONGLONG IndexAllocationSize;
 547     PINDEX_BUFFER IndexBuffer;
 548
 549     DPRINT("BrowseIndexEntries(%p, %p, %p, %u, %p, %p, %wZ, %u, %u, %u, %p)\n", Vcb, MftRecord, IndexRecord, IndexBlockSize, FirstEntry, LastEntry, FileName, *StartEntry, *CurrentEntry, DirSearch, OutMFTIndex);
 550
 551     IndexEntry = FirstEntry;
 552     while (IndexEntry < LastEntry &&
 553            !(IndexEntry->Flags & NTFS_INDEX_ENTRY_END))
 554     {
 555         if ((IndexEntry->Data.Directory.IndexedFile & NTFS_MFT_MASK) > 0x10 &&
 556             *CurrentEntry >= *StartEntry &&
 557             IndexEntry->FileName.NameType != NTFS_FILE_NAME_DOS &&
 558             CompareFileName(FileName, IndexEntry, DirSearch))
 559         {
 560             *StartEntry = *CurrentEntry;
 561             *OutMFTIndex = (IndexEntry->Data.Directory.IndexedFile & NTFS_MFT_MASK);
 562             return STATUS_SUCCESS;
 563         }
 564
 565         (*CurrentEntry) += 1;
 566         ASSERT(IndexEntry->Length >= sizeof(INDEX_ENTRY_ATTRIBUTE));
 567         IndexEntry = (PINDEX_ENTRY_ATTRIBUTE)((PCHAR)IndexEntry + IndexEntry->Length);
 568     }
 569
 570     /* If we're already browsing a subnode */
 571     if (IndexRecord == NULL)
 572     {
 573         return STATUS_OBJECT_PATH_NOT_FOUND;
 574     }
 575
 576     /* If there's no subnode */
 577     if (!(IndexEntry->Flags & NTFS_INDEX_ENTRY_NODE))
 578     {
 579         return STATUS_OBJECT_PATH_NOT_FOUND;
 580     }
 581
 582     Status = FindAttribute(Vcb, MftRecord, AttributeIndexAllocation, L"$I30", 4, &IndexAllocationCtx);
 583     if (!NT_SUCCESS(Status))
 584     {
 585         DPRINT("Corrupted filesystem!\n");
 586         return Status;
 587     }
 588
 589     IndexAllocationSize = AttributeDataLength(&IndexAllocationCtx->Record);
 590     Status = STATUS_OBJECT_PATH_NOT_FOUND;
 591     for (RecordOffset = 0; RecordOffset < IndexAllocationSize; RecordOffset += IndexBlockSize)
 592     {
 593         ReadAttribute(Vcb, IndexAllocationCtx, RecordOffset, IndexRecord, IndexBlockSize);
 594         Status = FixupUpdateSequenceArray(Vcb, &((PFILE_RECORD_HEADER)IndexRecord)->Ntfs);
 595         if (!NT_SUCCESS(Status))
 596         {
 597             break;
 598         }
 599
 600         IndexBuffer = (PINDEX_BUFFER)IndexRecord;
 601         ASSERT(IndexBuffer->Ntfs.Type == NRH_INDX_TYPE);
 602         ASSERT(IndexBuffer->Header.AllocatedSize + FIELD_OFFSET(INDEX_BUFFER, Header) == IndexBlockSize);
 603         FirstEntry = (PINDEX_ENTRY_ATTRIBUTE)((ULONG_PTR)&IndexBuffer->Header + IndexBuffer->Header.FirstEntryOffset);
 604         LastEntry = (PINDEX_ENTRY_ATTRIBUTE)((ULONG_PTR)&IndexBuffer->Header + IndexBuffer->Header.TotalSizeOfEntries);
 605         ASSERT(LastEntry <= (PINDEX_ENTRY_ATTRIBUTE)((ULONG_PTR)IndexBuffer + IndexBlockSize));
 606
 607         Status = BrowseIndexEntries(NULL, NULL, NULL, 0, FirstEntry, LastEntry, FileName, StartEntry, CurrentEntry, DirSearch, OutMFTIndex);
 608         if (NT_SUCCESS(Status))
 609         {
 610             break;
 611         }
 612     }
 613
 614     ReleaseAttributeContext(IndexAllocationCtx);
 615     return Status;
 616 }
 617
 618 NTSTATUS
 619 NtfsFindMftRecord(PDEVICE_EXTENSION Vcb,
 620                   ULONGLONG MFTIndex,
 621                   PUNICODE_STRING FileName,
 622                   PULONG FirstEntry,
 623                   BOOLEAN DirSearch,
 624                   ULONGLONG *OutMFTIndex)
 625 {
 626     PFILE_RECORD_HEADER MftRecord;
 627     PNTFS_ATTR_CONTEXT IndexRootCtx;
 628     PINDEX_ROOT_ATTRIBUTE IndexRoot;
 629     PCHAR IndexRecord;
 630     PINDEX_ENTRY_ATTRIBUTE IndexEntry, IndexEntryEnd;
 631     NTSTATUS Status;
 632     ULONG CurrentEntry = 0;
 633
 634     DPRINT("NtfsFindMftRecord(%p, %I64d, %wZ, %u, %u, %p)\n", Vcb, MFTIndex, FileName, *FirstEntry, DirSearch, OutMFTIndex);
 635
 636     MftRecord = ExAllocatePoolWithTag(NonPagedPool,
 637                                       Vcb->NtfsInfo.BytesPerFileRecord,
 638                                       TAG_NTFS);
 639     if (MftRecord == NULL)
 640     {
 641         return STATUS_INSUFFICIENT_RESOURCES;
 642     }
 643
 644     Status = ReadFileRecord(Vcb, MFTIndex, MftRecord);
 645     if (!NT_SUCCESS(Status))
 646     {
 647         ExFreePoolWithTag(MftRecord, TAG_NTFS);
 648         return Status;
 649     }
 650
 651     ASSERT(MftRecord->Ntfs.Type == NRH_FILE_TYPE);
 652     Status = FindAttribute(Vcb, MftRecord, AttributeIndexRoot, L"$I30", 4, &IndexRootCtx);
 653     if (!NT_SUCCESS(Status))
 654     {
 655         ExFreePoolWithTag(MftRecord, TAG_NTFS);
 656         return Status;
 657     }
 658
 659     IndexRecord = ExAllocatePoolWithTag(NonPagedPool, Vcb->NtfsInfo.BytesPerIndexRecord, TAG_NTFS);
 660     if (IndexRecord == NULL)
 661     {
 662         ReleaseAttributeContext(IndexRootCtx);
 663         ExFreePoolWithTag(MftRecord, TAG_NTFS);
 664         return STATUS_INSUFFICIENT_RESOURCES;
 665     }
 666
 667     ReadAttribute(Vcb, IndexRootCtx, 0, IndexRecord, Vcb->NtfsInfo.BytesPerIndexRecord);
 668     IndexRoot = (PINDEX_ROOT_ATTRIBUTE)IndexRecord;
 669     IndexEntry = (PINDEX_ENTRY_ATTRIBUTE)((PCHAR)&IndexRoot->Header + IndexRoot->Header.FirstEntryOffset);
 670     /* Index root is always resident. */
 671     IndexEntryEnd = (PINDEX_ENTRY_ATTRIBUTE)(IndexRecord + IndexRoot->Header.TotalSizeOfEntries);
 672     ReleaseAttributeContext(IndexRootCtx);
 673
 674     DPRINT("IndexRecordSize: %x IndexBlockSize: %x\n", Vcb->NtfsInfo.BytesPerIndexRecord, IndexRoot->SizeOfEntry);
 675
 676     Status = BrowseIndexEntries(Vcb, MftRecord, IndexRecord, IndexRoot->SizeOfEntry, IndexEntry, IndexEntryEnd, FileName, FirstEntry, &CurrentEntry, DirSearch, OutMFTIndex);
 677
 678     ExFreePoolWithTag(IndexRecord, TAG_NTFS);
 679     ExFreePoolWithTag(MftRecord, TAG_NTFS);
 680
 681     return Status;
 682 }
 683
 684 NTSTATUS
 685 NtfsLookupFileAt(PDEVICE_EXTENSION Vcb,
 686                  PUNICODE_STRING PathName,
 687                  PFILE_RECORD_HEADER *FileRecord,
 688                  PULONGLONG MFTIndex,
 689                  ULONGLONG CurrentMFTIndex)
 690 {
 691     UNICODE_STRING Current, Remaining;
 692     NTSTATUS Status;
 693     ULONG FirstEntry = 0;
 694
 695     DPRINT("NtfsLookupFileAt(%p, %wZ, %p, %I64x)\n", Vcb, PathName, FileRecord, CurrentMFTIndex);
 696
 697     FsRtlDissectName(*PathName, &Current, &Remaining);
 698
 699     while (Current.Length != 0)
 700     {
 701         DPRINT("Current: %wZ\n", &Current);
 702
 703         Status = NtfsFindMftRecord(Vcb, CurrentMFTIndex, &Current, &FirstEntry, FALSE, &CurrentMFTIndex);
 704         if (!NT_SUCCESS(Status))
 705         {
 706             return Status;
 707         }
 708
 709         if (Remaining.Length == 0)
 710             break;
 711
 712         FsRtlDissectName(Current, &Current, &Remaining);
 713     }
 714
 715     *FileRecord = ExAllocatePoolWithTag(NonPagedPool, Vcb->NtfsInfo.BytesPerFileRecord, TAG_NTFS);
 716     if (*FileRecord == NULL)
 717     {
 718         DPRINT("NtfsLookupFileAt: Can't allocate MFT record\n");
 719         return STATUS_INSUFFICIENT_RESOURCES;
 720     }
 721
 722     Status = ReadFileRecord(Vcb, CurrentMFTIndex, *FileRecord);
 723     if (!NT_SUCCESS(Status))
 724     {
 725         DPRINT("NtfsLookupFileAt: Can't read MFT record\n");
 726         ExFreePoolWithTag(*FileRecord, TAG_NTFS);
 727         return Status;
 728     }
 729
 730     *MFTIndex = CurrentMFTIndex;
 731
 732     return STATUS_SUCCESS;
 733 }
 734
 735 NTSTATUS
 736 NtfsLookupFile(PDEVICE_EXTENSION Vcb,
 737                PUNICODE_STRING PathName,
 738                PFILE_RECORD_HEADER *FileRecord,
 739                PULONGLONG MFTIndex)
 740 {
 741     return NtfsLookupFileAt(Vcb, PathName, FileRecord, MFTIndex, NTFS_FILE_ROOT);
 742 }
 743
 744 NTSTATUS
 745 NtfsFindFileAt(PDEVICE_EXTENSION Vcb,
 746                PUNICODE_STRING SearchPattern,
 747                PULONG FirstEntry,
 748                PFILE_RECORD_HEADER *FileRecord,
 749                PULONGLONG MFTIndex,
 750                ULONGLONG CurrentMFTIndex)
 751 {
 752     NTSTATUS Status;
 753
 754     DPRINT("NtfsFindFileAt(%p, %wZ, %u, %p, %p, %I64x)\n", Vcb, SearchPattern, *FirstEntry, FileRecord, MFTIndex, CurrentMFTIndex);
 755
 756     Status = NtfsFindMftRecord(Vcb, CurrentMFTIndex, SearchPattern, FirstEntry, TRUE, &CurrentMFTIndex);
 757     if (!NT_SUCCESS(Status))
 758     {
 759         DPRINT("NtfsFindFileAt: NtfsFindMftRecord() failed with status 0x%08lx\n", Status);
 760         return Status;
 761     }
 762
 763     *FileRecord = ExAllocatePoolWithTag(NonPagedPool, Vcb->NtfsInfo.BytesPerFileRecord, TAG_NTFS);
 764     if (*FileRecord == NULL)
 765     {
 766         DPRINT("NtfsFindFileAt: Can't allocate MFT record\n");
 767         return STATUS_INSUFFICIENT_RESOURCES;
 768     }
 769
 770     Status = ReadFileRecord(Vcb, CurrentMFTIndex, *FileRecord);
 771     if (!NT_SUCCESS(Status))
 772     {
 773         DPRINT("NtfsFindFileAt: Can't read MFT record\n");
 774         ExFreePoolWithTag(*FileRecord, TAG_NTFS);
 775         return Status;
 776     }
 777
 778     *MFTIndex = CurrentMFTIndex;
 779
 780     return STATUS_SUCCESS;
 781 }
 782
 783 /* EOF */