自学教程：C++ tsk_error_print函数代码示例

static inttest_ntfs_fe(){    TSK_FS_INFO *fs;    TSK_IMG_INFO *img;    const char *tname = "fe_test_1-NTFS";    char fname[512];    snprintf(fname, 512, "%s/fe_test_1.img", s_root);    if ((img = tsk_img_open_sing(fname, (TSK_IMG_TYPE_ENUM) 0, 0)) == NULL) {        fprintf(stderr, "Error opening %s image/n", tname);        tsk_error_print(stderr);        return 1;    }    if ((fs = tsk_fs_open_img(img, 32256, (TSK_FS_TYPE_ENUM) 0)) == NULL) {        fprintf(stderr, "Error opening %s image/n", tname);        tsk_error_print(stderr);        return 1;    }    if (test_dir_open_apis(fs, "/allocated", 30)) {        fprintf(stderr, "%s failure/n", tname);        return 1;    }    if (test_walk_apis(fs, 30)) {        fprintf(stderr, "%s failure/n", tname);        return 1;    }    tsk_fs_close(fs);    tsk_img_close(img);    return 0;}

/**  * Analyze the volume starting at byte offset 'start'  * and walk each file that can be found. * * @param img Disk image to be analyzed. * @param start Byte offset of volume starting location. * * @return 1 on error and 0 on success*/static uint8_tprocFs(TskImgInfo * img_info, TSK_OFF_T start){    TskFsInfo *fs_info = new TskFsInfo();    /* Try it as a file system */    if (fs_info->open(img_info, start, TSK_FS_TYPE_DETECT))    {        delete fs_info;        tsk_error_print(stderr);        /* We could do some carving on the volume data at this point */        return 1;    }    /* Walk the files, starting at the root directory */    if (fs_info->dirWalk(fs_info->getRootINum(),            (TSK_FS_DIR_WALK_FLAG_ENUM) (TSK_FS_DIR_WALK_FLAG_RECURSE),            dirAct, NULL)) {        delete fs_info;        tsk_error_print(stderr);        fs_info->close();        return 1;    }    /* We could do some analysis of unallocated blocks at this point...  */    fs_info->close();    delete fs_info;    return 0;}

inttest_ntfs_comp(){    TSK_FS_INFO *fs;    TSK_IMG_INFO *img;    char *tname = "ntfs-comp-1";    char fname[512];    snprintf(fname, 512, "%s/ntfs-comp-1.img", s_root);    if ((img = tsk_img_open_sing(fname, (TSK_IMG_TYPE_ENUM) 0, 0)) == NULL) {        fprintf(stderr, "Error opening %s image/n", tname);        tsk_error_print(stderr);        return 1;    }    if ((fs = tsk_fs_open_img(img, 0, (TSK_FS_TYPE_ENUM) 0)) == NULL) {        fprintf(stderr, "Error opening %s image/n", tname);        tsk_error_print(stderr);        return 1;    }    if (testfile(fs, 34)) {        fprintf(stderr, "%s error (both)/n", tname);        return 1;    }    if (testfile(fs, 32)) {        fprintf(stderr, "%s error (sparse)/n", tname);        return 1;    }    tsk_fs_close(fs);    tsk_img_close(img);    return 0;}

inttest_fat12(){    TSK_FS_INFO *fs;    TSK_IMG_INFO *img;    const char *tname = "fat12.dd";    char fname[512];    snprintf(fname, 512, "%s/fat12.dd", s_root);    if ((img = tsk_img_open_sing(fname, (TSK_IMG_TYPE_ENUM) 0, 0)) == NULL) {        fprintf(stderr, "Error opening %s image/n", tname);        tsk_error_print(stderr);        tsk_error_reset();        return 1;    }    if ((fs = tsk_fs_open_img(img, 0, (TSK_FS_TYPE_ENUM) 0)) == NULL) {        fprintf(stderr, "Error opening %s image/n", tname);        tsk_error_print(stderr);        tsk_error_reset();        return 1;    }    if (testfile(fs, 33)) {        fprintf(stderr, "%s failure/n", tname);        return 1;    }    tsk_fs_close(fs);    tsk_img_close(img);    return 0;}

/* Verify that a specific attribute can be read from the file* @param a_addr The metadata address of the file to analyze* @param a_type Type that is known to be in file* @returns 1 if a test failed*/static inttest_get_type(TSK_FS_INFO * a_fs, TSK_INUM_T a_addr,    TSK_FS_ATTR_TYPE_ENUM a_type){    TSK_FS_FILE *fs_file;    // open the file    fs_file = tsk_fs_file_open_meta(a_fs, NULL, a_addr);    if (!fs_file) {        fprintf(stderr, "Error opening file %" PRIuINUM " via meta/n",            a_addr);        tsk_error_print(stderr);        return 1;    }    // verify the specified type can be opened    const TSK_FS_ATTR *fs_attr =        tsk_fs_file_attr_get_type(fs_file, a_type, 0, 0);    if (!fs_attr) {        fprintf(stderr,            "Error getting specified attribute %d-X (no id) from %"            PRIuINUM "/n", a_type, a_addr);        tsk_error_print(stderr);        return 1;    }    tsk_fs_file_close(fs_file);    return 0;}

/**  * Analyze the volume starting at byte offset 'start'  * and walk each file that can be found. * * @param img Disk image to be analyzed. * @param start Byte offset of volume starting location. * * @return 1 on error and 0 on success*/static uint8_tproc_fs(TSK_IMG_INFO * img_info, TSK_OFF_T start){    TSK_FS_INFO *fs_info;    /* Try it as a file system */    if ((fs_info =            tsk_fs_open_img(img_info, start, TSK_FS_TYPE_DETECT)) == NULL)    {        tsk_error_print(stderr);        /* We could do some carving on the volume data at this point */        return 1;    }    /* Walk the files, starting at the root directory */    if (tsk_fs_dir_walk(fs_info, fs_info->root_inum,            (TSK_FS_DIR_WALK_FLAG_ENUM) (TSK_FS_DIR_WALK_FLAG_RECURSE),            dir_act, NULL)) {        tsk_error_print(stderr);        tsk_fs_close(fs_info);        return 1;    }    /* We could do some analysis of unallocated blocks at this point...  */    tsk_fs_close(fs_info);    return 0;}

intmain(int argc, char **argv1){    TSK_IMG_INFO *img_info;    TSK_TCHAR **argv;#ifdef TSK_WIN32    // On Windows, get the wide arguments (mingw doesn't support wmain)    argv = CommandLineToArgvW(GetCommandLineW(), &argc);    if (argv == NULL) {        fprintf(stderr, "Error getting wide arguments/n");        exit(1);    }#else    argv = (TSK_TCHAR **) argv1;#endif    if (argc != 2) {        fprintf(stderr, "Missing image name/n");        exit(1);    }#if DO_HASHLOOKUP    /* Setup hash infrastructure */    if ((hdb_info =            tsk_hdb_open(_TSK_T("/XXX/NSRLFile.txt"),                TSK_HDB_OPEN_NONE)) == NULL) {        tsk_error_print(stderr);        exit(1);    }    if (tsk_hdb_hasindex(hdb_info, TSK_HDB_HTYPE_MD5_ID) == 0) {        fprintf(stderr,            "Hash database does not have an index (create one using hfind -i nsrl-md5 HASHFILE/n");        exit(1);    }#else    hdb_info = NULL;#endif    img_info = tsk_img_open_sing(argv[1], TSK_IMG_TYPE_DETECT, 0);    if (img_info == NULL) {        fprintf(stderr, "Error opening file/n");        tsk_error_print(stderr);        exit(1);    }    if (proc_vs(img_info, 0)) {        tsk_error_print(stderr);        tsk_img_close(img_info);        exit(1);    }    tsk_img_close(img_info);    return 0;}

int mft_image(_TCHAR *image){	int argc = 1;	//_TCHAR *argv1[2] = {0,};	//argv1[0] = L"test"; 	//argv1[1] = imaTge;	//printf("%s, %s/n/n", argv1[0], argv1[1]);    TSK_IMG_TYPE_ENUM imgtype = TSK_IMG_TYPE_DETECT;	// Use autodetection methods.	TSK_TCHAR *argv[1] = {0, };    unsigned int ssize = 0;    //TSK_TCHAR *cp;    int32_t sec_skew = 0;	bool do_hash = false;#ifdef TSK_WIN32    // On Windows, get the wide arguments (mingw doesn't support wmain)    //argv = CommandLineToArgvW(GetCommandLineW(), &argc);	argv[0] = image;    if (argv == NULL) {        fprintf(stderr, "Error getting wide arguments/n");        exit(1);    }#else    argv = (TSK_TCHAR **) argv1;#endif    progname = argv[0];    setlocale(LC_ALL, "");	// 
C++ tsk_error_reset函数代码示例
C++ tsize函数代码示例