summaryrefslogtreecommitdiffstats
path: root/src/vmfs.c
diff options
context:
space:
mode:
authorChristophe Grenier <grenier@cgsecurity.org>2011-07-20 07:43:29 +0200
committerChristophe Grenier <grenier@cgsecurity.org>2011-07-20 07:43:29 +0200
commitfbdc01bbc359a38383ce36db1682e0db6c1f4046 (patch)
treec5face36f2cee2c5c049b2899e0e76e8ce81fd3d /src/vmfs.c
parentfcb2816ea33817d6f23ec617c3336a2a74dc04d0 (diff)
Add detection of Vmware VMFS partition
Diffstat (limited to 'src/vmfs.c')
-rw-r--r--src/vmfs.c102
1 files changed, 102 insertions, 0 deletions
diff --git a/src/vmfs.c b/src/vmfs.c
new file mode 100644
index 0000000..0a2fd0d
--- /dev/null
+++ b/src/vmfs.c
@@ -0,0 +1,102 @@
+/*
+
+ File: vmfs.c
+
+ Copyright (C) 2011 Christophe GRENIER <grenier@cgsecurity.org>
+
+ This software is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 2 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License along
+ with this program; if not, write the Free Software Foundation, Inc., 51
+ Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+
+ */
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+#ifdef HAVE_STDLIB_H
+#include <stdlib.h>
+#endif
+#ifdef HAVE_STRING_H
+#include <string.h>
+#endif
+#include <stdio.h>
+#include "types.h"
+#include "common.h"
+#include "fnctdsk.h"
+#include "log.h"
+#include "vmfs.h"
+
+static int test_VMFS(disk_t *disk, const struct vmfs_volume *sb, partition_t *partition, const int dump_ind);
+static int set_VMFS_info(const struct vmfs_volume *sb, partition_t *partition);
+
+int check_VMFS(disk_t *disk,partition_t *partition)
+{
+ unsigned char *buffer=(unsigned char*)MALLOC(2*DEFAULT_SECTOR_SIZE);
+ if(disk->pread(disk, buffer, 2*DEFAULT_SECTOR_SIZE, partition->part_offset+0x100000) != DEFAULT_SECTOR_SIZE)
+ {
+ free(buffer);
+ return 1;
+ }
+ if(test_VMFS(disk, (struct vmfs_volume*)buffer, partition, 0)!=0)
+ {
+ free(buffer);
+ return 1;
+ }
+ set_VMFS_info((struct vmfs_volume*)buffer, partition);
+ free(buffer);
+ return 0;
+}
+
+static int set_VMFS_info(const struct vmfs_volume *sb, partition_t *partition)
+{
+ sprintf(partition->info,"VMFS %lu", (long unsigned)le32(sb->version));
+ return 0;
+}
+
+int recover_VMFS(disk_t *disk, const struct vmfs_volume *sb, partition_t *partition, const int verbose, const int dump_ind)
+{
+ const struct vmfs_lvm* lvm=(const struct vmfs_lvm*)(((const char *)sb)+0x200);
+ if(test_VMFS(disk, sb, partition, dump_ind)!=0)
+ return 1;
+ if(partition==NULL)
+ return 0;
+ set_VMFS_info(sb, partition);
+ partition->part_type_i386=P_VMFS;
+ partition->part_size=(uint64_t)le64(lvm->size);
+ partition->blocksize=0;
+ partition->sborg_offset=0;
+ partition->sb_offset=0;
+ if(verbose>0)
+ {
+ log_info("\n");
+ }
+ return 0;
+}
+
+static int test_VMFS(disk_t *disk, const struct vmfs_volume *sb, partition_t *partition, const int dump_ind)
+{
+ if(le32(sb->magic)!=0xc001d00d)
+ return 1;
+ if(dump_ind!=0)
+ {
+ if(partition!=NULL && disk!=NULL)
+ log_info("\nVMFS magic value at %u/%u/%u\n",
+ offset2cylinder(disk,partition->part_offset),
+ offset2head(disk,partition->part_offset),
+ offset2sector(disk,partition->part_offset));
+ dump_log(sb,DEFAULT_SECTOR_SIZE);
+ }
+ if(partition==NULL)
+ return 0;
+ partition->upart_type=UP_VMFS;
+ return 0;
+}