dissect.apfs.util

Module Contents

Functions

fletcher64	Compute the Fletcher-64 checksum of the given data.
make_fs_object_key	Create a j_key struct for the given object ID and type.
parse_fs_object_key	Parse an object ID and type from a j_key struct.
cmp_default	Default comparison function for B-tree keys.
cmp_omap	Comparison function for OMAP keys.
cmp_fs	Comparison function for FS object keys.
cmp_fs_extent	Comparison function for FS extent keys.
cmp_fext	Comparison function for sealed file extent keys.
cmp_fs_dir	Comparison function for FS directory entries.
cmp_fs_dir_hash	Comparison function for FS directory entries.

dissect.apfs.util.fletcher64(data: bytes) → int

Compute the Fletcher-64 checksum of the given data.

dissect.apfs.util.make_fs_object_key(oid: int, type: dissect.apfs.c_apfs.c_apfs.APFS_TYPE) → dissect.apfs.c_apfs.c_apfs.j_key

Create a j_key struct for the given object ID and type.

dissect.apfs.util.parse_fs_object_key(data: bytes) → tuple[int, dissect.apfs.c_apfs.c_apfs.APFS_TYPE]

Parse an object ID and type from a j_key struct.

dissect.apfs.util.cmp_default(key: bytes, other: bytes) → Literal[-1, 0, 1]

Default comparison function for B-tree keys.

dissect.apfs.util.cmp_omap(key: tuple[int, int], other: bytes) → Literal[-1, 0, 1]

Comparison function for OMAP keys.

dissect.apfs.util.cmp_fs(key: tuple[int, int], other: bytes) → Literal[-1, 0, 1]

Comparison function for FS object keys.

dissect.apfs.util.cmp_fs_extent(key: tuple[tuple[int, int], int], other: bytes) → Literal[-1, 0, 1]

Comparison function for FS extent keys.

dissect.apfs.util.cmp_fext(key: tuple[int, int], other: bytes) → Literal[-1, 0, 1]

Comparison function for sealed file extent keys.

dissect.apfs.util.cmp_fs_dir(key: tuple[tuple[int, int], bytes], other: bytes) → Literal[-1, 0, 1]

Comparison function for FS directory entries.

dissect.apfs.util.cmp_fs_dir_hash(key: tuple[tuple[int, int], int, bytes | None], other: bytes) → Literal[-1, 0, 1]

Comparison function for FS directory entries.