/*

    File: ntfsp.c

    Copyright (C) 2007 Christophe GRENIER <grenier@cgsecurity.org>
  
    This software is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your option) any later version.
  
    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.
  
    You should have received a copy of the GNU General Public License along
    with this program; if not, write the Free Software Foundation, Inc., 51
    Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.

 */

#ifdef HAVE_CONFIG_H
#include <config.h>
#endif
#include <stdio.h>
#ifdef HAVE_STDLIB_H
#include <stdlib.h>
#endif
#ifdef HAVE_STRING_H
#include <string.h>
#endif
#include "types.h"
#include "common.h"
#include "list.h"
#include "filegen.h"
#ifdef HAVE_LIBNTFS
#include <ntfs/attrib.h>
#ifdef HAVE_NTFS_VERSION_H
#include <ntfs/version.h>
#endif
#include "ntfsp.h"
#endif
#include "intrf.h"
#include "intrfn.h"
#include "dir.h"
#include "ntfs.h"
#include "ntfs_dir.h"
#include "ntfs_inc.h"
#include "log.h"

#ifdef HAVE_LIBNTFS
unsigned int ntfs_remove_used_space(disk_t *disk_car,const partition_t *partition, alloc_data_t *list_search_space)
{
  dir_data_t dir_data;
  unsigned int res;
  switch(dir_partition_ntfs_init(disk_car,partition,&dir_data,0))
  {
    case -2:
    case -1:
      {
	WINDOW *window;
	window=newwin(0,0,0,0);	/* full screen */
	aff_buffer(BUFFER_RESET,"Q");
	aff_copy(window);
	wmove(window,4,0);
	aff_part(window,AFF_PART_ORDER,disk_car,partition);
	log_partition(disk_car,partition);
	aff_buffer(BUFFER_ADD,"Can't open filesystem. Filesystem seems damaged.\n");
	screen_buffer_display(window,"",NULL);
	delwin(window);
	(void) clearok(stdscr, TRUE);
#ifdef HAVE_TOUCHWIN
	touchwin(stdscr);
#endif
      }
      return 0;
  }
  {
    const unsigned int sizeof_buffer=512;
    struct ntfs_dir_struct *ls=(struct ntfs_dir_struct *)dir_data.private_dir_data;
    unsigned char *buffer;
    uint64_t start_free=0;
    uint64_t end_free=0;
    unsigned long int lcn;
    unsigned long int no_of_cluster;
    unsigned int cluster_size;
    unsigned int sector_size;
    log_trace("ntfs_remove_used_space\n");
    buffer=(unsigned char *)MALLOC(sizeof_buffer);
    {
      const struct ntfs_boot_sector*ntfs_header=(const struct ntfs_boot_sector*)buffer;
      if(disk_car->read(disk_car,512, buffer, partition->part_offset)!=0)
      {
	free(buffer);
	return 0;
      }
      no_of_cluster=le64(ntfs_header->sectors_nbr)/ntfs_header->sectors_per_cluster;
      cluster_size=ntfs_header->sectors_per_cluster;
      sector_size=ntfs_sector_size(ntfs_header);
      res=cluster_size * sector_size;
    }
    for(lcn=0;lcn<no_of_cluster;lcn++)
    {
      static long long bmplcn = -sizeof_buffer - 1;	/* Which bit of $Bitmap is in the buffer */
      int byte, bit;
      if ((lcn < bmplcn) || (lcn >= (bmplcn + (sizeof_buffer << 3))))
      {
	ntfs_attr *attr;
	/* Mark the buffer as not in use, in case the read is shorter. */
	memset(buffer, 0x00, sizeof_buffer);
	bmplcn = lcn & (~((sizeof_buffer << 3) - 1));
	attr = ntfs_attr_open(ls->vol->lcnbmp_ni, AT_DATA, AT_UNNAMED, 0);
	if(attr)
	{
	  if (ntfs_attr_pread(attr, (bmplcn>>3), sizeof_buffer, buffer) < 0)
	  {
	    log_error("Couldn't read $Bitmap\n");
	  }
	  ntfs_attr_close(attr);
	}
	else
	{
	  log_error("Couldn't open $Bitmap\n");
	}
      }

      bit  = 1 << (lcn & 7);
      byte = (lcn >> 3) & (sizeof_buffer - 1);
      if((buffer[byte] & bit)!=0)
      {
	/* Not free */
	if(end_free+1==partition->part_offset+(uint64_t)lcn*cluster_size*sector_size)
	  end_free+=cluster_size*sector_size;
	else
	{
	  if(start_free != end_free)
	    del_search_space(list_search_space, start_free, end_free);
	  start_free=partition->part_offset+(uint64_t)lcn*cluster_size*sector_size;
	  end_free=partition->part_offset+(uint64_t)(lcn+1)*cluster_size*sector_size-1;
	}
      }
    }
    free(buffer);
    if(start_free != end_free)
      del_search_space(list_search_space, start_free, end_free);
    dir_data.close(&dir_data);
    return cluster_size * sector_size;
  }
}
#endif


syntax highlighted by Code2HTML, v. 0.9.1