dissect.hypervisor.disk.vhd

Module Contents

Classes

VHD

Basic buffered stream that provides easy aligned reads.

Disk

FixedDisk

DynamicDisk

BlockAllocationTable

Implementation of the BAT.

Functions

class dissect.hypervisor.disk.vhd.VHD(fh)

Bases: dissect.util.stream.AlignedStream

Basic buffered stream that provides easy aligned reads.

Must be subclassed for various stream implementations. Subclasses can implement:
  • _read(offset, length)

  • _seek(pos, whence=io.SEEK_SET)

The offset and length for _read are guaranteed to be aligned. The only time that overriding _seek would make sense is if there’s no known size of your stream, but still want to provide SEEK_END functionality.

Most subclasses of AlignedStream take one or more file-like objects as source. Operations on these subclasses, like reading, will modify the source file-like object as a side effect.

Parameters:
  • size – The size of the stream. This is used in read and seek operations. None if unknown.

  • align – The alignment size. Read operations are aligned on this boundary. Also determines buffer size.

class dissect.hypervisor.disk.vhd.Disk(fh, footer=None)
abstract read_sectors(sector, count)
class dissect.hypervisor.disk.vhd.FixedDisk(fh, footer=None)

Bases: Disk

read_sectors(sector, count)
class dissect.hypervisor.disk.vhd.DynamicDisk(fh, footer=None)

Bases: Disk

read_sectors(sector, count)
class dissect.hypervisor.disk.vhd.BlockAllocationTable(fh, offset, max_entries)

Implementation of the BAT.

Entries are uint32 sector offsets to blocks in the file.

ENTRY
get(block)
__getitem__(block)