lnk_parser 0.4.3

A full rust implementation to parse windows LNK files
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

//! [ExtraData](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-shllink/c41e062d-f764-4f13-bd4f-ea812ab9a4d1) related structs

mod tracker_data_block;

use byteorder::{LittleEndian, ReadBytesExt};
use serde::Serialize;
use std::io::{Cursor, Read, Seek};
use tracker_data_block::TrackerDataBlock;
use winparsingtools::ReaderError;

/// ExtraData types implemented
#[derive(Debug, Serialize)]
#[serde(rename_all = "snake_case")]
pub enum ExtraDataTypes {
    Tracker(TrackerDataBlock),
}

/// ExtraData refers to a set of structures that convey additional information about a link target.
/// These optional structures can be present in an extra data section that is appended to the basic Shell Link Binary File Format.
#[derive(Debug, Serialize)]
pub struct ExtraData {
    pub extra_data_blocks: Vec<ExtraDataTypes>,
}

impl ExtraData {
    pub fn from_buffer(buf: &[u8]) -> Result<Self, ReaderError> {
        Self::from_reader(&mut Cursor::new(buf))
    }

    pub fn from_reader<R: Read + Seek>(r: &mut R) -> Result<Self, ReaderError> {
        let mut extra_data_blocks: Vec<ExtraDataTypes> = Vec::new();
        loop {
            let size = r.read_u32::<LittleEndian>()?;
            if size == 0 {
                break;
            }
            let signature = r.read_u32::<LittleEndian>()?;
            let mut extra_data_bytes = vec![0; (size - 8) as usize];
            r.read_exact(&mut extra_data_bytes)?;
            if signature == 0xa0000003 {
                extra_data_blocks.push(ExtraDataTypes::Tracker(TrackerDataBlock::from_buffer(
                    &extra_data_bytes,
                )?));
            }
        }

        Ok(Self { extra_data_blocks })
    }
}