vsc-core 0.2.0

Reader for Windows Volume Shadow Copy (VSS) store/catalog structures
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

//! Error type for the VSS reader.

/// An error decoding a Volume Shadow Copy volume.
///
/// The reader never panics on malformed input: out-of-range reads yield safe
/// defaults through the bounds-checked helpers, and only genuine I/O failures or
/// caller misuse (an out-of-range store index) surface as an error.
#[derive(Debug, thiserror::Error)]
pub enum VssError {
    /// An I/O error reading the underlying volume.
    #[error("i/o error reading VSS volume: {0}")]
    Io(#[from] std::io::Error),

    /// A store index passed to [`crate::VssVolume::store_info`] is past the end
    /// of the enumerated stores.
    #[error("store index {index} out of range ({count} store(s) enumerated)")]
    StoreIndexOutOfRange {
        /// The requested index.
        index: usize,
        /// The number of stores actually present.
        count: usize,
    },

    /// The store has no catalog type-0x03 pointer, so its store-information
    /// block cannot be located (e.g. a Windows 2003 R2 catalog).
    #[error("store {index} has no store-information pointer (no catalog type-0x03 entry)")]
    StoreInfoUnavailable {
        /// The store index whose pointer is missing.
        index: usize,
    },

    /// A store-header offset read from the catalog runs past the end of the
    /// volume — consistent with a corrupt or tampered catalog entry.
    #[error("store {index} header offset {offset} runs past the {volume_size}-byte volume")]
    StoreOffsetOutOfBounds {
        /// The store index whose pointer is out of range.
        index: usize,
        /// The offending offset.
        offset: u64,
        /// The volume size the offset exceeded.
        volume_size: u64,
    },
}