Tatsh / dade / 34689839259

100%

push

github

misc: read the Finder .DS_Store database as JSON

`dade misc ds-store FILE` writes a folder's Finder desktop database as
JSON. The file is a Buddy allocator file (`Bud1`) storing one B-tree
keyed on a file name paired with a four-character structure identifier.
The tree is flattened into one entry per file name, and the `.` entry
belongs to the folder itself. The allocator's blocks, directories, and
free lists are reported beside the records.

Icon positions (`Iloc`), window frames (`fwi0`), modification dates, and
the property lists that store a view's settings are decoded. Every other
blob is reported as hex with its length.

Two properties of the format defeat a reading taken from DSStoreView,
the implementation this work started from. A node's first field is the
block number of its last child rather than a mode flag, and zero marks a
leaf. Reading the field as a flag drops the right-most subtree of every
file Finder grew past one node. A modification date is written either
as a 1904-epoch `dutc` counting 1/65536 of a second or as a blob of a
little-endian Core Foundation double counting seconds since 2001, and
the two epochs differ by 97 years.

Verified against 102 `.DS_Store` files written by Finder. Every one
reads, and every walk's record count matches the total its master block
states.

Signed-off-by: Andrew Udvare <audvare@gmail.com>

5890 of 5890 branches covered (100.0%)

Branch coverage included in aggregate %.

213 of 213 new or added lines in 4 files covered. (100.0%)

22352 of 22352 relevant lines covered (100.0%)

5.0 hits per line