/*

 * File entry functions

 *

 * Copyright (C) 2010-2025, Joachim Metz <joachim.metz@gmail.com>

 *

 * Refer to AUTHORS for acknowledgements.

 *

 * This program is free software: you can redistribute it and/or modify

 * it under the terms of the GNU Lesser General Public License as published by

 * the Free Software Foundation, either version 3 of the License, or

 * (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU Lesser General Public License

 * along with this program.  If not, see <https://www.gnu.org/licenses/>.

 */

#include <common.h>

#include <memory.h>

#include <types.h>

#include "libfsntfs_attribute.h"

#include "libfsntfs_cluster_block_stream.h"

#include "libfsntfs_data_stream.h"

#include "libfsntfs_definitions.h"

#include "libfsntfs_directory_entries_tree.h"

#include "libfsntfs_directory_entry.h"

#include "libfsntfs_extent.h"

#include "libfsntfs_file_entry.h"

#include "libfsntfs_file_name_attribute.h"

#include "libfsntfs_file_name_values.h"

#include "libfsntfs_libbfio.h"

#include "libfsntfs_libcdata.h"

#include "libfsntfs_libcerror.h"

#include "libfsntfs_libcnotify.h"

#include "libfsntfs_libcthreads.h"

#include "libfsntfs_libfdata.h"

#include "libfsntfs_mft_entry.h"

#include "libfsntfs_path_hint.h"

#include "libfsntfs_reparse_point_attribute.h"

#include "libfsntfs_security_descriptor_values.h"

#include "libfsntfs_standard_information_values.h"

#include "libfsntfs_types.h"

/* Creates a file entry

 * Make sure the value file_entry is referencing, is set to NULL

 * Returns 1 if successful or -1 on error

 */

int libfsntfs_file_entry_initialize(

     libfsntfs_file_entry_t **file_entry,

     libfsntfs_io_handle_t *io_handle,

     libbfio_handle_t *file_io_handle,

     libfsntfs_file_system_t *file_system,

     uint64_t mft_entry_index,

     libfsntfs_directory_entry_t *directory_entry,

     uint8_t flags,

     libcerror_error_t **error )

{

  libfsntfs_attribute_t *reparse_point_attribute           = NULL;

  libfsntfs_internal_file_entry_t *internal_file_entry     = NULL;

  libfsntfs_mft_attribute_t *data_extents_attribute        = NULL;

  libfsntfs_mft_attribute_t *wof_compressed_data_attribute = NULL;

  libfsntfs_mft_entry_t *mft_entry                         = NULL;

  static char *function                                    = "libfsntfs_file_entry_initialize";

  uint64_t base_record_file_reference                      = 0;

  uint32_t compression_method                              = 0;

  int result                                               = 0;

  if( file_entry == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_ARGUMENTS,

     LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,

     "%s: invalid file entry.",

     function );

    return( -1 );

  }

  if( *file_entry != NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_VALUE_ALREADY_SET,

     "%s: invalid file entry value already set.",

     function );

    return( -1 );

  }

  if( io_handle == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_ARGUMENTS,

     LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,

     "%s: invalid IO handle.",

     function );

    return( -1 );

  }

  if( file_system == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_ARGUMENTS,

     LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,

     "%s: invalid file system.",

     function );

    return( -1 );

  }

  internal_file_entry = memory_allocate_structure(

                         libfsntfs_internal_file_entry_t );

  if( internal_file_entry == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_INITIALIZE_FAILED,

     "%s: unable to create file entry.",

     function );

    goto on_error;

  }

  if( memory_set(

       internal_file_entry,

       0,

       sizeof( libfsntfs_internal_file_entry_t ) ) == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_MEMORY,

     LIBCERROR_MEMORY_ERROR_SET_FAILED,

     "%s: unable to clear file entry.",

     function );

    memory_free(

     internal_file_entry );

    return( -1 );

  }

  if( libfsntfs_file_system_get_mft_entry_by_index_no_cache(

       file_system,

       file_io_handle,

       mft_entry_index,

       &mft_entry,

       error ) != 1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_GET_FAILED,

     "%s: unable to retrieve MFT entry: %" PRIu64 ".",

     function,

     mft_entry_index );

    goto on_error;

  }

  if( mft_entry == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_VALUE_MISSING,

     "%s: missing MFT entry: %" PRIu64 ".",

     function,

     mft_entry_index );

    return( -1 );

  }

  if( ( flags & LIBFSNTFS_FILE_ENTRY_FLAGS_MFT_ONLY ) == 0 )

  {

    result = libfsntfs_mft_entry_get_base_record_file_reference(

              mft_entry,

              &base_record_file_reference,

              error );

    if( result == -1 )

    {

      libcerror_error_set(

       error,

       LIBCERROR_ERROR_DOMAIN_RUNTIME,

       LIBCERROR_RUNTIME_ERROR_GET_FAILED,

       "%s: unable to retrieve base record file reference.",

       function );

      goto on_error;

    }

    if( ( result == 1 )

     && ( base_record_file_reference == 0 ) )

    {

      if( mft_entry->has_i30_index != 0 )

      {

        if( libfsntfs_directory_entries_tree_initialize(

             &( internal_file_entry->directory_entries_tree ),

             error ) != 1 )

        {

          libcerror_error_set(

           error,

           LIBCERROR_ERROR_DOMAIN_RUNTIME,

           LIBCERROR_RUNTIME_ERROR_INITIALIZE_FAILED,

           "%s: unable to create directory entries tree.",

           function );

          goto on_error;

        }

        if( libfsntfs_directory_entries_tree_read_from_i30_index(

             internal_file_entry->directory_entries_tree,

             io_handle,

             file_io_handle,

             mft_entry,

             flags,

             error ) != 1 )

        {

          libcerror_error_set(

           error,

           LIBCERROR_ERROR_DOMAIN_IO,

           LIBCERROR_IO_ERROR_READ_FAILED,

           "%s: unable to read MFT entry: %" PRIu32 " directory entries tree.",

           function,

           mft_entry->index );

          goto on_error;

        }

      }

      if( mft_entry->data_attribute != NULL )

      {

        if( mft_entry->wof_compressed_data_attribute != NULL )

        {

          result = libfsntfs_internal_file_entry_get_reparse_point_attribute(

              internal_file_entry,

              mft_entry,

              &reparse_point_attribute,

              error );

          if( result == -1 )

          {

            libcerror_error_set(

             error,

             LIBCERROR_ERROR_DOMAIN_RUNTIME,

             LIBCERROR_RUNTIME_ERROR_GET_FAILED,

             "%s: unable to retrieve reparse point attribute.",

             function );

            goto on_error;

          }

          else if( result != 0 )

          {

            if( libfsntfs_reparse_point_attribute_get_compression_method(

                 reparse_point_attribute,

                 &compression_method,

                 error ) != 1 )

            {

              libcerror_error_set(

               error,

               LIBCERROR_ERROR_DOMAIN_RUNTIME,

               LIBCERROR_RUNTIME_ERROR_GET_FAILED,

               "%s: unable to retrieve compression method from $REPARSE_POINT attribute.",

               function );

              goto on_error;

            }

            wof_compressed_data_attribute = mft_entry->wof_compressed_data_attribute;

          }

        }

        if( wof_compressed_data_attribute == NULL )

        {

          data_extents_attribute = mft_entry->data_attribute;

        }

        else

        {

          data_extents_attribute = wof_compressed_data_attribute;

        }

        if( libfsntfs_mft_attribute_get_data_extents_array(

             data_extents_attribute,

             io_handle,

             &( internal_file_entry->extents_array ),

             error ) != 1 )

        {

          libcerror_error_set(

           error,

           LIBCERROR_ERROR_DOMAIN_RUNTIME,

           LIBCERROR_RUNTIME_ERROR_INITIALIZE_FAILED,

           "%s: unable to create extents array.",

           function );

          goto on_error;

        }

        if( libfsntfs_cluster_block_stream_initialize(

             &( internal_file_entry->data_cluster_block_stream ),

             io_handle,

             mft_entry->data_attribute,

             wof_compressed_data_attribute,

             compression_method,

             error ) != 1 )

        {

          libcerror_error_set(

           error,

           LIBCERROR_ERROR_DOMAIN_RUNTIME,

           LIBCERROR_RUNTIME_ERROR_INITIALIZE_FAILED,

           "%s: unable to create data cluster block stream.",

           function );

          goto on_error;

        }

      }

    }

  }

#if defined( HAVE_LIBFSNTFS_MULTI_THREAD_SUPPORT )

  if( libcthreads_read_write_lock_initialize(

       &( internal_file_entry->read_write_lock ),

       error ) != 1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_INITIALIZE_FAILED,

     "%s: unable to initialize read/write lock.",

     function );

    goto on_error;

  }

#endif

  internal_file_entry->io_handle       = io_handle;

  internal_file_entry->file_io_handle  = file_io_handle;

  internal_file_entry->file_system     = file_system;

  internal_file_entry->mft_entry       = mft_entry;

  internal_file_entry->directory_entry = directory_entry;

  internal_file_entry->data_attribute  = mft_entry->data_attribute;

  internal_file_entry->flags           = flags;

  *file_entry = (libfsntfs_file_entry_t *) internal_file_entry;

  return( 1 );

on_error:

  if( mft_entry != NULL )

  {

    libfsntfs_mft_entry_free(

     &mft_entry,

     NULL );

  }

  if( internal_file_entry != NULL )

  {

    if( internal_file_entry->data_cluster_block_stream != NULL )

    {

      libfdata_stream_free(

       &( internal_file_entry->data_cluster_block_stream ),

       NULL );

    }

    if( internal_file_entry->directory_entries_tree != NULL )

    {

      libfsntfs_directory_entries_tree_free(

       &( internal_file_entry->directory_entries_tree ),

       NULL );

    }

    if( internal_file_entry->extents_array != NULL )

    {

      libcdata_array_free(

       &( internal_file_entry->extents_array ),

       (int (*)(intptr_t **, libcerror_error_t **)) &libfsntfs_extent_free,

       NULL );

    }

    memory_free(

     internal_file_entry );

  }

  return( -1 );

}

/* Frees a file entry

 * Returns 1 if successful or -1 on error

 */

int libfsntfs_file_entry_free(

     libfsntfs_file_entry_t **file_entry,

     libcerror_error_t **error )

{

  libfsntfs_internal_file_entry_t *internal_file_entry = NULL;

  static char *function                                = "libfsntfs_file_entry_free";

  int result                                           = 1;

  if( file_entry == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_ARGUMENTS,

     LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,

     "%s: invalid file entry.",

     function );

    return( -1 );

  }

  if( *file_entry != NULL )

  {

    internal_file_entry = (libfsntfs_internal_file_entry_t *) *file_entry;

    *file_entry         = NULL;

#if defined( HAVE_LIBFSNTFS_MULTI_THREAD_SUPPORT )

    if( libcthreads_read_write_lock_free(

         &( internal_file_entry->read_write_lock ),

         error ) != 1 )

    {

      libcerror_error_set(

       error,

       LIBCERROR_ERROR_DOMAIN_RUNTIME,

       LIBCERROR_RUNTIME_ERROR_FINALIZE_FAILED,

       "%s: unable to free read/write lock.",

       function );

      result = -1;

    }

#endif

    /* The file_io_handle, io_handle and file_system references are freed elsewhere

     */

    if( internal_file_entry->data_cluster_block_stream != NULL )

    {

      if( libfdata_stream_free(

           &( internal_file_entry->data_cluster_block_stream ),

           error ) != 1 )

      {

        libcerror_error_set(

         error,

         LIBCERROR_ERROR_DOMAIN_RUNTIME,

         LIBCERROR_RUNTIME_ERROR_FINALIZE_FAILED,

         "%s: unable to free data cluster block stream.",

         function );

        result = -1;

      }

    }

    /* The reparse_point_attribute, security_descriptor_attribute and standard_information_attribute references are managed by the attributes_array

     */

    if( internal_file_entry->attributes_array != NULL )

    {

      if( libcdata_array_free(

           &( internal_file_entry->attributes_array ),

           (int (*)(intptr_t **, libcerror_error_t **)) &libfsntfs_internal_attribute_free,

           error ) != 1 )

      {

        libcerror_error_set(

         error,

         LIBCERROR_ERROR_DOMAIN_RUNTIME,

         LIBCERROR_RUNTIME_ERROR_FINALIZE_FAILED,

         "%s: unable to free attributes array.",

         function );

        result = -1;

      }

    }

    if( libcdata_array_free(

         &( internal_file_entry->extents_array ),

         (int (*)(intptr_t **, libcerror_error_t **)) &libfsntfs_extent_free,

         error ) != 1 )

    {

      libcerror_error_set(

       error,

       LIBCERROR_ERROR_DOMAIN_RUNTIME,

       LIBCERROR_RUNTIME_ERROR_FINALIZE_FAILED,

       "%s: unable to free extents array.",

       function );

      result = -1;

    }

    if( internal_file_entry->security_descriptor_values != NULL )

    {

      if( libfsntfs_security_descriptor_values_free(

           &( internal_file_entry->security_descriptor_values ),

           error ) != 1 )

      {

        libcerror_error_set(

         error,

         LIBCERROR_ERROR_DOMAIN_RUNTIME,

         LIBCERROR_RUNTIME_ERROR_FINALIZE_FAILED,

         "%s: unable to free security descriptor values.",

         function );

        result = -1;

      }

    }

    if( internal_file_entry->directory_entries_tree != NULL )

    {

      if( libfsntfs_directory_entries_tree_free(

           &( internal_file_entry->directory_entries_tree ),

           error ) != 1 )

      {

        libcerror_error_set(

         error,

         LIBCERROR_ERROR_DOMAIN_RUNTIME,

         LIBCERROR_RUNTIME_ERROR_FINALIZE_FAILED,

         "%s: unable to free directory entries tree.",

         function );

        result = -1;

      }

    }

    if( internal_file_entry->directory_entry != NULL )

    {

      if( libfsntfs_directory_entry_free(

           &( internal_file_entry->directory_entry ),

           error ) != 1 )

      {

        libcerror_error_set(

         error,

         LIBCERROR_ERROR_DOMAIN_RUNTIME,

         LIBCERROR_RUNTIME_ERROR_FINALIZE_FAILED,

         "%s: unable to free directory entry.",

         function );

        result = -1;

      }

    }

    if( internal_file_entry->mft_entry != NULL )

    {

      if( libfsntfs_mft_entry_free(

           &( internal_file_entry->mft_entry ),

           error ) != 1 )

      {

        libcerror_error_set(

         error,

         LIBCERROR_ERROR_DOMAIN_RUNTIME,

         LIBCERROR_RUNTIME_ERROR_FINALIZE_FAILED,

         "%s: unable to free MFT entry.",

         function );

        result = -1;

      }

    }

    memory_free(

     internal_file_entry );

  }

  return( result );

}

/* Determines if the file entry is empty

 * Returns 1 if empty, 0 if not or -1 on error

 */

int libfsntfs_file_entry_is_empty(

     libfsntfs_file_entry_t *file_entry,

     libcerror_error_t **error )

{

  libfsntfs_internal_file_entry_t *internal_file_entry = NULL;

  static char *function                                = "libfsntfs_file_entry_is_empty";

  int result                                           = 0;

  if( file_entry == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_ARGUMENTS,

     LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,

     "%s: invalid file entry.",

     function );

    return( -1 );

  }

  internal_file_entry = (libfsntfs_internal_file_entry_t *) file_entry;

#if defined( HAVE_LIBFSNTFS_MULTI_THREAD_SUPPORT )

  if( libcthreads_read_write_lock_grab_for_read(

       internal_file_entry->read_write_lock,

       error ) != 1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_SET_FAILED,

     "%s: unable to grab read/write lock for reading.",

     function );

    return( -1 );

  }

#endif

  result = libfsntfs_mft_entry_is_empty(

            internal_file_entry->mft_entry,

            error );

  if( result == -1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_GET_FAILED,

     "%s: unable to determine if MFT entry is empty.",

     function );

    result = -1;

  }

#if defined( HAVE_LIBFSNTFS_MULTI_THREAD_SUPPORT )

  if( libcthreads_read_write_lock_release_for_read(

       internal_file_entry->read_write_lock,

       error ) != 1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_SET_FAILED,

     "%s: unable to release read/write lock for reading.",

     function );

    return( -1 );

  }

#endif

  return( result );

}

/* Determines if the file entry is allocated (MFT entry in use flag is set)

 * Returns 1 if allocated, 0 if not or -1 on error

 */

int libfsntfs_file_entry_is_allocated(

     libfsntfs_file_entry_t *file_entry,

     libcerror_error_t **error )

{

  libfsntfs_internal_file_entry_t *internal_file_entry = NULL;

  static char *function                                = "libfsntfs_file_entry_is_allocated";

  int result                                           = 0;

  if( file_entry == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_ARGUMENTS,

     LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,

     "%s: invalid file entry.",

     function );

    return( -1 );

  }

  internal_file_entry = (libfsntfs_internal_file_entry_t *) file_entry;

#if defined( HAVE_LIBFSNTFS_MULTI_THREAD_SUPPORT )

  if( libcthreads_read_write_lock_grab_for_read(

       internal_file_entry->read_write_lock,

       error ) != 1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_SET_FAILED,

     "%s: unable to grab read/write lock for reading.",

     function );

    return( -1 );

  }

#endif

  result = libfsntfs_mft_entry_is_allocated(

            internal_file_entry->mft_entry,

            error );

  if( result == -1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_GET_FAILED,

     "%s: unable to determine if MFT entry is allocated.",

     function );

    result = -1;

  }

#if defined( HAVE_LIBFSNTFS_MULTI_THREAD_SUPPORT )

  if( libcthreads_read_write_lock_release_for_read(

       internal_file_entry->read_write_lock,

       error ) != 1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_SET_FAILED,

     "%s: unable to release read/write lock for reading.",

     function );

    return( -1 );

  }

#endif

  return( result );

}

/* Determines if the file entry is corrupted

 * Returns 1 if corrupted, 0 if not or -1 on error

 */

int libfsntfs_file_entry_is_corrupted(

     libfsntfs_file_entry_t *file_entry,

     libcerror_error_t **error )

{

  libfsntfs_internal_file_entry_t *internal_file_entry = NULL;

  static char *function                                = "libfsntfs_file_entry_is_corrupted";

  int result                                           = 0;

  if( file_entry == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_ARGUMENTS,

     LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,

     "%s: invalid file entry.",

     function );

    return( -1 );

  }

  internal_file_entry = (libfsntfs_internal_file_entry_t *) file_entry;

#if defined( HAVE_LIBFSNTFS_MULTI_THREAD_SUPPORT )

  if( libcthreads_read_write_lock_grab_for_read(

       internal_file_entry->read_write_lock,

       error ) != 1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_SET_FAILED,

     "%s: unable to grab read/write lock for reading.",

     function );

    return( -1 );

  }

#endif

  result = libfsntfs_mft_entry_is_corrupted(

            internal_file_entry->mft_entry,

            error );

  if( result == -1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_GET_FAILED,

     "%s: unable to determine if MFT entry is corrupted.",

     function );

    result = -1;

  }

#if defined( HAVE_LIBFSNTFS_MULTI_THREAD_SUPPORT )

  if( libcthreads_read_write_lock_release_for_read(

       internal_file_entry->read_write_lock,

       error ) != 1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_SET_FAILED,

     "%s: unable to release read/write lock for reading.",

     function );

    return( -1 );

  }

#endif

  return( result );

}

/* Retrieves a specific attribute

 * Returns 1 if successful or -1 on error

 */

int libfsntfs_internal_file_entry_get_attribute_by_index(

     libfsntfs_internal_file_entry_t *internal_file_entry,

     libfsntfs_mft_entry_t *mft_entry,

     int attribute_index,

     libfsntfs_attribute_t **attribute,

     libcerror_error_t **error )

{

  libfsntfs_attribute_t *safe_attribute    = NULL;

  libfsntfs_mft_attribute_t *mft_attribute = NULL;

  static char *function                    = "libfsntfs_internal_file_entry_get_attribute_by_index";

  uint32_t attribute_type                  = 0;

  int number_of_attributes                 = 0;

  if( internal_file_entry == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_ARGUMENTS,

     LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,

     "%s: invalid file entry.",

     function );

    return( -1 );

  }

  if( attribute == NULL )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_ARGUMENTS,

     LIBCERROR_ARGUMENT_ERROR_INVALID_VALUE,

     "%s: invalid attribute.",

     function );

    return( -1 );

  }

  if( internal_file_entry->attributes_array == NULL )

  {

    if( libfsntfs_mft_entry_get_number_of_attributes(

         mft_entry,

         &number_of_attributes,

         error ) != 1 )

    {

      libcerror_error_set(

       error,

       LIBCERROR_ERROR_DOMAIN_RUNTIME,

       LIBCERROR_RUNTIME_ERROR_GET_FAILED,

       "%s: unable to retrieve number of attributes.",

       function );

      goto on_error;

    }

    if( libcdata_array_initialize(

         &( internal_file_entry->attributes_array ),

         number_of_attributes,

         error ) != 1 )

    {

      libcerror_error_set(

       error,

       LIBCERROR_ERROR_DOMAIN_RUNTIME,

       LIBCERROR_RUNTIME_ERROR_INITIALIZE_FAILED,

       "%s: unable to create attributes array.",

       function );

      goto on_error;

    }

  }

  if( libcdata_array_get_entry_by_index(

       internal_file_entry->attributes_array,

       attribute_index,

       (intptr_t **) attribute,

       error ) != 1 )

  {

    libcerror_error_set(

     error,

     LIBCERROR_ERROR_DOMAIN_RUNTIME,

     LIBCERROR_RUNTIME_ERROR_GET_FAILED,

     "%s: unable to retrieve attribute: %d from array.",

     function,

     attribute_index );

    goto on_error;

  }

  if( *attribute == NULL )

  {

    if( libfsntfs_mft_entry_get_attribute_by_index(

         mft_entry,

         attribute_index,

         &mft_attribute,

         error ) != 1 )

    {

      libcerror_error_set(

       error,

       LIBCERROR_ERROR_DOMAIN_RUNTIME,

       LIBCERROR_RUNTIME_ERROR_GET_FAILED,

       "%s: unable to retrieve attribute: %d from MFT entry.",

       function,

       attribute_index );

      goto on_error;

    }

    if( libfsntfs_mft_attribute_get_type(

         mft_attribute,

         &attribute_type,

         error ) != 1 )

    {

      libcerror_error_set(

       error,

       LIBCERROR_ERROR_DOMAIN_RUNTIME,

       LIBCERROR_RUNTIME_ERROR_GET_FAILED,

       "%s: unable to retrieve attribute: %d type.",

       function,

       attribute_index );

      goto on_error;

    }

    if( libfsntfs_attribute_initialize(

         &safe_attribute,

         mft_attribute,

         error ) != 1 )

    {

      libcerror_error_set(

       error,

       LIBCERROR_ERROR_DOMAIN_RUNTIME,

       LIBCERROR_RUNTIME_ERROR_INITIALIZE_FAILED,

       "%s: unable to create attribute: %d.",

       function,

       attribute_index );

      goto on_error;

    }

    if( attribute_type == LIBFSNTFS_ATTRIBUTE_TYPE_ATTRIBUTE_LIST )

    {

      ( (libfsntfs_internal_attribute_t *) safe_attribute )->value = (intptr_t *) mft_entry->attribute_list;

    }

    else

    {

      if( libfsntfs_internal_attribute_read_value(

           (libfsntfs_internal_attribute_t *) safe_attribute,

           internal_file_entry->io_handle,

           internal_file_entry->file_io_handle,

           internal_file_entry->flags,

           error ) != 1 )

      {

        libcerror_error_set(

         error,

         LIBCERROR_ERROR_DOMAIN_IO,

         LIBCERROR_IO_ERROR_READ_FAILED,

         "%s: unable to read value of attribute: %d.",

         function,

         attribute_index );

        goto on_error;

      }

    }

    if( libcdata_array_set_entry_by_index(

         internal_file_entry->attributes_array,

         attribute_index,

         (intptr_t *) safe_attribute,

         error ) != 1 )

    {

      libcerror_error_set(

       error,

       LIBCERROR_ERROR_DOMAIN_RUNTIME,

       LIBCERROR_RUNTIME_ERROR_SET_FAILED,

       "%s: unable to set atribute: %d in array.",

       function,

       attribute_index );

      goto on_error;