dissect.hypervisor 3.21.dev3__tar.gz → 3.21.dev5__tar.gz

dissect_hypervisor-3.21.dev5/MANIFEST.in

@@ -0,0 +1,4 @@
+exclude .gitattributes
+exclude .gitignore
+recursive-exclude .github/ *
+recursive-exclude tests/_data/ *

{dissect_hypervisor-3.21.dev3 → dissect_hypervisor-3.21.dev5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dissect.hypervisor
-Version: 3.21.dev3
+Version: 3.21.dev5
 Summary: A Dissect module implementing parsers for various hypervisor disk, backup and configuration files
 Author-email: Dissect Team <dissect@fox-it.com>
 License-Expression: AGPL-3.0-or-later

dissect_hypervisor-3.21.dev5/dissect/hypervisor/disk/c_vdi.py

@@ -0,0 +1,98 @@
+from __future__ import annotations
+
+from dissect.cstruct import cstruct
+
+# https://github.com/VirtualBox/virtualbox/blob/main/src/VBox/Storage/VDICore.h
+vdi_def = """
+enum VDI_IMAGE_TYPE {
+    /** Normal dynamically growing base image file. */
+    NORMAL          = 1,
+    /** Preallocated base image file of a fixed size. */
+    FIXED,
+    /** Dynamically growing image file for undo/commit changes support. */
+    UNDO,
+    /** Dynamically growing image file for differencing support. */
+    DIFF,
+};
+
+flag VDI_IMAGE_FLAGS {
+    /** Fill new blocks with zeroes while expanding image file. Only valid
+     * for newly created images, never set for opened existing images. */
+    ZERO_EXPAND     = 0x0100,
+};
+
+typedef struct VDIDISKGEOMETRY {
+    /** Cylinders. */
+    uint32_t        Cylinders;
+    /** Heads. */
+    uint32_t        Heads;
+    /** Sectors per track. */
+    uint32_t        Sectors;
+    /** Sector size. (bytes per sector) */
+    uint32_t        Sector;
+} VDIDISKGEOMETRY, *PVDIDISKGEOMETRY;
+
+typedef struct VDIPREHEADER {
+    /** Just text info about image type, for eyes only. */
+    char            szFileInfo[64];
+    /** The image signature (VDI_IMAGE_SIGNATURE). */
+    uint32_t        u32Signature;
+    /** The image version (VDI_IMAGE_VERSION). */
+    uint32_t        u32Version;
+} VDIPREHEADER, *PVDIPREHEADER;
+
+/**
+ * Size of Comment field of HDD image header.
+ */
+#define VDI_IMAGE_COMMENT_SIZE      256
+
+/* NOTE: All the header versions are additive, so just use the latest one. */
+typedef struct VDIHEADER1PLUS {
+    /** Size of this structure in bytes. */
+    uint32_t        cbHeader;
+    /** The image type (VDI_IMAGE_TYPE_*). */
+    VDI_IMAGE_TYPE  u32Type;
+    /** Image flags (VDI_IMAGE_FLAGS_*). */
+    VDI_IMAGE_FLAGS fFlags;
+    /** Image comment. (UTF-8) */
+    char            szComment[VDI_IMAGE_COMMENT_SIZE];
+    /** Offset of blocks array from the beginning of image file.
+     * Should be sector-aligned for HDD access optimization. */
+    uint32_t        offBlocks;
+    /** Offset of image data from the beginning of image file.
+     * Should be sector-aligned for HDD access optimization. */
+    uint32_t        offData;
+    /** Legacy image geometry (previous code stored PCHS there). */
+    VDIDISKGEOMETRY LegacyGeometry;
+    /** Was BIOS HDD translation mode, now unused. */
+    uint32_t        u32Dummy;
+    /** Size of disk (in bytes). */
+    uint64_t        cbDisk;
+    /** Block size. (For instance VDI_IMAGE_BLOCK_SIZE.) Should be a power of 2! */
+    uint32_t        cbBlock;
+    /** Size of additional service information of every data block.
+     * Prepended before block data. May be 0.
+     * Should be a power of 2 and sector-aligned for optimization reasons. */
+    uint32_t        cbBlockExtra;
+    /** Number of blocks. */
+    uint32_t        cBlocks;
+    /** Number of allocated blocks. */
+    uint32_t        cBlocksAllocated;
+    /** UUID of image. */
+    char            uuidCreate[16];
+    /** UUID of image's last modification. */
+    char            uuidModify[16];
+    /** Only for secondary images - UUID of previous image. */
+    char            uuidLinkage[16];
+    /** Only for secondary images - UUID of previous image's last modification. */
+    char            uuidParentModify[16];
+    /** LCHS image geometry (new field in VDI1.2 version. */
+    VDIDISKGEOMETRY Geometry;
+} VDIHEADER1PLUS, *PVDIHEADER1PLUS;
+"""
+
+c_vdi = cstruct().load(vdi_def)
+
+VDI_IMAGE_SIGNATURE = 0xBEDA107F
+VDI_IMAGE_BLOCK_FREE = ~0
+VDI_IMAGE_BLOCK_ZERO = ~1

dissect_hypervisor-3.21.dev5/dissect/hypervisor/disk/c_vdi.pyi

@@ -0,0 +1,100 @@
+# Generated by cstruct-stubgen
+from typing import BinaryIO, Literal, TypeAlias, overload
+
+import dissect.cstruct as __cs__
+
+class _c_vdi(__cs__.cstruct):
+    VDI_IMAGE_COMMENT_SIZE: Literal[256] = ...
+    class VDI_IMAGE_TYPE(__cs__.Enum):
+        NORMAL = ...
+        FIXED = ...
+        UNDO = ...
+        DIFF = ...
+
+    class VDI_IMAGE_FLAGS(__cs__.Flag):
+        ZERO_EXPAND = ...
+
+    class VDIDISKGEOMETRY(__cs__.Structure):
+        Cylinders: _c_vdi.uint32
+        Heads: _c_vdi.uint32
+        Sectors: _c_vdi.uint32
+        Sector: _c_vdi.uint32
+        @overload
+        def __init__(
+            self,
+            Cylinders: _c_vdi.uint32 | None = ...,
+            Heads: _c_vdi.uint32 | None = ...,
+            Sectors: _c_vdi.uint32 | None = ...,
+            Sector: _c_vdi.uint32 | None = ...,
+        ): ...
+        @overload
+        def __init__(self, fh: bytes | memoryview | bytearray | BinaryIO, /): ...
+
+    PVDIDISKGEOMETRY: TypeAlias = __cs__.Pointer[_c_vdi.VDIDISKGEOMETRY]
+    class VDIPREHEADER(__cs__.Structure):
+        szFileInfo: __cs__.CharArray
+        u32Signature: _c_vdi.uint32
+        u32Version: _c_vdi.uint32
+        @overload
+        def __init__(
+            self,
+            szFileInfo: __cs__.CharArray | None = ...,
+            u32Signature: _c_vdi.uint32 | None = ...,
+            u32Version: _c_vdi.uint32 | None = ...,
+        ): ...
+        @overload
+        def __init__(self, fh: bytes | memoryview | bytearray | BinaryIO, /): ...
+
+    PVDIPREHEADER: TypeAlias = __cs__.Pointer[_c_vdi.VDIPREHEADER]
+    class VDIHEADER1PLUS(__cs__.Structure):
+        cbHeader: _c_vdi.uint32
+        u32Type: _c_vdi.VDI_IMAGE_TYPE
+        fFlags: _c_vdi.VDI_IMAGE_FLAGS
+        szComment: __cs__.CharArray
+        offBlocks: _c_vdi.uint32
+        offData: _c_vdi.uint32
+        LegacyGeometry: _c_vdi.VDIDISKGEOMETRY
+        u32Dummy: _c_vdi.uint32
+        cbDisk: _c_vdi.uint64
+        cbBlock: _c_vdi.uint32
+        cbBlockExtra: _c_vdi.uint32
+        cBlocks: _c_vdi.uint32
+        cBlocksAllocated: _c_vdi.uint32
+        uuidCreate: __cs__.CharArray
+        uuidModify: __cs__.CharArray
+        uuidLinkage: __cs__.CharArray
+        uuidParentModify: __cs__.CharArray
+        Geometry: _c_vdi.VDIDISKGEOMETRY
+        @overload
+        def __init__(
+            self,
+            cbHeader: _c_vdi.uint32 | None = ...,
+            u32Type: _c_vdi.VDI_IMAGE_TYPE | None = ...,
+            fFlags: _c_vdi.VDI_IMAGE_FLAGS | None = ...,
+            szComment: __cs__.CharArray | None = ...,
+            offBlocks: _c_vdi.uint32 | None = ...,
+            offData: _c_vdi.uint32 | None = ...,
+            LegacyGeometry: _c_vdi.VDIDISKGEOMETRY | None = ...,
+            u32Dummy: _c_vdi.uint32 | None = ...,
+            cbDisk: _c_vdi.uint64 | None = ...,
+            cbBlock: _c_vdi.uint32 | None = ...,
+            cbBlockExtra: _c_vdi.uint32 | None = ...,
+            cBlocks: _c_vdi.uint32 | None = ...,
+            cBlocksAllocated: _c_vdi.uint32 | None = ...,
+            uuidCreate: __cs__.CharArray | None = ...,
+            uuidModify: __cs__.CharArray | None = ...,
+            uuidLinkage: __cs__.CharArray | None = ...,
+            uuidParentModify: __cs__.CharArray | None = ...,
+            Geometry: _c_vdi.VDIDISKGEOMETRY | None = ...,
+        ): ...
+        @overload
+        def __init__(self, fh: bytes | memoryview | bytearray | BinaryIO, /): ...
+
+    PVDIHEADER1PLUS: TypeAlias = __cs__.Pointer[_c_vdi.VDIHEADER1PLUS]
+
+# Technically `c_vdi` is an instance of `_c_vdi`, but then we can't use it in type hints
+c_vdi: TypeAlias = _c_vdi
+
+VDI_IMAGE_SIGNATURE: int
+VDI_IMAGE_BLOCK_FREE: int
+VDI_IMAGE_BLOCK_ZERO: int

dissect_hypervisor-3.21.dev5/dissect/hypervisor/disk/vdi.py

@@ -0,0 +1,140 @@
+from __future__ import annotations
+
+from pathlib import Path
+from typing import TYPE_CHECKING, BinaryIO
+
+from dissect.util.stream import AlignedStream
+from dissect.util.xmemoryview import xmemoryview
+
+from dissect.hypervisor.disk.c_vdi import VDI_IMAGE_BLOCK_FREE, VDI_IMAGE_BLOCK_ZERO, VDI_IMAGE_SIGNATURE, c_vdi
+from dissect.hypervisor.exceptions import Error
+
+if TYPE_CHECKING:
+    from types import TracebackType
+
+    from typing_extensions import Self
+
+
+class VDI:
+    """VirtualBox Virtual Disk Image (VDI) implementation.
+
+    Use :method:`open` to get a stream for reading from the VDI file. The stream will handle reading
+    from the parent disk if necessary (and provided).
+
+    If provided with a file-like object, the caller is responsible for closing it.
+    When provided with a path, the VDI class will manage the file handle.
+
+    If providing a parent file-like object, the caller is responsible for the lifecycle of that object.
+
+    Args:
+        fh: File-like object or path of the VDI file.
+        parent: Optional file-like object for the parent disk (for differencing disks).
+    """
+
+    def __init__(self, fh: BinaryIO | Path, parent: BinaryIO | None = None):
+        if isinstance(fh, Path):
+            self.path = fh
+            self.fh = self.path.open("rb")
+        else:
+            self.path = None
+            self.fh = fh
+
+        self.parent = parent
+
+        self.fh.seek(0)
+        self.preheader = c_vdi.VDIPREHEADER(self.fh)
+        if self.preheader.u32Signature != VDI_IMAGE_SIGNATURE:
+            raise Error(
+                f"Invalid VDI signature, expected {VDI_IMAGE_SIGNATURE:#08X}, got {self.preheader.u32Signature:#08X}"
+            )
+
+        self.header = c_vdi.VDIHEADER1PLUS(self.fh)
+
+    def __enter__(self) -> Self:
+        return self
+
+    def __exit__(
+        self, exc_type: type[BaseException] | None, exc_value: BaseException | None, traceback: TracebackType | None
+    ) -> None:
+        self.close()
+
+    @property
+    def type(self) -> c_vdi.VDI_IMAGE_TYPE:
+        """The type of the VDI file."""
+        return self.header.u32Type
+
+    @property
+    def flags(self) -> c_vdi.VDI_IMAGE_FLAGS:
+        """The flags of the VDI file."""
+        return self.header.fFlags
+
+    @property
+    def size(self) -> int:
+        """The size of the virtual disk."""
+        return self.header.cbDisk
+
+    @property
+    def block_size(self) -> int:
+        """The size of each block in the VDI file."""
+        return self.header.cbBlock
+
+    @property
+    def data_offset(self) -> int:
+        """The offset to the data blocks."""
+        return self.header.offData
+
+    @property
+    def blocks_offset(self) -> int:
+        """The offset to the block allocation table."""
+        return self.header.offBlocks
+
+    @property
+    def number_of_blocks(self) -> int:
+        """The number of blocks in the VDI file."""
+        return self.header.cBlocks
+
+    def open(self) -> VDIStream:
+        """Open a stream to read from the VDI file."""
+        return VDIStream(self)
+
+    def close(self) -> None:
+        """Close the VDI file handle."""
+        if self.path is not None:
+            self.fh.close()
+
+
+class VDIStream(AlignedStream):
+    def __init__(self, vdi: VDI):
+        self.vdi = vdi
+        self.block_size = vdi.block_size
+
+        self.fh = self.vdi.fh
+        self.fh.seek(self.vdi.blocks_offset)
+        self.map = xmemoryview(self.fh.read(4 * self.vdi.number_of_blocks), "<i")
+        super().__init__(vdi.size, align=self.block_size)
+
+    def _read(self, offset: int, length: int) -> bytes:
+        result = []
+
+        block_idx, offset_in_block = divmod(offset, self.block_size)
+        while length > 0:
+            read_len = min(length, max(length, self.block_size - offset_in_block))
+
+            block = self.map[block_idx]
+            if block == VDI_IMAGE_BLOCK_FREE:
+                if self.vdi.parent is not None:
+                    self.vdi.parent.seek(offset)
+                    result.append(self.vdi.parent.read(read_len))
+                else:
+                    result.append(b"\x00" * read_len)
+            elif block == VDI_IMAGE_BLOCK_ZERO:
+                result.append(b"\x00" * read_len)
+            else:
+                self.fh.seek(self.vdi.data_offset + (block * self.block_size) + offset_in_block)
+                result.append(self.fh.read(read_len))
+
+            offset += read_len
+            length -= read_len
+            block_idx += 1
+
+        return b"".join(result)

{dissect_hypervisor-3.21.dev3 → dissect_hypervisor-3.21.dev5}/dissect/hypervisor/disk/vmdk.py

@@ -535,8 +535,10 @@ def open_parent(path: Path, filename_hint: str) -> VMDK:
         hint_path, _, filename = filename_hint.rpartition("/")
         filepath = path.joinpath(filename)
         if not filepath.exists():
-            _, _, hint_path_name = hint_path.rpartition("/")
-            filepath = path.parent.joinpath(hint_path_name).joinpath(filename)
+            filepath = path.joinpath(filename_hint)
+            if not filepath.exists():
+                _, _, hint_path_name = hint_path.rpartition("/")
+                filepath = path.parent.joinpath(hint_path_name).joinpath(filename)
         vmdk = VMDK(filepath)
     except Exception as err:
         raise IOError(f"Failed to open parent disk with hint {filename_hint} from path {path}: {err}")

{dissect_hypervisor-3.21.dev3 → dissect_hypervisor-3.21.dev5}/dissect.hypervisor.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dissect.hypervisor
-Version: 3.21.dev3
+Version: 3.21.dev5
 Summary: A Dissect module implementing parsers for various hypervisor disk, backup and configuration files
 Author-email: Dissect Team <dissect@fox-it.com>
 License-Expression: AGPL-3.0-or-later

dissect_hypervisor-3.21.dev5/dissect.hypervisor.egg-info/SOURCES.txt

@@ -0,0 +1,69 @@
+.git-blame-ignore-revs
+COPYRIGHT
+LICENSE
+MANIFEST.in
+README.md
+pyproject.toml
+tox.ini
+dissect.hypervisor.egg-info/PKG-INFO
+dissect.hypervisor.egg-info/SOURCES.txt
+dissect.hypervisor.egg-info/dependency_links.txt
+dissect.hypervisor.egg-info/entry_points.txt
+dissect.hypervisor.egg-info/requires.txt
+dissect.hypervisor.egg-info/top_level.txt
+dissect/hypervisor/__init__.py
+dissect/hypervisor/exceptions.py
+dissect/hypervisor/descriptor/__init__.py
+dissect/hypervisor/descriptor/c_hyperv.py
+dissect/hypervisor/descriptor/hyperv.py
+dissect/hypervisor/descriptor/ovf.py
+dissect/hypervisor/descriptor/pvs.py
+dissect/hypervisor/descriptor/vbox.py
+dissect/hypervisor/descriptor/vmx.py
+dissect/hypervisor/disk/__init__.py
+dissect/hypervisor/disk/asif.py
+dissect/hypervisor/disk/c_asif.py
+dissect/hypervisor/disk/c_asif.pyi
+dissect/hypervisor/disk/c_hdd.py
+dissect/hypervisor/disk/c_qcow2.py
+dissect/hypervisor/disk/c_qcow2.pyi
+dissect/hypervisor/disk/c_vdi.py
+dissect/hypervisor/disk/c_vdi.pyi
+dissect/hypervisor/disk/c_vhd.py
+dissect/hypervisor/disk/c_vhdx.py
+dissect/hypervisor/disk/c_vmdk.py
+dissect/hypervisor/disk/hdd.py
+dissect/hypervisor/disk/qcow2.py
+dissect/hypervisor/disk/vdi.py
+dissect/hypervisor/disk/vhd.py
+dissect/hypervisor/disk/vhdx.py
+dissect/hypervisor/disk/vmdk.py
+dissect/hypervisor/tools/__init__.py
+dissect/hypervisor/tools/envelope.py
+dissect/hypervisor/tools/vmtar.py
+dissect/hypervisor/util/__init__.py
+dissect/hypervisor/util/envelope.py
+dissect/hypervisor/util/vmtar.py
+tests/__init__.py
+tests/_util.py
+tests/_docs/Makefile
+tests/_docs/conf.py
+tests/_docs/index.rst
+tests/_tools/disk/vdi/generate.sh
+tests/descriptor/__init__.py
+tests/descriptor/test_hyperv.py
+tests/descriptor/test_ovf.py
+tests/descriptor/test_pvs.py
+tests/descriptor/test_vbox.py
+tests/descriptor/test_vmx.py
+tests/disk/__init__.py
+tests/disk/test_asif.py
+tests/disk/test_hdd.py
+tests/disk/test_qcow2.py
+tests/disk/test_vdi.py
+tests/disk/test_vhd.py
+tests/disk/test_vhdx.py
+tests/disk/test_vmdk.py
+tests/util/__init__.py
+tests/util/test_envelope.py
+tests/util/test_vmtar.py

{dissect_hypervisor-3.21.dev3 → dissect_hypervisor-3.21.dev5}/pyproject.toml

@@ -54,6 +54,7 @@ test = [
 lint = [
     "ruff==0.13.1",
     "vermin",
+    "typing_extensions",
 ]
 build = [
     "build",

dissect_hypervisor-3.21.dev5/tests/_tools/disk/vdi/generate.sh

@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+readonly SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+readonly TESTS_ROOT="$(cd "${SCRIPT_DIR}/../../.." && pwd)"
+readonly OUT_DIR="${TESTS_ROOT}/_data/disk/vdi"
+
+log()  { printf '[INFO] %s\n' "$*" >&2; }
+warn() { printf '[WARN] %s\n' "$*" >&2; }
+error()  { printf '[ERROR] %s\n' "$*" >&2; }
+
+have() { command -v "$1" >/dev/null 2>&1; }
+
+require_tools() {
+    local -a tools=(qemu-img pigz xxd dd)
+    local missing=0
+
+    for t in "${tools[@]}"; do
+        if ! have "$t"; then
+            error "Missing required tool: $t"
+            missing=1
+        fi
+    done
+
+    if (( missing != 0 )); then
+        error "One or more required tools are missing. Aborting."
+        exit 1
+    fi
+}
+
+pattern() {
+    local size="$1"
+
+    stream() {
+        while true; do
+            for i in $(seq 0 255); do
+                printf "`printf '%02x' "${i}"`%.0s" {0..4095}
+            done
+        done
+    }
+
+    stream | xxd -r -ps | head -c "${size}" || true
+}
+
+generate() {
+    local name="$1"
+    local size="$2"
+
+    local raw="$(mktemp -t raw.XXXXXX)"
+
+    pattern "${size}" > "${raw}"
+    # Create a hole at the start for testing sparse files
+    dd if=/dev/zero bs=1M count=1 seek=0 of="${raw}" conv=notrunc
+
+    local outpath="${OUT_DIR}/${name}.vdi"
+
+    log "Converting RAW -> VDI (${name})"
+    qemu-img convert -f raw -O vdi "${raw}" "${outpath}"
+
+    log "Compressing ${outpath} -> ${outpath}.gz"
+    cat "${outpath}" | pigz -c > "${outpath}.gz"
+
+    log "Generated: ${outpath}.gz"
+}
+
+main() {
+    require_tools
+
+    mkdir -p "${OUT_DIR}"
+
+    # TODO: Snapshots/differencing disks
+    generate "basic" "$((10 * 1024 * 1024))"
+
+    log "All test cases generated under: ${OUT_DIR}"
+}
+
+main "$@"

dissect_hypervisor-3.21.dev5/tests/disk/test_vdi.py

@@ -0,0 +1,46 @@
+from __future__ import annotations
+
+import gzip
+from pathlib import Path
+from typing import BinaryIO
+from unittest.mock import patch
+
+from dissect.hypervisor.disk.c_vdi import c_vdi
+from dissect.hypervisor.disk.vdi import VDI
+from tests._util import absolute_path
+
+
+def mock_open_gz(self: Path, *args, **kwargs) -> BinaryIO:
+    return gzip.open(self)
+
+
+def test_vdi() -> None:
+    """Test a basic VDI file."""
+    with gzip.open(absolute_path("_data/disk/vdi/basic.vdi.gz"), "rb") as fh:
+        vdi = VDI(fh)
+
+        assert vdi.type == c_vdi.VDI_IMAGE_TYPE.NORMAL
+        assert vdi.flags == c_vdi.VDI_IMAGE_FLAGS(0)
+        assert vdi.size == 10 * 1024 * 1024
+        assert vdi.block_size == 1048576
+
+        stream = vdi.open()
+        assert stream.read(1 * 1024 * 1024) == bytes([0] * (1 * 1024 * 1024))
+
+        for i in range((1 * 1024 * 1024) // 4096, stream.size // 4096):
+            expected = bytes([i % 256] * 4096)
+            assert stream.read(4096) == expected, f"Mismatch at offset {i * 4096:#x}"
+
+        assert stream.read() == b""
+
+
+def test_vdi_context_manager() -> None:
+    """Test VDI context manager."""
+    with patch.object(Path, "open", gzip.open), VDI(absolute_path("_data/disk/vdi/basic.vdi.gz")) as vdi:
+        assert vdi.path is not None
+    assert vdi.fh.closed
+
+    with gzip.open(absolute_path("_data/disk/vdi/basic.vdi.gz"), "rb") as fh:
+        with VDI(fh) as vdi:
+            assert vdi.path is None
+        assert fh.closed is False

{dissect_hypervisor-3.21.dev3 → dissect_hypervisor-3.21.dev5}/tests/disk/test_vmdk.py

@@ -1,11 +1,13 @@
 from __future__ import annotations
 
 import gzip
+from pathlib import Path
+from unittest.mock import MagicMock
 
 import pytest
 
 from dissect.hypervisor.disk.c_vmdk import c_vmdk
-from dissect.hypervisor.disk.vmdk import VMDK, DiskDescriptor, ExtentDescriptor
+from dissect.hypervisor.disk.vmdk import VMDK, DiskDescriptor, ExtentDescriptor, open_parent
 from tests._util import absolute_path
 
 
@@ -203,3 +205,40 @@ def test_vmdk_extent_description(extent_description: str, expected_extents: list
 
     descriptor = DiskDescriptor.parse(extent_description)
     assert descriptor.extents == expected_extents
+
+
+def test_open_parent_all_cases(monkeypatch: pytest.MonkeyPatch) -> None:
+    """Test open_parent handles absolute and relative filename_hint paths."""
+
+    # Mock Path.exists to simulate file existence
+    def mock_exists(path: Path) -> bool:
+        return str(path) in {
+            "/a/b/c/d.vmdk",  # Case: absolute path
+            "base/relative/hint.vmdk",  # Case: full relative path
+            "base/hint.vmdk",  # Case: basename in same dir
+            "../sibling/hint.vmdk",  # Case: fallback to sibling
+        }
+
+    with monkeypatch.context() as m:
+        m.setattr("pathlib.Path.exists", mock_exists)
+
+        # Mock VMDK to avoid real file I/O
+        mock_vmdk = MagicMock()
+        m.setattr("dissect.hypervisor.disk.vmdk.VMDK", lambda path: mock_vmdk)
+        mock_vmdk.path = "mocked-path"
+
+        # Case: Absolute path — should use /a/b/c/d.vmdk directly
+        vmdk = open_parent(Path("base"), "/a/b/c/d.vmdk")
+        assert str(vmdk.path) == "mocked-path"
+
+        # Case: Full relative path — try base/relative/hint.vmdk
+        vmdk = open_parent(Path("base"), "relative/hint.vmdk")
+        assert str(vmdk.path) == "mocked-path"
+
+        # Case: Basename only — fall back to base/hint.vmdk
+        vmdk = open_parent(Path("base"), "hint.vmdk")
+        assert str(vmdk.path) == "mocked-path"
+
+        # Case: Fallback to sibling — try ../sibling/hint.vmdk
+        vmdk = open_parent(Path("base"), "sibling/hint.vmdk")
+        assert str(vmdk.path) == "mocked-path"

dissect_hypervisor-3.21.dev3/MANIFEST.in

@@ -1,2 +0,0 @@
-exclude .gitignore
-recursive-exclude .github/ *