From 68522e0043ef743a6648685b0b790f13c4cff7a9 Mon Sep 17 00:00:00 2001
From: JSCU-CNI <121175071+JSCU-CNI@users.noreply.github.com>
Date: Wed, 25 Feb 2026 15:43:44 +0100
Subject: [PATCH] Add erofs support

---
 dissect/target/filesystem.py        |   1 +
 dissect/target/filesystems/erofs.py | 135 ++++++++++++++++++++++++++++
 2 files changed, 136 insertions(+)
 create mode 100644 dissect/target/filesystems/erofs.py

diff --git a/dissect/target/filesystem.py b/dissect/target/filesystem.py
index 57db90646b..24c6d0565e 100644
--- a/dissect/target/filesystem.py
+++ b/dissect/target/filesystem.py
@@ -1835,6 +1835,7 @@ def open_multi_volume(fhs: list[BinaryIO], *args, **kwargs) -> Iterator[Filesyst
 
 register("ntfs", "NtfsFilesystem")
 register("extfs", "ExtFilesystem")
+register("erofs", "EROFSFilesystem")
 register("xfs", "XfsFilesystem")
 register("fat", "FatFilesystem")
 register("ffs", "FfsFilesystem")
diff --git a/dissect/target/filesystems/erofs.py b/dissect/target/filesystems/erofs.py
new file mode 100644
index 0000000000..c27a188f92
--- /dev/null
+++ b/dissect/target/filesystems/erofs.py
@@ -0,0 +1,135 @@
+from __future__ import annotations
+
+from typing import TYPE_CHECKING, BinaryIO
+
+import dissect.erofs as erofs
+
+from dissect.target.exceptions import (
+    FileNotFoundError,
+    FilesystemError,
+    IsADirectoryError,
+    NotADirectoryError,
+    NotASymlinkError,
+)
+from dissect.target.filesystem import DirEntry, Filesystem, FilesystemEntry
+from dissect.target.helpers import fsutil
+
+if TYPE_CHECKING:
+    from collections.abc import Iterator
+
+    from dissect.erofs import INode
+
+
+class EROFSFilesystem(Filesystem):
+    __type__ = "erofs"
+
+    def __init__(self, fh: BinaryIO, *args, **kwargs):
+        super().__init__(fh, *args, **kwargs)
+        self.erofs = erofs.EROFS(fh)
+
+    @staticmethod
+    def _detect(fh: BinaryIO) -> bool:
+        """Detect a EROFS filesystem on a given file-like object."""
+        return erofs.EROFS.detect_erofs(fh)
+
+    def get(self, path: str) -> FilesystemEntry:
+        return EROFSFilesystemEntry(self, path, self._get_node(path))
+
+    def _get_node(self, path: str, node: INode | None = None) -> INode:
+        """Returns an internal EROFS inode for a given path and optional relative inode."""
+        try:
+            return self.erofs.get(path, node)
+        except erofs.FileNotFoundError as e:
+            raise FileNotFoundError(path) from e
+        except erofs.NotADirectoryError as e:
+            raise NotADirectoryError(path) from e
+        except erofs.NotASymlinkError as e:
+            raise NotASymlinkError(path) from e
+        except erofs.Error as e:
+            raise FileNotFoundError(path) from e
+
+
+class EROFSDirEntry(DirEntry):
+    fs: EROFSFilesystem
+    entry: INode
+
+    def get(self) -> EROFSFilesystemEntry:
+        return EROFSFilesystemEntry(self.fs, self.path, self.entry)
+
+    def stat(self, *, follow_symlinks: bool = True) -> fsutil.stat_result:
+        return self.get().stat(follow_symlinks=follow_symlinks)
+
+
+class EROFSFilesystemEntry(FilesystemEntry):
+    fs: EROFSFilesystem
+    entry: INode
+
+    def get(self, path: str) -> FilesystemEntry:
+        full_path = fsutil.join(self.path, path, alt_separator=self.fs.alt_separator)
+        return EROFSFilesystemEntry(self.fs, full_path, self.fs._get_node(path, self.entry))
+
+    def open(self) -> BinaryIO:
+        """Returns file handle (file-like object)."""
+        if self.is_dir():
+            raise IsADirectoryError(self.path)
+        return self._resolve().entry.open()
+
+    def scandir(self) -> Iterator[EROFSDirEntry]:
+        """List the directory contents of this directory. Returns a generator of filesystem entries."""
+        if not self.is_dir():
+            raise NotADirectoryError(self.path)
+
+        for entry in self._resolve().entry.iterdir():
+            if entry.name in (".", ".."):
+                continue
+
+            yield EROFSDirEntry(self.fs, self.path, entry.name, entry)
+
+    def is_dir(self, follow_symlinks: bool = True) -> bool:
+        """Return whether this entry is a directory."""
+        try:
+            return self._resolve(follow_symlinks=follow_symlinks).entry.is_dir()
+        except FilesystemError:
+            return False
+
+    def is_file(self, follow_symlinks: bool = True) -> bool:
+        """Return whether this entry is a file."""
+        try:
+            return self._resolve(follow_symlinks=follow_symlinks).entry.is_file()
+        except FilesystemError:
+            return False
+
+    def is_symlink(self) -> bool:
+        """Return whether this entry is a link."""
+        return self.entry.is_symlink()
+
+    def readlink(self) -> str:
+        """Read the link of the given path if it is a symlink. Returns a string."""
+        if not self.is_symlink():
+            raise NotASymlinkError(self.path)
+
+        return self.entry.link
+
+    def stat(self, follow_symlinks: bool = True) -> fsutil.stat_result:
+        """Return the stat information of this entry."""
+        return self._resolve(follow_symlinks=follow_symlinks).lstat()
+
+    def lstat(self) -> fsutil.stat_result:
+        """Return the stat information of the given path, without resolving links."""
+        node = self.entry
+
+        # 64-byte inodes store an mtime and we could use the super block timestamp here, but we currently don't
+        st_info = [
+            node.mode,
+            node.inode_number,
+            id(self.fs),
+            node.nlink,
+            node.uid,
+            node.gid,
+            node.size,
+            0,
+            0,
+            0,
+        ]
+
+        return fsutil.stat_result(st_info)