[LINK] Seeking expert on Microsoft Word binary file format

Michael Still mikal at stillhq.com
Wed Jul 2 17:56:13 AEST 2008


Michael Still wrote:
> Jeremy Malcolm wrote:
> 
>> This is in relation to a criminal case where those values may be  
>> important to the client's defence, in that the police are relying on  
>> the "total editing time" as evidence of how long the client had the  
>> document open.  It could be an interesting assignment.
>>
>> Please let me know if you are interested.
> 
> Is this the same total editing time that is reported via ODMA if a
> provider is registered? The ODMA specification might provide you to some
> more pointers on the vagaries of such a statistic.

Yeah, they do look related:

ODMSTATUS ODMCloseDoc( ODMHANDLE odmHandle, LPSTR lpszDocId, DWORD
activeTime, DWORD pagesPrinted, LPVOID sessionData, WORD dataLen )

An application that has opened a document by calling ODMOpenDoc must
call ODMCloseDoc when it is finished using the document. The application
should not call this function until after it has closed the document,
because the DMS may move the document or make it inaccessible as a
result of this call. Note that this function will not cause the document
to be saved into the DMS's persistent repository unless ODMSaveDoc has
been called previously.
Parameters:

[snip]

activeTime - in - If the application tracks time spent editing the
document then it should pass the number of seconds here. Otherwise it
should pass 0xFFFFFFFF.

(From the ODMA specification at http://odma.info/downloads/odma10-2.htm)

So, it should be a "simple" case of opening a document and ignoring it
for a bit and seeing what that number ends up being. I strongly suspect
that the value is a simple counter of number of seconds the document is
open, even if the document doesn't have focus.

Mikal



More information about the Link mailing list