|
From: SourceForge.net <no...@so...> - 2005-09-06 17:38:20
|
Read and respond to this message at: https://sourceforge.net/forum/message.php?msg_id=3327284 By: uvman 3) Let's assume record X has grown too large. It already has an attribute list (0x20) and you need to add another attribute, but if you will add a single more byte, the run list of the attribute list will not have any more space. So you will allocate a new MFT record and put another instance of a 0x20 attribute there (a second atribute list). But now you have another 0x20 attribute, which must appear before any >0x20 attribute of that file. so you put it first in the first attriubte list. This ensures that it will be linked from the first attribute list instance. One of the fields in the attribute list entry is the MFT record number that the attribute belongs to. So the first attribute list will point to another attribute list and this field will point on the extent record. Disclaimer: I'm not 100% sure. ______________________________________________________________________ You are receiving this email because you elected to monitor this forum. To stop monitoring this forum, login to SourceForge.net and visit: https://sourceforge.net/forum/unmonitor.php?forum_id=44084 |
