Read and respond to this message at:
https://sourceforge.net/forum/message.php?msg_id=3347961
By: nobody
Hi again. I'm the guy who started the thread. Thanks for all the replies. There's
still something wrong here: On my HD, the NTFS cluster size is 4KB and the sector
size is 512B. So I have 8 sectors per cluster. Now, the mft record I'm trying
to read has an update sequence array which contains only 2 words of data (not
including the update sequence number itself). So, i remove the fixups of the
first two sectors of the cluster. However, I still read the wrong length value
for attribute 0x80, because this value is stored at the end of sector 7 within
the cluster... so, shouldn't the update sequence array contain more elements
in order to cover every sector in the cluster?
______________________________________________________________________
You are receiving this email because you elected to monitor this forum.
To stop monitoring this forum, login to SourceForge.net and visit:
https://sourceforge.net/forum/unmonitor.php?forum_id=44084
|