s using
the cluster of this position to store data). You have to walk the
cluster position chain on FAT table, not directory entry.
--
OGAWA Hirofumi
___
Kernelnewbies mailing list
Kernelnewbies@kernelnewbies.org
http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
OGAWA Hirofumi writes:
> Kai Meyer writes:
>
>> Thanks for the helpful response. I'm not entirely sure I understand the
>> next part though. I hacked a dirty entry dumper tool:
>>
>> #include
>> #include
>> #include
>> #include
>>
cdate 12670
> adate 8224
> starthi 8224
> time 23072
> date 21061
> start 32
> size 2171155456
>
> So, I take starthi, and shift 16 bits left, then and in the start value.
> That should give me the byte address of the first cluster of the fil
ter to next cluster
number. That message was outputted when walking in cluster chain.
If you want to see actual corrupted data, you can check the cluster
chain by pointing from that directory entry.
Thanks.
--
OGAWA Hirofumi
___
Kernelnewbies mailing list
Kernelnewbies@kernelnewbies.org
http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
cluster chain in FAT table which is
pointed by that entry, it has invalid cluster value.
Thanks.
--
OGAWA Hirofumi
___
Kernelnewbies mailing list
Kernelnewbies@kernelnewbies.org
http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies