[ros-kernel] ntfs infinite loop at boot
Eric Kohl
ekohl at rz-online.de
Thu Nov 20 20:45:15 CET 2003
<jeanmichel.123 at free.fr> wrote:
> The 0x4000 contains '$MFT'
> The 0x4c00 contains '$Volume' (unicode)
> and version 3.0 (binary)
> Moreover it contains attribute 0x10 0x30 0x40 0x50 0x60 0x70 0x80.
>
>
> Howover I do not know How to find these informations from the boot sector?
> Might be the 0x3f in the unused filed mean
> 1 + 0x3f (double sector) makes $MFT begin at offset 0x4000 ?
You can find the LCN (Logical Cluster Number) of the first MFT cluster at
the Offset 0x30. Please note that this is a 64bit value (0x30-0x37). The LCN
of the MFT-Mirror is located at Offset 0x38 (0x38-0x3F).
You can find some NTFS documentation at the Linux-NTFS project at
http://linux-ntfs.sourceforge.net/ .
Regards,
Eric
More information about the Ros-kernel
mailing list