cgsecurity.org

Why I am asking that ? Because this function is called somehow from ntfs library:

// device.c file

s64 ntfs_pread(struct ntfs_device* dev, const s64 pos, s64 count, void* b)
{
...
...
dops = dev->d_ops;
....

br = dops->pread(dev, (char*)b + total, count, pos + total);



and this dops->pread is ...

Hello. I have a little question: function align_pread from alignio.h

static int align_pread(int(*fnct_pread)(disk_t *disk_car, void *buf, const unsigned int count, const uint64_t offset),
disk_t* disk_car, void*buf, const unsigned int count, const uint64_t offset)
{
...
...

is designed to run ...

Any hint will be very useful to me ...

Hello again. I am trying to understand why NTFS code is not working fine on windows OS.

I made debug on bootsect.c in ntfs library, used by TestDisk. And the code is running on

BOOL ntfs_boot_sector_is_ntfs(NTFS_BOOT_SECTOR* b)

function. is logging:
ntfs_log_debug("Checking OEMid, NTFS ...

Thank you Grenier !!! To see how important is your words, I can say: I found/solved memory leaks. At least, I guess so. Might be a little bug, I am not sure, you can check yourself. Here was the problem:
In alignio.h (sorry, not alignio.c ), in function align_pread

static int align_pread(int ...

I ran the code in the debugger, tested on NTFS device , by calling ntfs_undelete_part function. In the step by step debugging, I arrived on volume.c file, at line:

br = ntfs_pread(dev, 0, sizeof(NTFS_BOOT_SECTOR), bs);

if I call this function, I got the following memory leak:

Dumping objects ...

Plus, going the code by here, I got memory leaks:

On a test stick, oem_id has 8804685062176 value. Where oem_id is part of:

typedef struct {
u8 jump[3]; /* Irrelevant (jump to boot up code).*/
le64 oem_id; /* Magic "NTFS ". */
/*0x0b*/BIOS_PARAMETER_BLOCK bpb; /* See BIOS_PARAMETER_BLOCK. */
u8 physical_drive; /* 0x00 floppy, 0x80 hard disk ...

I am thinking that this issue is not necessary an error though ... right ?

I guess is the first case, because this is happen in two different USB sticks formatted as EXFAT.