NTFS signature

Using TestDisk to undelete files
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
mesajflaviu
Posts: 37
Joined: 12 Sep 2019, 19:54

NTFS signature

#1 Post by mesajflaviu »

Hello again. I am trying to understand why NTFS code is not working fine on windows OS.

I made debug on bootsect.c in ntfs library, used by TestDisk. And the code is running on

Code: Select all

BOOL ntfs_boot_sector_is_ntfs(NTFS_BOOT_SECTOR* b)
function. is logging:
ntfs_log_debug("Checking OEMid, NTFS signature.\n");
and then the code is checking the NTFS boot sector, and the device is a simple USB stick formated as NTFS:

Image
https://postimg.cc/56V6LKMy

This is the code that makes me trouble:

Code: Select all

	ntfs_log_debug("Checking OEMid, NTFS signature.\n");
	if (b->oem_id != const_cpu_to_le64(0x202020205346544eULL))	// "NTFS    "
	{
		ntfs_log_error("NTFS signature is missing.\n");  // <-- here is go out the program
		goto not_ntfs;
	}
Why I got this result ? Can you help me a little bit ?

mesajflaviu
Posts: 37
Joined: 12 Sep 2019, 19:54

Re: NTFS signature

#2 Post by mesajflaviu »

Any hint will be very useful to me :) ...

Locked