1
Vote

NtfsFileSystem.IsValidBPB() too strict

description

The bpb.SignatureByte can be either 0x80 or 0x00.

Change the if statement to
           if (( bpb.SignatureByte != 0x80 && bpb.SignatureByte != 0x00 ) || bpb.TotalSectors16 != 0 || bpb.TotalSectors32 != 0
            || bpb.TotalSectors64 == 0 || bpb.MftRecordSize == 0 || bpb.MftCluster == 0 || bpb.BytesPerSector == 0)

The NTFSFLOPPY image has a signature byte of zero.

comments