Changeset 1859 for trunk/eraser6/Eraser.DefaultPlugins/FileSystems/Ntfs.cs

Timestamp:

3/1/2010 2:57:41 AM (2 years ago)

Author:

lowjoel

Message:

For NTFS MFT Record lengths we need volume (data) read access so instead catch unauthorized access exceptions (i.e. when running under a split user token in 7) and return using the heuristic of one of volume cluster size and 1024 bytes, whichever is smaller

File:

• trunk/eraser6/Eraser.DefaultPlugins/FileSystems/Ntfs.cs (modified) (1 diff)

trunk/eraser6/Eraser.DefaultPlugins/FileSystems/Ntfs.cs

@@ -165 +165 @@
             //TODO: any more deterministic way of finding out?
             VolumeInfo volume = VolumeInfo.FromMountPoint(info.DirectoryName);
-            if (info.Length < Math.Max(volume.ClusterSize, 1024))
+            if (info.Length < NtfsApi.GetMftRecordSegmentSize(volume))
             {
                 //Yes it does, erase exactly to the file length