| TurboSFV - Blog | | |
|
TurboSFV |
2017-04-30 11:46:44 |
TurboSFV v7.40 - Checksums for reparse points |
Notes to TurboSFV v7.40:
TurboSFV now calculates a hash value for reparse points. Independent from the reparse point type, TurboSFV takes the data which is associated with a reparse point and computes a checksum. This works for reparse points which are used with
files, but also for those which are used with folders. In other words, a reparse point will be treated like a file, not depending on its content. Thus, a hash value can be created and later on
validated.
The Explorer in Windows usually displays 0 Bytes as the size for a reparse point. The size returned by TurboSFV is the size of the associated reparse data, which can't be 0 for a valid reparse point. According to the documentation, the
size is limited to 16K Bytes (not
confirmed).
For reading the associated reparse point data, only normal user privileges are needed. An application, which tries to create or modify a reparse point, needs administration privileges on recent OS. For a few reparse point types, the data
structure is known and can be checked. For other types, the structure is defined by the application and can in principle hold any kind of
data.
If you have a comment regarding this new version, feel free to post it here.
|
TurboSFV Cologne, Germany |
|
|
|
|
|