Problem with mounted vfat image

From: Parth Galen <parth_galen(at)lycos.com>
Date: Thu Apr 03 2003 - 10:15:35 EST

('binary' encoding is not supported, stored as-is)

Hello everyone, and thanks in advance for any info you can provide!!!

I have a dd'ed image that fsstat reports as;

---

[root@localhost morgue]# sfdisk -l disk2.2.2.dd Disk disk2.2.2.dd: cannot get size
Disk disk2.2.2.dd: cannot get geometry

Disk disk2.2.2.dd: 0 cylinders, 0 heads, 0 sectors/track Units = megabytes of 1048576 bytes, blocks of 1024 bytes, counting from 0

   Device Boot Start End MB #blocks Id System

disk2.2.2.dd1   ? 937476+ 1203314- 265839- 272218546+  20  Unknown
disk2.2.2.dd2   ? 649504+ 912676- 263173- 269488144   6b  Unknown
disk2.2.2.dd3   ? 263178+ 945972- 682795- 699181456   53  OnTrack DM6 Aux3
disk2.2.2.dd4   * 680970+ 680980-    11-     10668+  49  Unknown

---

Below is some od output of the beginning of the image.

---

0000000 353 > 220 M S W I N 4 . 0 \0 002 @ 001 \0 0000020 002 \0 002 \0 \0 370 \0 001 ? \0 200 \0 \0 ? \0 \0

0000040  \0 374   ?  \0 200  \0   ) 341 024   ]   0   N   O       N   A
0000060   M   E                   F   A   T   1   6             361   }

0000100 372 3 311 216 321 274 374 { 026 \a 275 x \0 305 v \0

---

I can mount if "successfully" with;

---

# mount disk2.2.2.dd /mnt/vfat -t vfat -r -o ro,loop,show_sys_files=true

# mount
/root/practical/morgue/disk2.2.2.dd on /mnt/vfat type vfat (ro,loop=/dev/loop0,show_sys_files=true)

---

The top level directorys appear "good", but as soon as you drop into a folder or two down, I start getting "garbage" from ls, cat, less, cp... The file and folder names look like pieces from the files themselves rather than the FAT. While the content of the top level files can be accessed (less, cat...), the lower level files contain "garbage".

I have tried mounting as fat=12, fat=16, fat=32 (which failed), and several other options in mount but keep getting slight variations on the same "corruption" problem.

So my question is, does anyone have any suggestions on what the problem might be, and how I should proceed?

Again, thanks Much!

Parth

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Thu Apr 3 20:40:01 2003