Broken MFT entries might not have a size_alloc. Fixes #79

Lazza · Jan 12, 2021 · 67f5bf0 · 67f5bf0
1 parent 89cbabd
commit 67f5bf0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/recuperabit/fs/ntfs.py b/recuperabit/fs/ntfs.py
@@ -136,7 +136,8 @@ def _attributes_reader(entry, offset):
 def parse_file_record(entry):
     """Parse the contents of a FILE record (MFT entry)."""
     header = unpack(entry, entry_fmt)
-    if (header['size_alloc'] > len(entry) or
+    if (header['size_alloc'] is None or
+            header['size_alloc'] > len(entry) or
             len(entry) < FILE_size*sector_size):
         header['valid'] = False
         return header