Issues

• FileName::parse decodes names lossily, so a name with an unpaired surrogate cannot be round-tripped or told apart from one that really contains U+FFFD

  SecurityRonin/ntfs-forensic#23 · Filter by author ChrisSummers opened on Sep 27, 2026

• BootSector::parse rejects the signed sectors-per-cluster encoding, so no volume with clusters above 64 KiB opens

  SecurityRonin/ntfs-forensic#22 · Filter by author ChrisSummers opened on Sep 27, 2026

• Attribute-list references are followed without checking the target record's sequence or in-use flag

  SecurityRonin/ntfs-forensic#21 · Filter by author ChrisSummers opened on Sep 21, 2026

• AttributeBody::NonResident omits compressed_size (0x40), so the on-disk size of compressed and sparse streams is unavailable

  SecurityRonin/ntfs-forensic#20 · Filter by author ChrisSummers opened on Sep 21, 2026

• NtfsFs applies fixups at bytes_per_sector stride; NTFS fixes up every 512 bytes, so 4Kn volumes fail to open

  SecurityRonin/ntfs-forensic#18 · Filter by author ChrisSummers opened on Sep 21, 2026

• read_at performance

  SecurityRonin/ntfs-forensic#12 · Filter by author kshpytsya opened on Aug 16, 2026