Hi,

I'm trying to figure out why my files are all allocated with huge fileid.

Setup:
- root filesystem is formatted to APFS
- macOS version High Sierra.


For some reason, all my files are allocated with fileid that is added to
offset of `0x200000000`

For example, create new file `/tmp/1` and getting its attributes will
produce

    -> *stat /tmp/1*

    16777220 *8595046795* -rw-r--r-- 2 demouser wheel 0 7237 "Mar 21
16:42:57 2018" "Mar 21 16:42:36 2018" "Mar 21 16:42:36 2018" "Mar 21
14:29:12 2018" 4194304 16 0 /tmp/1

(8595046795 is 0x200000000 in hex)


Furthermore, if I search for valid inode ABOVE this offset in /.vol/ mount
drive, I find plenty, but below there are none.

for x in {1..10000}; do stat /.vol/${filesystemid}/$((0x200000000-x)) >>
/dev/null 2&>1  && echo "fileid $x + 0x200000000 exit"; done

fileid 115 + 0x200000000 exit

fileid 116 + 0x200000000 exit

fileid 139 + 0x200000000 exit

fileid 140 + 0x200000000 exit

fileid 141 + 0x200000000 exit

fileid 142 + 0x200000000 exit

fileid 144 + 0x200000000 exit

fileid 145 + 0x200000000 exit

fileid 146 + 0x200000000 exit

fileid 147 + 0x200000000 exit

fileid 149 + 0x200000000 exit


Is there any rigorous API to retrieve this offset ? where can I find it ?
looked for in APFS header but didn't find an appropriate field.

thanks
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Filesystem-dev mailing list      (Filesystem-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/filesystem-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com

Reply via email to