TweetFollow Us on Twitter

Disks
Volume Number:1
Issue Number:5
Column Tag:FORTH FORUM

Disks

By Jörg Langowski

This month we are going to look at the organization of the 400 K bytes on the standard Macintosh disk. The operating system does a very good job of hiding this organization from you, but for patching disks, changing file attributes, and looking at files of unknown structure it is very convenient to know a little more about the ‘deep structure’ of the Macintosh disk.

Fortunately, it is very easy to read any byte at any position on the disk. The toolbox routines READ and WRITE do not make any distinction between files and whole disks. Let’s recall how a read or write through a toolbox call is done. The toolbox traps are A002 for read and A003 for write. You have to set up a file control block, pass its address in register A0, and execute the trap. File I/O, direct disk I/O, serial I/O and even the sound generation are all handled through this mechanism. The only difference is in the file control block (FCB). It has the following structure:

Bytes 0 11 : Header; IM tells us nothing about it

Bytes 12 15 : Address of the I/O completion routine

Bytes 16 17 : I/O result code ( also returned in D0 )

Bytes 18 21 : Pointer to filename string ( for files )

Bytes 22 23 : Drive number ( for direct disk I/O )

Bytes 24 25 : Reference number ( explained later )

Bytes 32 35 : Pointer to data buffer

Bytes 36 39 : Requested byte count for I/O operation

Bytes 40 43 : Actual # of bytes read/written

Bytes 44 45 : Positioning mode, 0 : relative, 1 : absolute

Bytes 46 49 : Position offset ( in bytes )

If you want to do file I/O, you have to open the file first. This is done by setting up the FCB with a valid file name (with optional volume prefix) and calling the trap OPEN ( A000 ). This will return a reference number (positive 16-bit integer) in the FCB, through which all read/write calls are made from now on.

The only difference between doing a file I/O and direct device I/O operation is this reference number. The predefined Macintosh device drivers have negative reference numbers. They are listed on pages 22 and 23 of the Device Manager Programmer’s Guide in IM, and the important one for us is the disk reference number, -5. If you set up the FCB like above, with the reference number -5, and then do a READ or WRITE call, the disk will be read/written directly. That is, the operating system treats the whole disk as one large file 400K bytes long. The position from which I/O starts is given by the offset in bytes 46 49, and the number of bytes to I/O is in 36 39. If 44 45 contain a 0, the offset is counted from the last byte read/written; if it is one, is is counted from the start of the disk. After the I/O is completed, a result code will be returned in the FCB and in register D0. Zero means that everything went OK; a negative return code means that something was wrong. For instance, if you try to read or write to a non-existing position on the disk, -67 is returned; -50 is returned if the number of bytes actually read into the buffer is greater than the number requested. This happens if you don’t read an integer multiple of 512 bytes; the number is then rounded up to the next 512 bytes.

In FORTH we call the traps through the defining word OS.TRAP. The FCB address is then passed on the stack, and the result code is stored into the variable IO-RESULT.

This is about all the information you need to understand the simple disk editor program that is listed at the end. It is menu-oriented and reads, writes, dumps to screen and modifies any 1024 byte block on the (internal) disk. Using that program, you can verify very easily what I am telling you in the rest of this article.

Macintosh disks are read and written by the operating system in 512 byte blocks (‘logical blocks’). However, the operating system refers to 1K blocks as the smallest unit (‘allocation block’). Therefore, the program reads 2 logical blocks at a time and the block number that the program asks for is INT(logical block number / 2).

A Directory Entry

With the described program it is now quite easy to figure out some facts about Mac disk organization; the IM manual helps, too. Starting with block O as the first block on the disk, the directory resides in logical blocks $4 to $B (allocation blocks $2 to $5); easily recognizable because all the file names are there. The map in Fig. 1 shows the structure of a directory entry.

The first part of the entry tells the system several parameters it needs to know about the file. ‘Attributes’ contains 8 bits of file attributes. For instance, Bit 7 set means that the file is open, bit 0 set means it is software locked, . Bit 6 is the copy protect bit. If you reset this one to zero, you will be able to copy a ‘protected’ file by dragging the icon. Bytes $2-$5 give the file type, such as APPL (application), ZSYS (system file) or TEXT (text file) in ASCII format, bytes $6-$9 give the creator. The four Finder words contain information that is used by the Finder internally. All directory entries are numbered sequentially ($14-$15).

Bytes $16 and $17 (16 bit integer) give the starting block of the data fork, bytes $18 to $1B (32 bit integer) its length in bytes and bytes $1C to $1F this length rounded up to the next 512 byte boundary. (The blocks referred to in the directory entry are allocation blocks; block number 2 starts right after the last directory block). The resource fork is referenced in the same way by the next 10 bytes in the directory entry. The creation and modification dates of the file are kept in the next 8 bytes.

The last part of the entry gives the file name; remarkable here is that the directory entries are not all the same length. Since file names may be up to 255 characters long, reserving the maximum space for every file name would be inefficient; therefore the name is stored as a standard string starting at byte $32 (Hex) with a length byte and the name thereafter.

The volume information table

Logical blocks $2 and $3 (Fig. 2) on the Macintosh disk contain information about the disk itself and a block allocation table that tells the system which blocks are in use.

The first two bytes are always $D2D7; if they are not, the disk will not be recognized as a Macintosh disk. Following that are two 4-byte words that give the time and date of initialization and last backup. The 16-bit word Volume Attributes will have bit 7 set if the write protect latch is set on the diskette and bit 15 set if the disk is locked by software. The volume copy protection bit is also located here, it is bit 14 and if you reset it, the disk will be copyable with the Disk Copy routine on the System Disk, regardless of whether individual files are ‘protected’ or not. The next entries give the total number of files in the directory, the first logical block of the file directory and the number of logical blocks in the directory.

Following are the total number of allocation blocks on the volume and the size of the allocation block in bytes ($0400 on a standard Macintosh disk). The meaning of the remaining parameters should be clear from the diagram.

IM describes how the volume allocation block map is organized; I’ll quickly repeat that here. Every allocation block (1024 bytes) is represented by a 12-bit entry. If this entry is zero, the block is unused. If it is used in a file, it contains the number of the next block in the file. The last block in the file is indicated by a 1.

: disk.editor ;
18 field +fcb.name    22 field +fcb.drive   24 field +fcb.vrefnum 
32 field +fcb.buf     36 field +fcb.request 40 field +fcb.actual
44 field +fcb.posmode 46 field +fcb.position
12 constant dsk.menu

variable vol.fcb  variable vol.fnumber  variable hex.asc
create this.fcb 50 allot     create vol.buffer 1024 allot
hex a002 os.trap read  a003 os.trap write decimal

: open.vol  this.fcb dup vol.fcb ! dup +fcb.vrefnum -5 swap w!
            +fcb.drive 1 swap w!  ;

: input 0 0 >in ! query 32 word convert drop ;

: dump.fcb .” Header    : “ 3 0 do dup i 4* + @ . .”  “ loop cr
   .” completion: “ dup 12 + @ . cr  .” ioresult  : “ dup 16 + w@ . cr
   .” filename  : “ dup 18 + @ . cr  .” drive     : “ dup 22 + w@ . cr
   .” refnum    : “ dup 24 + w@ . cr .” buffer    : “ dup 32 + @ . cr
   .” request   : “ dup 36 + @ . cr  .” actual    : “ dup 40 + @ . cr
   .” posmode   : “ dup 44 + w@ . cr .” offset    : “ dup 46 + @ . cr 
;

: setup.fcb ( buffer \ block# \ fcb -- fcb )
 dup +fcb.posmode 1 swap w!  dup +fcb.position rot 1024 * swap !
 dup +fcb.buf rot swap !     dup +fcb.request 1024 swap ! ;

: read.pb ( buffer \ block# \ fcb -- )    setup.fcb  read ;
: read.disk ( block# -- ) vol.buffer swap vol.fcb @ read.pb ;

: write.pb ( buffer \ block# \ fcb -- )    setup.fcb  write ;
: write.disk ( block# -- )  vol.buffer swap vol.fcb @ write.pb ;

: dump.32 ( start address -- )
  32 0 do dup i + c@ hex.asc @ if
                   dup 16 < if .” 0" then . else
                   dup 32 < if .” .” drop else emit then then loop ;

: dump.buffer ( buffer address -- )
 9 textsize 9 line.height condensed textstyle cr
 32 0 do dup i 32 * dup 16 < if .” 00" else dup 256 < if .” 0" then then
         dup . +  dump.32 drop cr loop ;

: read.block 12 textsize 15 line.height plain textstyle cr
   .” Read block #: “ input dup 0< if error” Negative Block #” then
       read.disk io-result @ 0= not if cr .” OS Error “ io-result @ . 
cr abort
                                     else .” block read” cr  then ;

: write.block 12 textsize 15 line.height plain textstyle cr
   .” Write to block #: “ input dup 0< if error” Negative Block #” then
     write.disk io-result @ 0= not if cr .” OS Error “ io-result @ . 
cr abort
                                     else .” block written” cr then ;

: dump.block hex vol.buffer dump.buffer decimal ;

: patch.block 12 textsize 15 line.height plain textstyle cr
  .” change byte#: “ hex input decimal dup 1023 >
  if .” too large” cr abort then
             vol.buffer + .” to: “ hex input decimal swap c! ;

: set.hex 1 hex.asc ! 6 -1 dsk.menu item.check  7 0 dsk.menu item.check 
;

: set.ascii 0 hex.asc !  6 0 dsk.menu item.check  7 -1 dsk.menu item.check 
;

: disk.menu
   0 “ DiskEdit” dsk.menu new.menu
    “ Read;Write;Dump;Change;-(;Hex;Ascii” dsk.menu append.items
     draw.menu.bar dsk.menu menu.selection:
     0 hilite.menu   case
     1 of  read.block      endof  2 of  write.block     endof
     3 of  dump.block      endof  4 of  patch.block     endof
     6 of  set.hex         endof  7 of  set.ascii       endof
                     endcase
     events on do.events abort ;
  
disk.menu set.hex open.vol

 
AAPL
$98.89
Apple Inc.
+1.22
MSFT
$43.01
Microsoft Corpora
-0.62
GOOG
$509.59
Google Inc.
-1.58

MacTech Search:
Community Search:

Software Updates via MacUpdate

Autopano Giga 3.7 - Stitch multiple imag...
Autopano Giga allows you to stitch 2, 20, or 2,000 images. Version 3.0 integrates impressive new features that will definitely make you adopt Autopano Pro or Autopano Giga: Choose between 9... Read more
MenuMeters 1.8 - CPU, memory, disk, and...
MenuMeters is a set of CPU, memory, disk, and network monitoring tools for Mac OS X. Although there are numerous other programs which do the same thing, none had quite the feature set I was looking... Read more
Coda 2.5 - One-window Web development su...
Coda is a powerful Web editor that puts everything in one place. An editor. Terminal. CSS. Files. With Coda 2, we went beyond expectations. With loads of new, much-requested features, a few... Read more
Arq 4.6.1 - Online backup to Google Driv...
Arq is super-easy online backup for the Mac. Back up to your own Google Drive storage (15GB free storage), your own Amazon Glacier ($.01/GB per month storage) or S3, or any SFTP server. Arq backs up... Read more
Airfoil 4.8.10 - Send audio from any app...
Airfoil allows you to send any audio to AirPort Express units, Apple TVs, and even other Macs and PCs, all in sync! It's your audio - everywhere. With Airfoil you can take audio from any... Read more
Apple iMovie 10.0.6 - Edit personal vide...
With an all-new design, Apple iMovie lets you enjoy your videos like never before. Browse your clips more easily, instantly share your favorite moments, and create beautiful HD movies and Hollywood-... Read more
Tunnelblick 3.4.1 - GUI for OpenVPN. (Fr...
Tunnelblick is a free, open source graphic user interface for OpenVPN on OS X. It provides easy control of OpenVPN client and/or server connections. It comes as a ready-to-use application with all... Read more
OnyX 2.8.8 - Maintenance and optimizatio...
OnyX is a multifunctional utility for OS X. It allows you to verify the startup disk and the structure of its System files, to run miscellaneous tasks of system maintenance, to configure the hidden... Read more
Parallels Desktop 10.1 - Run Windows app...
Parallels Desktop is simply the world's bestselling, top-rated, and most trusted solution for running Windows applications on your Mac. With Parallels Desktop for Mac, you can seamlessly run both... Read more
Apple Keynote 6.5 - Apple's present...
Apple Keynote makes it simple to create and deliver beautiful presentations. Powerful tools and dazzling effects bring your ideas to life. You can work seamlessly between Mac and iOS devices. And... Read more

Latest Forum Discussions

See All

Hay Ewe Review
Hay Ewe Review By Campbell Bird on October 20th, 2014 Our Rating: :: SAVE YOUR SHEEPLEUniversal App - Designed for iPhone and iPad Pave the way for your flock in this line drawing puzzle game from the creators of Worms.   | Read more »
My Very Hungry Caterpillar (Education)
My Very Hungry Caterpillar 1.0.0 Device: iOS Universal Category: Education Price: $3.99, Version: 1.0.0 (iTunes) Description: Care for your very own Very Hungry Caterpillar! My Very Hungry Caterpillar will captivate you as he crawls... | Read more »
Dungeon Dick (Games)
Dungeon Dick 1.1 Device: iOS Universal Category: Games Price: $.99, Version: 1.1 (iTunes) Description: Dungeon Dick is a fantasy adventure where you must discover the wicked plot to destroy the lands . 'Fling' at your foes and land... | Read more »
Here’s How the Apple Watch Could Transfo...
With the Apple Watch’s generic release date of, “early 2015” hovering on the horizon, it’s only a matter of time before gamers begin to ask “What’s in it for us?” The obvious choice would be to place entire games directly on the face of the watch,... | Read more »
Republique Episode 3: Ones & Zeroes...
Republique Episode 3: Ones & Zeroes is Available Now Posted by Rob Rich on October 17th, 2014 [ permalink ] Universal App - Designed for iPhone and iPad | Read more »
Loot Raiders Review
Loot Raiders Review By Campbell Bird on October 17th, 2014 Our Rating: :: PRESS BUTTON, GET LOOTUniversal App - Designed for iPhone and iPad This menu-based loot game is suitable to compel those with pretty extreme loot lust.   | Read more »
There’s Something Strange in Fruit Ninja...
There’s Something Strange in Fruit Ninja’s Neighborhood Posted by Rob Rich on October 17th, 2014 [ permalink ] Universal App - Designed for iPhone and iPad | Read more »
Cars: Fast as Lightning Review
Cars: Fast as Lightning Review By Nadia Oxford on October 17th, 2014 Our Rating: :: SMOOTH RIDEUniversal App - Designed for iPhone and iPad Cars: Fast as Lightning is a good city-building/racing game, though it’s probably too... | Read more »
Angry Birds are Crashing Puzzle & Dr...
Angry Birds are Crashing Puzzle & Dragons Next Week Posted by Rob Rich on October 17th, 2014 [ permalink ] Next week, Puzzle & Dragons is getting a little angry. Because, you know, Angry Birds. It’s a… a pun. I thought… never mind. | Read more »
Incandescence Review
Incandescence Review By Andrew Fisher on October 17th, 2014 Our Rating: :: ALL TAPPED OUTUniversal App - Designed for iPhone and iPad Incandescence promises intense tapping action, but isn’t particularly fun.   | Read more »

Price Scanner via MacPrices.net

2013 15-inch 2.0GHz Retina MacBook Pro availa...
B&H Photo has leftover previous-generation 15″ 2.0GHz Retina MacBook Pros now available for $1599 including free shipping plus NY sales tax only. Their price is $400 off original MSRP. B&H... Read more
Updated iPad Prices
We’ve updated our iPad Air Price Tracker and our iPad mini Price Tracker with the latest information on prices and availability from Apple and other resellers, including the new iPad Air 2 and the... Read more
Apple Pay Available to Millions of Visa Cardh...
Visa Inc. brings secure, convenient payments to iPad Air 2 and iPad mini 3as well as iPhone 6 and 6 Plus. Starting October 20th, eligible Visa cardholders in the U.S. will be able to use Apple Pay,... Read more
Textkraft Pocket – the missing TextEdit for i...
infovole GmbH has announced the release and immediate availability of Textkraft Pocket 1.0, a professional text editor and note taking app for Apple’s iPhone. In March 2014 rumors were all about... Read more
C Spire to offer iPad Air 2 and iPad mini 3,...
C Spire on Friday announced that it will offer iPad Air 2 and iPad mini 3, both with Wi-Fi + Cellular, on its 4G+ LTE network in the coming weeks. C Spire will offer the new iPads with a range of... Read more
Belkin Announces Full Line of Keyboards and C...
Belkin International has unveiled a new lineup of keyboard cases and accessories for Apple’s newest iPads, featuring three QODE keyboards and a collection of thin, lightweight folios for both the... Read more
Verizon offers new iPad Air 2 preorders for $...
Verizon Wireless is accepting preorders for the new iPad Air 2, cellular models, for $100 off MSRP with a 2-year service agreement: - 16GB iPad Air 2 WiFi + Cellular: $529.99 - 64GB iPad Air 2 WiFi... Read more
Price drops on refurbished Mac minis, now ava...
The Apple Store has dropped prices on Apple Certified Refurbished previous-generation Mac minis, with models now available starting at $419. Apple’s one-year warranty is included with each mini, and... Read more
Apple refurbished 2014 MacBook Airs available...
The Apple Store has Apple Certified Refurbished 2014 MacBook Airs available for up to $180 off the cost of new models. An Apple one-year warranty is included with each MacBook, and shipping is free.... Read more
Refurbished 2013 MacBook Pros available for u...
The Apple Store has Apple Certified Refurbished 13″ and 15″ MacBook Pros available starting at $929. Apple’s one-year warranty is standard, and shipping is free: - 13″ 2.5GHz MacBook Pros (4GB RAM/... Read more

Jobs Board

Position Opening at *Apple* - Apple (United...
**Job Summary** At the Apple Store, you connect business professionals and entrepreneurs with the tools they need in order to put Apple solutions to work in their Read more
Position Opening at *Apple* - Apple (United...
**Job Summary** The Apple Store is a retail environment like no other - uniquely focused on delivering amazing customer experiences. As an Expert, you introduce people Read more
Position Opening at *Apple* - Apple (United...
**Job Summary** As businesses discover the power of Apple computers and mobile devices, it's your job - as a Solutions Engineer - to show them how to introduce these Read more
Position Opening at *Apple* - Apple (United...
…Summary** As a Specialist, you help create the energy and excitement around Apple products, providing the right solutions and getting products into customers' hands. You Read more
Project Manager, *Apple* Financial Services...
**Job Summary** Apple Financial Services (AFS) offers consumers, businesses and educational institutions ways to finance Apple purchases. We work with national and Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.