From 91e2e56786f8fcf0c1f8f587aca2dc79417c357a Mon Sep 17 00:00:00 2001 From: Peter Ritchie Date: Sat, 26 Mar 2022 11:39:20 -0400 Subject: [PATCH] Fixed `LastAccessTime` and `FileChangeTime` being swapped The `StandardInformation` was not being initialized properly when processing attributes. `ProcessAttributes` was changed to instantiate `StandardInformation` passing the `LastAccessTime` and `FileChangeTime` attributes in the correct order. Fixes #2 --- src/NtfsReader/System/IO/Filesystem/Ntfs/NtfsReader.cs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/NtfsReader/System/IO/Filesystem/Ntfs/NtfsReader.cs b/src/NtfsReader/System/IO/Filesystem/Ntfs/NtfsReader.cs index 4074a7e..0901e7a 100644 --- a/src/NtfsReader/System/IO/Filesystem/Ntfs/NtfsReader.cs +++ b/src/NtfsReader/System/IO/Filesystem/Ntfs/NtfsReader.cs @@ -1002,8 +1002,8 @@ This is used when an AttributeList is being processed and we only want a specifi _standardInformations[nodeIndex] = new StandardInformation( attributeStandardInformation->CreationTime, - attributeStandardInformation->FileChangeTime, - attributeStandardInformation->LastAccessTime + attributeStandardInformation->LastAccessTime, + attributeStandardInformation->FileChangeTime ); break;