Canon R6 CR3 format

[fzabkar]

@davey, if you are in a hurry, or just for testing purposes, add a 0x00 byte to your carved files. That should make Lightroom happy.

This command appends 00.bin (a file consisting of a single zero byte) to each .CR3 file in the \recovered directory and writes it to the \fixed directory.

Code: Select all

for %i in (\recovered\*.CR3) do copy /b %i + 00.bin \fixed\%i

[Joep]

Therefore ISTM that the .ini file should be tweaked to correctly calculate the size of the mdat atom, assuming that is even possible.

You can not, this is the problem. It's really sad, the state of affairs but it seems most carving in our top ranking tools is limited to header -- header -- header. DMDE does a tad better, header -- footer or header -- header. Also you can include AND/NOT conditions.

Otherwise you could carve an additional sector, and then write a tool to truncate the carved .CR3 file to its correct size (is that in fact what you are doing?).

This was the v1 signature, it captured some additional data. v2 does less but that seemed to work for RawDigger.

If there wasn't a time constraint I could make a carver that can use the file structure in the same way I do for JPEG in JpegDigger. In fact I intend to but it will not be available this week. There's some more filetypes that suffer from this same type of issue, such as .braw files. You need to get exact size but there's no clear and universal end signature.

[davey]

@davey, if you are in a hurry, or just for testing purposes, add a 0x00 byte to your carved files. That should make Lightroom happy.

This command appends 00.bin (a file consisting of a single zero byte) to each .CR3 file in the \recovered directory and writes it to the \fixed directory.

Code: Select all

for %i in (\recovered\*.CR3) do copy /b %i + 00.bin \fixed\%i

@fzabkar good one ! It worked in most cases, rest of it needs 00 00 at the eof so it can be normally opened in LR.

edit for future reference:
if CR3 ends with 01 it needs 00 at eof
if CR3 ends with 02 it needs 00 00 at eof
Only then it`s readable in Lightroom, i`m not an expert in this matter so don`t know the reason.

Best Regards,
Davey

[lcoughey]

edit for future reference:
if CR3 ends with 01 it needs 00 at eof
if CR3 ends with 02 it needs 00 00 at eof
Only then it`s readable in Lightroom, i`m not an expert in this matter so don`t know the reason.

Maybe the 01 and 02 mean the number of bytes of 0x00 to follow?

[fzabkar]

I think that one-liner would have failed.

This should work:

Code: Select all

cd \recovered
for %i in (*.CR3) do copy /b %i + 00.bin \fixed\%i

[davey]

I think that one-liner would have failed.

This should work:

Code: Select all

cd \recovered
for %i in (*.CR3) do copy /b %i + 00.bin \fixed\%i

already fixed that, thank You once again!

[Joep]

No, CR3 = MP4 container. Last few bytes don't matter, CR3 is picky when it comes to atom sizes. This doesn't add or remove arbitrary bytes, it makes file size match atom sizes: