QNX4 Filesystem
| Format | QNX4 Filesystem |
|---|---|
| Short name | QNX4 |
| Category | filesystem |
| Platforms | QNX |
| Crush support | Supported (RawImageVFS) |
| Status | Reviewed |
| Last reviewed | 2026-10-04 |
Forensic relevance
The older QNX filesystem, still found in embedded and automotive devices. It has no magic number: a volume is recognised by its root directory entry and the /.bitmap and /.inodes files. Directory entries hold the file's attributes directly; files with several names or long names use the separate .inodes file.
Signatures
None recorded
Known extensions
None recorded
References
- QNX 4 filesystem — root directory and special files (QNX Neutrino User's Guide) https://www.qnx.com/developers/docs/6.6.0.update/com.qnx.doc.neutrino.user_guide/topic/lost_data_Root_directory.html
- QNX4 on-disk structures — include/uapi/linux/qnx4_fs.h (Linux kernel source) https://github.com/torvalds/linux/blob/master/include/uapi/linux/qnx4_fs.h
- abrignoni/qnxprobe — MBR/GPT, LVM2 and filesystem reader for raw images (QNX6/QNX4, ETFS, EFS, ext2/3/4, F2FS, FAT32/16/12, exFAT, NTFS, HFS+, APFS, QNX IFS, SquashFS, JFFS2, UBI/UBIFS, YAFFS) https://github.com/abrignoni/qnxprobe
Cite this entry
Crush Format Reference, “QNX4 Filesystem”. https://kalink0.github.io/crush-forensics/formats/qnx4/ — source: crush/data/build_formats_db.py at commit 640a2a9928f4e36a976b89901512a8dce824d093, built 2026-10-21 06:46:19 UTC.
Entry in the source at this commit · Change history of the source · Report a correction