[sleuthkit-developers] [ sleuthkit-Bugs-2874854 ] iPod Partition Table

[SourceForge.net <no...@so...>]

Bugs item #2874854, was opened at 2009-10-08 12:10
Message generated for change (Tracker Item Submitted) made by carrier
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2874854&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Media Management Tools
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Brian Carrier (carrier)
Assigned to: Nobody/Anonymous (nobody)
Summary: iPod Partition Table

Initial Comment:
An iPod image seems to be using 4096-byte sectors and TSK does not recognize the Mac partition table.  Using '-o 0@4096' does not help.   This needs to be resolved.  Reported by Simson Garfinkel.

There seem to be a couple of issues:
- The sector size from the command line should be pushed through all of the code (instead of assuming a 512-byte sector).
- It seems that if you give a 0@XXX value for '-o', then it ignores the sector size.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2874854&group_id=55685