[sleuthkit-developers] [ sleuthkit-Bugs-2905750 ] reading data from compressed file on NTFS

[SourceForge.net <no...@so...>]

Bugs item #2905750, was opened at 2009-11-29 16:33
Message generated for change (Comment added) made by carrier
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2905750&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: File System Tools
Group: None
>Status: Closed
>Resolution: Fixed
Priority: 5
Private: No
Submitted By: oncer oncer surname (oncer82)
Assigned to: Nobody/Anonymous (nobody)
Summary: reading data from compressed file on NTFS

Initial Comment:
This issue is reprodusable when trying to read content of a compressed file on NTFS with using tsk_fs_file_read funstion.

Bug is reproduced on an alive OS while trying to read content of a C:\WINDOWS\ie7\inetres.adm  file.
Function tsk_fs_file_read continues reading data even when an offset from where to read data is past file's boundary.
Function continues returning data without any error.



----------------------------------------------------------------------

>Comment By: Brian Carrier (carrier)
Date: 2009-12-03 21:27

Message:
I confirmed that the code does not return -1 when offset is past the end of
the file.  0 was returned instead.  This was inconsistent with the reading
functionality of the image layer, which returns -1 in that case.  All file
system code was updated to return -1 when an offset is given past the end
of the allocated file size.   Thanks!

Sending        trunk/tsk3/base/tsk_base.h
Sending        trunk/tsk3/base/tsk_error.c
Sending        trunk/tsk3/fs/fs_attr.c
Sending        trunk/tsk3/fs/fs_file.c
Sending        trunk/tsk3/fs/ntfs.c
Sending        trunk/tsk3/fs/tsk_fs.h
Transmitting file data ......
Committed revision 138.


----------------------------------------------------------------------

Comment By: oncer oncer surname (oncer82)
Date: 2009-11-29 16:35

Message:
Windows XP, search pak 2.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2905750&group_id=55685