[sleuthkit-developers] [ sleuthkit-Bugs-2954707 ] More ISO9660 missing files

[SourceForge.net <no...@so...>]

Bugs item #2954707, was opened at 2010-02-18 22:20
Message generated for change (Comment added) made by carrier
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2954707&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: File System Tools
Group: None
>Status: Closed
>Resolution: Fixed
Priority: 5
Private: No
Submitted By: Brian Carrier (carrier)
Assigned to: Nobody/Anonymous (nobody)
Summary: More ISO9660 missing files

Initial Comment:
While debugging issue 2954703, I came across some other issues with the same image. Specifically, in the 'dists' directory, the unstable entry is not being shown.  It seems to be lost because of a conflict.  This directory has "link" files that have 0 size and have the same starting block as another file.  The lookup code is having problems with this....

A new design is needed for the ISO code.  Perhaps multiple volume descriptors should not be supported and instead we use only one and use the byte offset of the directory entry as a lookup method.  We could also store more simple data that simply matches the TSK determined inode number to the offset (and vice versa).  

----------------------------------------------------------------------

>Comment By: Brian Carrier (carrier)
Date: 2010-02-20 20:49

Message:
Fixed by changing method that multiple volume descriptors are loaded. Files
found from the other volume descriptors are treated as orphan files. offset
of metadata is used to correlate directory names with "inode address". 

Sending        branches/sleuthkit-3.1/NEWS.txt
Sending        branches/sleuthkit-3.1/tsk3/fs/iso9660.c
Sending        branches/sleuthkit-3.1/tsk3/fs/iso9660_dent.c
Sending        branches/sleuthkit-3.1/tsk3/fs/tsk_iso9660.h
Sending        trunk/tsk3/fs/iso9660.c
Sending        trunk/tsk3/fs/iso9660_dent.c
Sending        trunk/tsk3/fs/tsk_iso9660.h
Transmitting file data .......
Committed revision 174.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2954707&group_id=55685