[sleuthkit-developers] [ sleuthkit-Bugs-2993767 ] Slow FAT OrphanFile Listing

[SourceForge.net <no...@so...>]

Bugs item #2993767, was opened at 2010-04-28 14:01
Message generated for change (Tracker Item Submitted) made by carrier
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2993767&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: File System Tools
Group: None
Status: Open
Resolution: None
Priority: 9
Private: No
Submitted By: Brian Carrier (carrier)
Assigned to: Brian Carrier (carrier)
Summary: Slow FAT OrphanFile Listing

Initial Comment:
Jamie Butler and Aaron LeMasters reported that they had a FAT32 image that seemed to be getting into an infinite loop and was not stopping.  Debugging showed that it was occurring while listing the contents of the OrphanFiles directory. 

Specifically:
- The orphanFiles were found relatively quickly, but when they were recursed into, TSK found a directory.  It then proceeded to search for its parent directory.  This started a dir_walk from the root, which went into $OrphanFiles.  This data was not cached and therefore another search was conducted.
- After the second orphanFile hunt, the hunt for the parent directory continued and it did not find the parent directory because it was looking for allocated files only. 

It doesn't seem to be as much of a problem with infinite loops as much of as a problem with way too many tree traverses. 

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2993767&group_id=55685