[sleuthkit-developers] [ sleuthkit-Bugs-3052302 ] segfault in tfk_fs_dir_open_meta

[SourceForge.net <no...@so...>]

Bugs item #3052302, was opened at 2010-08-24 08:56
Message generated for change (Comment added) made by carrier
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3052302&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: File System Tools
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Rob J Meijer (ghede)
Assigned to: Nobody/Anonymous (nobody)
Summary: segfault in tfk_fs_dir_open_meta

Initial Comment:
When processing inode 10240 of the ufs filesystem on the partition-3 image of the ntfs-auto-detect images in the dftt testset, a segfault occurs.
Using fls the segfault can be reproduces:

fls -f ufs 10-ntfs-part3.dd 10240



----------------------------------------------------------------------

>Comment By: Brian Carrier (carrier)
Date: 2010-08-24 20:44

Message:
The problem actually appears to be with inode 5296.  It has a massive size
and what appears to be a lot of invalid metadata.  perhaps this inode was
not initialized.  UFS2 has a feature of not initializing inodes, perhaps
UFS1 does as well. 

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3052302&group_id=55685