[sleuthkit-developers] [ sleuthkit-Bugs-3303679 ] Invalid UTF-8 in deleted FAT files
Brought to you by:
carrier
From: SourceForge.net <no...@so...> - 2011-05-18 02:04:11
|
Bugs item #3303679, was opened at 2011-05-17 21:01 Message generated for change (Settings changed) made by carrier You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3303679&group_id=55685 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: File System Tools Group: None >Status: Closed >Resolution: Fixed Priority: 5 Private: No Submitted By: Brian Carrier (carrier) Assigned to: Nobody/Anonymous (nobody) Summary: Invalid UTF-8 in deleted FAT files Initial Comment: When looking for deleted FAT directory entries in unallocated space, some random data passes the possible checks and is considered a FAT entry. The name is copied directly into the FS_NAME buffer, which is not correct because the buffer should be only valid UTF-8 and we dont' know what this data is going to be. ---------------------------------------------------------------------- >Comment By: Brian Carrier (carrier) Date: 2011-05-17 21:04 Message: Fixed by not allowing non-ASCII names for deleted SHORT names. Unicode names are not effected. Sending branches/sleuthkit-3.2/NEWS.txt Sending branches/sleuthkit-3.2/tsk3/fs/fatfs_meta.c Sending branches/sleuthkit-3.2/tsk3/fs/tsk_fatfs.h Sending trunk/NEWS.txt Sending trunk/tsk3/fs/fatfs_meta.c Sending trunk/tsk3/fs/tsk_fatfs.h Transmitting file data ...... Committed revision 335. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3303679&group_id=55685 |