[sleuthkit-developers] [ sleuthkit-Bugs-3435140 ] NTFS istat & Orphan Files

[SourceForge.net <no...@so...>]

Bugs item #3435140, was opened at 2011-11-08 14:37
Message generated for change (Tracker Item Submitted) made by carrier
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3435140&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: File System Tools
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Brian Carrier (carrier)
Assigned to: Nobody/Anonymous (nobody)
Summary: NTFS istat & Orphan Files

Initial Comment:
NTFS istat does not work when run on an OrphanFile folder.  This call:

if (ntfs_dinode_lookup(ntfs, (char *) mft, inum)) {
        free(mft);
        return 1;
    }

Fails for the virtual folder.  It should continue on and skip any parts that require mft access.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3435140&group_id=55685