[sleuthkit-developers] [ sleuthkit-Bugs-3435161 ] Not consistent OrphanFiles and attributes

[SourceForge.net <no...@so...>]

Bugs item #3435161, was opened at 2011-11-08 15:29
Message generated for change (Tracker Item Submitted) made by carrier
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3435161&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: File System Tools
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Brian Carrier (carrier)
Assigned to: Nobody/Anonymous (nobody)
Summary: Not consistent OrphanFiles and attributes

Initial Comment:
In FAT, $OrphanFiles has a single attribute with size 0.  In NTFS, it has no attributes and therefore processAttributes() in TskAuto does nothing with it (meaning it doesn't get added to the DB in AutoDB). This should be consistent. Not sure if the answer is to always have an empty attribute or make sure that we properly document that there could be no attribute (and modify processAttributes() accordingly). 


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=3435161&group_id=55685