Re: [sleuthkit-users] fls Error

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Aug 28, 2004, at 7:47 AM, Patrick Roussel wrote:

>  On a Red Hat Fedora system, when running a recursive fls command on a 
> 3.2 Gb FAT32 image, i receive the following message:
>
>  /usr/local/src/sleuthkit-1.71/bin/fls: fatfs_dent_walk g_curdirptr is 
> set ! recursive ?
>

That is a known bug that was recently introduced.  The problem is that 
it was trying to analyze a deleted directory and it wasn't cleaning up 
after itself when it had to abort because of corrupt data.  Download 
the fatfs_dent.c file from the link below, replace the one in 
src/fstools with it and recompile.

http://www.sleuthkit.org/sleuthkit/fatfs_dent.c

brian

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFBMKN2OK1gLsdFTIsRAgtoAKCAgKttbwWGgCKBKszSAYNr7iBSowCfba25
7c3m0GcptfFP9KMDLcVZVYE=
=1beG
-----END PGP SIGNATURE-----