Re: [sleuthkit-users] freebsd and icat bug
Brought to you by:
carrier
From: Brian C. <ca...@sl...> - 2004-11-18 15:30:51
|
There is a bug in the Ext2/3 and UFS1 code with FreeBSD 5.0, which neutrino reported. FreeBSD 5 changes the default size of a disk address to 64-bits and TSK used to assume that it would be 32-bits, so processing the indirect block pointers was a problems (it skipped over half of the addresses). You can get the latest versions of src/fstools/ext2fs.c and src/fstools/ffs.c here: http://sleuthkit.sourceforge.net/sleuthkit/ext2fs.c http://sleuthkit.sourceforge.net/sleuthkit/ffs.c brian |