[sleuthkit-developers] Fw: sleuthkit HFS+ decmpfs bug fix patch

[Hin-Tak L. <ht...@us...>]

Seeing as I didn't get any response from either the main author
or the person whose contribution I fixed, I am hoping
posting to the dev list will get this bug fix committed... 

--- On Sat, 29/11/14, Hin-Tak Leung <ht...@us...> wrote:

> From: Hin-Tak Leung <ht...@us...>
> Subject: sleuthkit HFS+ decmpfs bug fix patch
> To: "Matt Stillerman" <ma...@at...>, "Brian Carrier" <ca...@sl...>, "Brian Carrier" <ca...@di...>
> Date: Saturday, 29 November, 2014, 7:42
> Hi,
> 
> I have had problems with using sleuthkit to get at the Mac
> OS X
> fonts for a few years (since decmpfs isn't supported by the
> Linux
> HFS+ driver yet). At first I thought a few font files were
> corrupted,
> especially as the affected fonts are both Korean (and rare),
> but then
> the files always comes out okay if I copy over a network
> from a live
> machine.
> 
> It turns out that it is a bug in the zlib related code in
> sleuthkit for com.apple.decmpfs.
> Here is the patch, and the rather more detailed explanation
> inside.
> This is against the "develop" branch, though I expect you
> should be able to
> just git-apply it to other branches too, since the
> surrounding
> code hasn't been changed for years.
> 
> Thanks for the good work.
> 
> Hin-Tak