[sleuthkit-developers] Win32 "blkls -s" problem
Brought to you by:
carrier
From: Makoto S. <sh...@st...> - 2016-11-03 18:29:11
|
Windows version of blkls (4.3.0) has a problem when using "-s", print slack space only option. As far as I examined, it seems that blkls converts all "\x0a(LF)" in the data to "\x0d\x0a(CR/LF)" when extracting slack space. I suppose _setmode(_fileno(stdout), _O_BINARY) is missing before fwrite() in dls_lib.c or somewhere else. Hope this helps, Makoto Shiotsuki |