Bugs item #2662168, was opened at 2009-03-04 11:02
Message generated for change (Settings changed) made by carrier
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2662168&group_id=55685
Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Image File Tools
Group: None
>Status: Closed
>Resolution: Fixed
Priority: 5
Private: No
Submitted By: Rob (robjoyce)
Assigned to: Nobody/Anonymous (nobody)
Summary: Alignment errors when reading raw devices in Mac OS X
Initial Comment:
When running any SleuthKit tools against /dev/rdisk* in Mac OS X, you get
kernel[0]: disk0: alignment error.
messages in syslog. The tools work fine, despite the errors.
Tracking it down, it turns out to be the lseek(...,SEEK_END) in tsk3/img/raw.c that tries to determine the file's size. There's already some Mac-specific code there to get the size of raw disk devices... the attached patch simply avoids the lseek() test if it's a character device on a Mac.
----------------------------------------------------------------------
>Comment By: Brian Carrier (carrier)
Date: 2009-04-11 23:33
Message:
Checked into trunk.
Sending CHANGES.txt
Sending tsk3/img/raw.c
Transmitting file data ..
Committed revision 76.
----------------------------------------------------------------------
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2662168&group_id=55685
|
