forked from pool/sleuthkit
Jan Engelhardt
da06438be7
- update to 4.12.0
* Add Linux LVM support
* Logical File System support (a folder structure is parsed by TSK libraries)
* Many small fixes
- update to 4.11.1
* C/C++:
* Several fixes from @joachimmetz
* NTFS Decompression bug fix from @kastonework and @uckelman-sf
* Java:
* Fixed connection leak when making OS Accounts in bridge
* OsAccount updates for instance types and special Windows SIDs
Fixed issue with duplicate value in Japanese timeline translation
- update to 4.11.0
* C/C++:
* Added checks at various layers to detect encrypted file systems and disks to give more useful error messages.
* Added checks to detect file formats that are not supported (such as AD1, ZIP, etc.) to give more useful error messages.
* Added tsk_imageinfo tool that detects if an image is supported by TSK and if it is encrypted.
* Add numerous bound checks from @joachimmetz
* Clarified licenses as pointed out by @joachimmetz
* Java:
* Updated from Schema 8.6 to 9.1.
* Added tables and classes for OS Accounts and Realms (Domains).
* Added tables and classes for Host Addresses (IP, MAC, etc.).
* Added tables and classes for Analysis Results vs Data Artifacts by adding onto BlackboardArtifacts.
* Added tables and classes for Host and Person to make it easier to group data sources.
* Added static types for standard artifact types.
* Added File Attribute table to allow custom information to be stored for each file.
* Made ordering of getting lock and connection consistent.
* Made the findFile methods more efficient by using extension (which is indexed).
- add 0001-build-support-libewf-V3.patch to support the experimental release branch of libewf
- add sleuthkit-4.12.0_add-missing-include-file.patch
OBS-URL: https://build.opensuse.org/request/show/1067080
OBS-URL: https://build.opensuse.org/package/show/security:forensics/sleuthkit?expand=0&rev=33
33 lines
967 B
Diff
33 lines
967 B
Diff
From b55196f9da7de4a5bad23bf0051a2d6c6ee7f04d Mon Sep 17 00:00:00 2001
|
|
From: Jan Engelhardt <jengelh@inai.de>
|
|
Date: Tue, 14 Feb 2023 09:14:43 +0000
|
|
Subject: [PATCH] build: support libewf V3
|
|
References: https://github.com/sleuthkit/sleuthkit/pull/2810
|
|
|
|
---
|
|
tsk/img/ewf.cpp | 6 ++++++
|
|
1 file changed, 6 insertions(+)
|
|
|
|
diff --git a/tsk/img/ewf.cpp b/tsk/img/ewf.cpp
|
|
index 1dc8c81da..3ae381e6b 100755
|
|
--- a/tsk/img/ewf.cpp
|
|
+++ b/tsk/img/ewf.cpp
|
|
@@ -67,8 +67,14 @@ ewf_image_read(TSK_IMG_INFO * img_info, TSK_OFF_T offset, char *buf,
|
|
|
|
tsk_take_lock(&(ewf_info->read_lock));
|
|
#if defined( HAVE_LIBEWF_V2_API )
|
|
+#if LIBEWF_VERSION >= 20160319
|
|
+ /* V3 API */
|
|
+ cnt = libewf_handle_read_buffer_at_offset(ewf_info->handle,
|
|
+ buf, len, offset, &ewf_error);
|
|
+#else
|
|
cnt = libewf_handle_read_random(ewf_info->handle,
|
|
buf, len, offset, &ewf_error);
|
|
+#endif
|
|
if (cnt < 0) {
|
|
char *errmsg = NULL;
|
|
tsk_error_reset();
|
|
--
|
|
2.39.1
|
|
|