search

ArsenalRecon / Arsenal-Image-Mounter

Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows.
https://ArsenalRecon.com/weapons/image-mounter
Other
496 stars 85 forks source link

Multi part image last sector error #6

Closed YahavR closed 6 years ago

YahavR commented 6 years ago

When mounting a multi part raw image (dump) and reading from a physical last sector it throws an error code 1117, Device I/O error.

To reproduce:

  1. Create spli disk dump or split a raw image into multiple parts.
  2. Mount (with multi part provider)
  3. Open physical drive (CreateFile \?\PhysicalDrive)
  4. Seek to the last sector (end of the disk minus sector size)
  5. Read 1 sector

Notes:

  1. This happens only with multi part provider, I have mounted and successfully read the same sector of nonsplit image.
  2. The last sector that doesn't serve the operation system and found by calculating the geometry of the drive or the sum of the size of all image parts.
  3. This works on other mounters.
  4. Arsenal process called ReadFile with correct parameters - the correct part and offset.
LTRData commented 6 years ago

Thanks for reporting, I'll check this!

LTRData commented 6 years ago

Verified and fixed. Fix will be included in next release.