New RAW unpacker destroys container files with compressed filesystems

fkie-cad / fact_extractor

Standalone Utility for FACT-like extraction

GNU General Public License v3.0

80 stars 31 forks source link

New RAW unpacker destroys container files with compressed filesystems #30

Open dorpvom opened 4 years ago

dorpvom commented 4 years ago

Filesystems can contain FF padding, leading to the RAW unpacker tearing the FS apart. The resulting blocks will not be extracted correctly afterwards.

weidenba commented 4 years ago

hotfixed by removing the unknown file-type capability. However RAW-Extractor needs a better concept.