search

libyal / libewf

Libewf is a library to access the Expert Witness Compression Format (EWF)
GNU Lesser General Public License v3.0
263 stars 76 forks source link

L01 root item can contain Windows unfriendly names #155

Closed joachimmetz closed 1 year ago

joachimmetz commented 3 years ago

Separately reported L01 root items can contain Windows unfriendly names such as:

C:\:OS [NTFS]

See if I can create a test image to reproduce this

joachimmetz commented 1 year ago

The issue is that the EWF format does not define a path separator and allows for file names like //127.0.0.1/Forensics:\\127.0.0.1\Forensics and libewf uses \ as path separator

joachimmetz commented 1 year ago

Made various changes to the mount path escaping and ltree handling. Please try with the latest version, but note more work is to be done.