search

libyal / libpff

Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
GNU Lesser General Public License v3.0
286 stars 74 forks source link

libpff_index_value_read_data: invalid file offset value out of bounds when recovering files #129

Open smclinden opened 4 months ago

smclinden commented 4 months ago 
          I am seeing this issue as well.
pffinfo 20240427

Personal Folder File information:
    File size:      600867840 bytes
    File content type:  Personal Storage Tables (PST)
    File type:      64-bit
    Encryption type:    compressible

Message store:
    Folders:        Subtree, Inbox, Outbox, Wastbox, Sentmail, Views, Common views, Finder
    Password checksum:  N/A

and

pffexport 20240427

Opening file.
Recovering items.
Unable to export file.
libpff_index_value_read_data: invalid file offset value out of bounds.
libpff_recover_index_values: unable to read offsets index value.
libpff_recover_data_blocks: unable to recover index node at offset: 599707136.

libpff_recover_items: unable to recover data blocks.
libpff_file_recover_items: unable to recover items.
export_handle_export_file: unable to recover items.

I get similar issues with the OST.

Originally posted by @smclinden in https://github.com/libyal/libpff/issues/70#issuecomment-2101521152

joachimmetz commented 4 months ago

Why do you think this is the same as issue 70?

Looks like a very different message to me, can you provide debug output?

smclinden commented 4 months ago

log.txt

smclinden commented 4 months ago

Debug.txt

This is with the OST file.

joachimmetz commented 4 months ago

thanks I'll take a closer look when time permits