log2timeline / plaso

Super timeline all the things
https://plaso.readthedocs.io
Apache License 2.0
1.73k stars 351 forks source link

Error while parsing OXML files #67

Closed kiddinn closed 9 years ago

kiddinn commented 9 years ago

When parsing the dblake win81 disk image:

2014-12-15 15:23:57,166 [WARNING] (Worker_0  ) PID:23536 <worker> [openxml] Unable to process  file: 
type: OS,
 location:  /.../test_images/win81_donald_blake/Donald_Blake_Evidence/C-Drive/YYYYMMDD-002-CDRIVE.E01
type: EWF
type: VSHADOW, store index: 2
type: TSK, inode: 48251, location: /$Recycle.Bin/S-1-5-21-718126207-1171771683-1750804747- 1001/$RR981U0/Mini Patisserie Business Plan.docx
 with error: Bad magic number for file header.
kiddinn commented 9 years ago

Forgot the traceback:

Traceback (most recent call last):
  File "build/bdist.linux-x86_64/egg/plaso/engine/worker.py", line 123, in _ParseFileEntryWithParser
    parser_object.Parse(self._parser_context, file_entry)
  File "build/bdist.linux-x86_64/egg/plaso/parsers/oxml.py", line 130, in Parse
    xml = zip_container.read(properties.get('Target'))
  File "/usr/lib/python2.7/zipfile.py", line 935, in read
    return self.open(name, "r", pwd).read()
  File "/usr/lib/python2.7/zipfile.py", line 971, in open
    raise BadZipfile("Bad magic number for file header")
BadZipfile: Bad magic number for file header
kiddinn commented 9 years ago

https://codereview.appspot.com/189040043/

kiddinn commented 9 years ago

this has been fixed in aec886123f8c4e54ec2c331a0aaf1c267cc0e95e