Bug report: large (several blocks) master file prints inconsistent filemap

ncanceill / frag_find

Hash-based carver tool

GNU General Public License v2.0

0 stars 0 forks source link

Open ncanceill opened 11 years ago

ncanceill commented 11 years ago

Status: Present in original implementation
Description: printing filemap with a large master file introduces inconsistent carving and/or reporting.
Reproduce: Use a 1024-byte master file; the filemap is printed with couples of master blocks in the first column (e.g. 0-1); as a side-effect, only the first matching couple of blocks in the image file are printed (e.g. only 2-3 even when 4-5 would also work).
Fix: ???

Working on it atm, standby...

ncanceill commented 11 years ago

ncanceill commented 11 years ago

Actually, bug seems present for any blocksize.