search

pjrinaldi / wombatforensics

linux c++, fox-toolkit, multi-threaded forensic gui tool
GNU General Public License v2.0
47 stars 12 forks source link

Parsing/Handling sfs image code #343

Open pjrinaldi opened 4 years ago

pjrinaldi commented 4 years ago

need to add sfs image code to open case, i don't think it is either there or it is not correct, so it doesn't open correctly when it's using an sfs image...

compare to addevidence/new case and fix accordingly.

pjrinaldi commented 4 years ago

functionalizing sfs code is not quite working yet... will put aside for now and work on it with a later release.

pjrinaldi commented 3 years ago

now that i have wfi, i'm not going to bother wtih sfs images.

pjrinaldi commented 8 months ago

Going to implement sfs support cause i like the image format and it should get used more.

pjrinaldi commented 8 months ago

implemented using system(squashfuse) command, not the best way, but it does work.

pjrinaldi commented 8 months ago

Using libsquashfs library i can sucessfully get the file size for the raw forensic image within the sfs image file. next step is getting the read content working.

pjrinaldi commented 8 months ago

code is working, but there are probably some errors in my seek/read logic for determining where to read the content from. it works for reading 1 block, but will probably fail miserably when having to read from more than one block. I'll worry about it when i get to it.