search

sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Other
948 stars 218 forks source link

Map interaction inconsistencies when items have multi valued location field #2083

Open patrickdalla opened 7 months ago

patrickdalla commented 7 months ago

While implementing a solution for #43, it was found that the maps Aleapp plugin extracted 2 locations per item that represents google maps direction (to and from). The implementation of map does not expect this, and item selection and highlighting is performing inconsistently.

lfcnassif commented 7 months ago

Hi @patrickdalla, thanks. Should we classify this as bug or enhancement? Does it happen with currently supported GPS artifacts or just with the new ALeapp integration?

patrickdalla commented 7 months ago

I checked the code for ExtraProperties.LOCATIONS references. In GeofileParser, the method set of Metadata is called, with single lat and long passed with ExtraProperties.LOCATIONS, indicating that only one location is added per extracted subitem.

But the chat parsers (whatsapp, threema) call the method add of Metadata with ExtraProperties.LOCATIONS of the chat correspondent item, when extractMessages is false to extract individual messages as items.

So, there is a possible situation when this issue can occur in past releases. Maybe is better classify it as BUG.