sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Other
884 stars 209 forks source link

Aborting "IllegalArgumentException: DocValuesField "parentIds" is too large, must be <= 32766" caused by very long file name in a UFDR #2107

Closed wladimirleite closed 4 months ago

wladimirleite commented 4 months ago

This was reported about a month ago in our internal mail list. The user sent me the report.xml, and although it seems caused by a spurious name inside the UFDR, it is possible to avoid this error by limiting the name length. In fact, UfedXmlReader already does that through updateName(IItem item, String newName), but for some situations (not including the one reported).

Not sure if this should be tagged as a bug.