Bug#632689: scalpel: upstream changed

ydirson at free.fr ydirson at free.fr
Sun Aug 7 13:38:40 UTC 2016


Taking a look at the 2.0 source code from the sleuthkit repo, we can see
a small issue with that version:

It looks like it uses PASCAL-style prefix-length strings to store patterns, which
prevents to use patterns larger than 256 bytes.  Why on earth not using a
struct to keep the size in an explicit field !?


----- Mail original -----
> De: ydirson at free.fr
> À: 632689 at bugs.debian.org
> Envoyé: Dimanche 7 Août 2016 11:36:17
> Objet: scalpel: upstream changed
> 
> Looking for 2.0 source, one rapidly notices that the upstream
> Homepage
> is not valid any more.
> 
> Digging a bit:
> * Fedora seems to have an upstream tarball at
>   http://pkgs.fedoraproject.org/lookaside/pkgs/scalpel/scalpel-2.0.tar.gz/b0da813bf34941e79209d7fafe86a6e6/
> * http://fossies.org/linux/misc/scalpel-2.0.tar.gz/ points to
>   https://github.com/sleuthkit/scalpel, which appears to be 2.0 +
>   some patches, but
>   was last changed in 2014
> 
> 



More information about the forensics-devel mailing list