binaryanalysis-ng icon indicating copy to clipboard operation
binaryanalysis-ng copied to clipboard

Published 20 hours ago • verified publisher icon armijnhemel

ISO9660: system use fields that are not Rockridge extensions are not recognized correctly

Open armijnhemel opened this issue 5 years ago • 0 comments

Currently the assumption is that if the System Use field is used the data stored is a Rockridge extension. This is not necessarily true: in the '90s Apple used the System Use field to store HFS specific data (see http://www.reverse-engineering.info/CD/iso9660.pdf page 33)

armijnhemel avatar Sep 21 '19 19:09 armijnhemel