fact_extractor icon indicating copy to clipboard operation
fact_extractor copied to clipboard

Published 20 hours ago • verified publisher icon fkie-cad

New RAW unpacker destroys container files with compressed filesystems

Open dorpvom opened this issue 5 years ago • 1 comments

Filesystems can contain FF padding, leading to the RAW unpacker tearing the FS apart. The resulting blocks will not be extracted correctly afterwards.

dorpvom avatar Aug 19 '19 14:08 dorpvom

hotfixed by removing the unknown file-type capability. However RAW-Extractor needs a better concept.

weidenba avatar Aug 20 '19 06:08 weidenba