Simson L. Garfinkel

Results 853 comments of Simson L. Garfinkel

Hi. It's not clear which version of TSK you are running. Can you clarify? Can you try installing `develop` and let me know how that goes?

You got the same behavior with develop? If so, and if this is a problem with sleuthkit, I’m happy to fix it with you.----Sent from my phone.On Jun 15, 2025,...

Please try `develop` as a lot of work has gone into its Java implementation. > On Jun 15, 2025, at 8:51 PM, Carlos Filoteo ***@***.***> wrote: > > > filoxo...

Both of these are autopsy commands, so I'm moving this issue to the autopsy repo.

> https://github.com/sleuthkit/sleuthkit/blob/develop/tsk/base/tsk_base.h#L267 > > ``` > tsk/base/tsk_base.h:267: typedef uint32_t TSK_PNUM_T; ///< Data type used to internally store partition addresses > ``` > > I don't get how name and comment...

Oddly, this is not a problem on MacOS systems, only on Linux systems: ``` simsong@Simsons-MacBook-Pro sleuthkit % mmls -V The Sleuth Kit ver 4.12.1 simsong@Simsons-MacBook-Pro sleuthkit % mmls disk.dd |...

> > https://github.com/sleuthkit/sleuthkit/blob/develop/tsk/base/tsk_base.h#L267 > > ``` > > tsk/base/tsk_base.h:267: typedef uint32_t TSK_PNUM_T; ///< Data type used to internally store partition addresses > > ``` > > > > > >...

> > [@simsong](https://github.com/simsong) if you can OK this proposal, I can make the changes I approve. We need to add to https://github.com/sleuthkit/sleuthkit/tree/release-4.13.0. I guess we can then do a PR...

> If you want a 4.13 release please make sure to "cherry-pick" the non-API breaking changes. It's a bit late for that, unfortunately.