Simson L. Garfinkel
Simson L. Garfinkel
We had a report of an infinite loop in that section of code. We could not get a copy of the disk image. I believed that the data_run_cur->next pointer came...
> But what does that have to do with the logical image type? Nothing in `tsk_logical_fs.h` should be used when processing a Linux image. Oh, okay. I screwed up and...
> Yes I was only commenting on the location. It 100% does not belong in the logical file system code. Okay. I'll move it.
Looks good!
> if you think everything is alright, I can put it ready for review ! Sorry for the delay; I missed this.
Yes. That is my goal. Have a new class that does the formatted printing that takes the format strings, the list of things to be output, and a mode. On...
> I've reread the code in mmls.cpp now and have changed my mind. `part_act` has so little other logic in it that it basically already is a formatter. The simplest...
> The approach I suggested would eliminate all the conditionals. Adding classes here is overengineering. Building something more generic will take days to do something that could be done in...
Why 4kb chunks and not 16kb or even 64kb? On Sat, Mar 22, 2025 at 5:20 PM Jon Stewart ***@***.***> wrote: > This is currently draft. The idea is to...
> > Why 4kb chunks and not 16kb or even 64kb? > > Fair question. Yara rules are designed to be run against files, not raw data. The rule language...