Joel Uckelman

There are three problems preventing correct HFS/HFS+ processing in 4.8.0: (1) 218a868 and f9e8cbc0 introduce checks to prevent reading beyond the end of allocated memory, which were introduced in in...

This appears to be fixed as of 4.9.0 and can be closed now.

PR #1875 fixes this by removing the whole block, which was never correct to begin with.

Some of my PRs have been open since 2017. My patience wears thin.

Do you still have the problem if you apply this patch? https://github.com/sleuthkit/sleuthkit/pull/1276 (This fixed a _lot_ of `ntfs_uncompress_compunit: Block length longer than buffer length` errors for us.)

@joachimmetz Ping. Did you have a chance to try the patch in PR #1276?

@bcarrier Looks like we have confirmation that PR #1276 resolves this bug. Could we get that merged soon?

I'll open a PR adding an option for full static linking of the tools soon.

I've fixed the conflict. Could we get this merged, please?

Fixed conflict again.