Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Source scanner detects LVM in extended partition #578

Closed
joachimmetz opened this issue Jun 6, 2021 · 1 comment
Closed

Source scanner detects LVM in extended partition #578

joachimmetz opened this issue Jun 6, 2021 · 1 comment
Assignees

Comments

@joachimmetz
Copy link
Member

joachimmetz commented Jun 6, 2021

Source scanner detects LVM in extended partition

mmls fuse/qcow1 

DOS Partition Table
Offset Sector: 0
Units are in 512-byte sectors

      Slot      Start        End          Length       Description
000:  Meta      0000000000   0000000000   0000000001   Primary Table (#0)
001:  -------   0000000000   0000002047   0000002048   Unallocated
002:  000:000   0000002048   0000499711   0000497664   Linux (0x83)
003:  -------   0000499712   0000501759   0000002048   Unallocated
004:  Meta      0000501758   0033552383   0033050626   DOS Extended (0x05)
005:  Meta      0000501758   0000501758   0000000001   Extended Table (#1)
006:  001:000   0000501760   0033552383   0033050624   Linux Logical Volume Manager (0x8e)
007:  -------   0033552384   0033554431   0000002048   Unallocated

Since pytsk returns slots instead of partitions, this causes the analyzer to detect the LVM signature in the Extended partition. Which then cause resolver.Resolver.OpenFileEntry to raise BackEndError in

file_entry = resolver.Resolver.OpenFileEntry(

@joachimmetz joachimmetz self-assigned this Jun 6, 2021
@joachimmetz joachimmetz changed the title Volume scanner detects LVM in extended partition Source scanner detects LVM in extended partition Jun 6, 2021
@joachimmetz
Copy link
Member Author

Changes in #579

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant