----- Forwarded message from Wietse Venema <wietseat_private> ----- From: wietseat_private (Wietse Venema) To: tct-usersat_private Subject: TCT version 1.08 available Date: Sat, 15 Sep 2001 18:46:57 -0400 (EDT) Message-Id: <20010915224657.DD57FBC06Cat_private> X-Mailer: ELM [version 2.4ME+ PL82 (25)] TCT version 1.08 fixes a problem with the TCT Linux support. On some Linux versions, the unrm (copy unallocated blocks) utility can have an off-by-one error in the code that examines the data block allocation bitmap. This happens when they change the operating system from under you :-( This problem affects the operation of the unrm command. It came to light while testing new software that may be released later. The patch, as well as the fully patched source TCT code, will be made available from the usual URLs: http://www.porcupine.org/forensics/ http://www.fish.com/tct/ Files: tct-1.08.tar.gz (source code) tct-1.08.tar.gz.sig (PGP signature) tct-1-patch08 (patch relative to TCT version 1.07) The files can also be found in ftp://ftp.porcupine.org/pub/forensics/, for those who prefer to mirror the software. Wietse Sun Sep 9 17:23:13 EDT 2001 o Discovered to my horror that unrm on ext2fs can have an off-by-one error when testing a bit flag in the data block allocation bitmaps - and this problem is dependent on the Linux version being used. o Made the timeout command a little more verbose so it is less of a mystery when the child process is killed. Thu Sep 6 13:51:00 EDT 2001 o New grave-robber -I option for better control of icat/pcat. Mon May 21 10:11:19 EDT 2001 o findkey command-line error check was too conservative, and disallowed threshold of 256 different byte values (Ovanes Manucharyan). ----- End of forwarded message from Wietse Venema ----- ----- End forwarded message -----
This archive was generated by hypermail 2b30 : Sat Sep 29 2001 - 10:55:01 PDT