UTF-8 output patch for task-1.60/sleuthkit-1.6x
To apply this patch, fls, ffind, fsstat and istat have a new option
-8
, which enables UTF-8 for their output of NTFS filenames, stream names, volume names and etc.
The original code cares only of ASCII characters and using original
uni2ascii() function makes the information of non-ASCII NTFS filenames broken (or
replace '?').
These patches are suitable for task-1.60.tar.gz / sleuthkit-1.6x.tar.gz
To discuss, please join sleuthkit-users.
- utf8-8.patch
- Modified: updated for sleuthkit-1.64.
- utf8-6.patch
- Modified: updated for sleuthkit-1.61.
- utf8-5.patch
- Fixed: maxlen length check bug in uni2utf8().
- Added: support for up to NTFS_MAXNAMLEN file and stream name if -8 option is enabled.
- utf8-4.patch
- Added: support for fsstat.
- utf8-3.patch
- Modified: define the default UCS-2 convert function is uni2ascii, not NULL.
- Added: support for istat.
- utf8-2.patch
- Fixed: Problem that exists in utf8.patch.
- utf8.patch
- Initial version
- Added: UTF-8 support for fls, ffind.
- Problem: This patch causes that icat and ifind are crashed.
- ntfs.c.patch
- Original version, incomplete one.
How to apply
You can apply these patches like:
%tar xzvf sleuthkit-1.64.tar.gz
%cd sleuthkit-1.64
%patch -p1 < /some/where/utf8.patch
or
%tar xzvf task-1.60.tar.gz
%cd task-1.60/src/fstools
%patch -p3 < /some/where/utf8.patch