{"action":"created","issue":{"url":"https://api.github.com/repos/libyal/libewf/issues/22","labels_url":"https://api.github.com/repos/libyal/libewf/issues/22/labels{/name}","comments_url":"https://api.github.com/repos/libyal/libewf/issues/22/comments","events_url":"https://api.github.com/repos/libyal/libewf/issues/22/events","html_url":"https://github.com/libyal/libewf/issues/22","id":90410097,"number":22,"title":"libewf 20150126 problems handling E01 images with > 64 file segments","user":{"login":"jbolas","id":6565087,"avatar_url":"https://avatars.githubusercontent.com/u/6565087?v=3","gravatar_id":"","url":"https://api.github.com/users/jbolas","html_url":"https://github.com/jbolas","followers_url":"https://api.github.com/users/jbolas/followers","following_url":"https://api.github.com/users/jbolas/following{/other_user}","gists_url":"https://api.github.com/users/jbolas/gists{/gist_id}","starred_url":"https://api.github.com/users/jbolas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jbolas/subscriptions","organizations_url":"https://api.github.com/users/jbolas/orgs","repos_url":"https://api.github.com/users/jbolas/repos","events_url":"https://api.github.com/users/jbolas/events{/privacy}","received_events_url":"https://api.github.com/users/jbolas/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-06-23T14:50:07Z","updated_at":"2015-06-23T18:02:09Z","closed_at":null,"body":"I have multiple examples of E01 images, created using FTK Imager, with more than 64 file segments. The current version of ewfverify fails on these images. However, ewfverify 20140608 works correctly when opening and verifying the images. \r\n\r\nSteps to reproduce: \r\n\r\n1. create two E01 images of the same physical drive, such that the first image has 64 segments or less (i.e., the last segment having an extension of .E64 or lower) and the second image has 65 segments or more (ending with .E65 or higher).\r\n2. Use a separate tool to verify the hash values of the data in each image.\r\n3. Use ewfverify 20140608 to verify each image. Both should be successful.\r\n4. Use ewfverify 20150126 to verify each image. The first should succeed and the second should fail.\r\n\r\nI note that, in December 2014, the constant LIBEWF_MAXIMUM_CACHE_ENTRIES_SEGMENT_FILES was changed to 64.\r\nhttps://github.com/libyal/libewf/blame/master/libewf/libewf_definitions.h.in#L440\r\nIs it possible that this change to the size of the segment_files_cache in a segment_table could be related?"},"comment":{"url":"https://api.github.com/repos/libyal/libewf/issues/comments/114591816","html_url":"https://github.com/libyal/libewf/issues/22#issuecomment-114591816","issue_url":"https://api.github.com/repos/libyal/libewf/issues/22","id":114591816,"user":{"login":"joachimmetz","id":3888750,"avatar_url":"https://avatars.githubusercontent.com/u/3888750?v=3","gravatar_id":"","url":"https://api.github.com/users/joachimmetz","html_url":"https://github.com/joachimmetz","followers_url":"https://api.github.com/users/joachimmetz/followers","following_url":"https://api.github.com/users/joachimmetz/following{/other_user}","gists_url":"https://api.github.com/users/joachimmetz/gists{/gist_id}","starred_url":"https://api.github.com/users/joachimmetz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joachimmetz/subscriptions","organizations_url":"https://api.github.com/users/joachimmetz/orgs","repos_url":"https://api.github.com/users/joachimmetz/repos","events_url":"https://api.github.com/users/joachimmetz/events{/privacy}","received_events_url":"https://api.github.com/users/joachimmetz/received_events","type":"User","site_admin":false},"created_at":"2015-06-23T18:02:09Z","updated_at":"2015-06-23T18:02:09Z","body":"Yes this could be related the current git checked-in version is still experimental as indicated. I'll have a look as soon as time permits."}}