libyal/libcdata

latest libcdata gets "invalid node" with vshadowmount

Closed this issue · 3 comments

I builded vshadowmount from latest source code (I used git clone and synclibs.ps1). However it displays errors like below when I try to mount a VSS with FTK Imager.

libcdata_tree_node_get_value: invalid node.
libcdata_btree_node_get_sub_node_by_value: unable to retrieve values list.
libcdata_btree_insert_value: unable to retrieve split sub node by value.
libvshadow_block_tree_insert: unable to insert block descriptor in forward block tree.
libvshadow_store_descriptor_read_store_block_list: unable to insert block descriptor in tree.
libvshadow_store_descriptor_read_block_descriptors: unable to read store block list.
libvshadow_store_descriptor_read_buffer: unable to read block descriptors.
libvshadow_internal_store_read_buffer_from_file_io_handle: unable to read buffer from store descriptor: 2.
libvshadow_store_read_buffer: unable to read buffer.
mount_handle_read_buffer: unable to read buffer from input: 2.
vshadowmount_dokan_ReadFile: unable to read from mount handle.
libcdata_btree_node_insert_value: cannot insert value in node with sub nodes.
libcdata_btree_insert_value: unable to insert value in upper node.
libvshadow_block_tree_insert: unable to insert block descriptor in forward block tree.
libvshadow_store_descriptor_read_store_block_list: unable to insert block descriptor in tree.
libvshadow_store_descriptor_read_block_descriptors: unable to read store block list.
libvshadow_store_descriptor_read_buffer: unable to read block descriptors.
libvshadow_internal_store_read_buffer_from_file_io_handle: unable to read buffer from store descriptor: 2.
libvshadow_store_read_buffer: unable to read buffer.
mount_handle_read_buffer: unable to read buffer from input: 2.
vshadowmount_dokan_ReadFile: unable to read from mount handle.
libcdata_btree_node_insert_value: cannot insert value in node with sub nodes.
libcdata_btree_insert_value: unable to insert value in upper node.
libvshadow_block_tree_insert: unable to insert block descriptor in forward block tree.
libvshadow_store_descriptor_read_store_block_list: unable to insert block descriptor in tree.
libvshadow_store_descriptor_read_block_descriptors: unable to read store block list.
libvshadow_store_descriptor_read_buffer: unable to read block descriptors.
libvshadow_internal_store_read_buffer_from_file_io_handle: unable to read buffer from store descriptor: 2.
(snip)

A sample error of FTK Imager is below.
libcdata_error

I replaced libcdata from latest one to libcdata-alpha-20180722. Then, vshadowmount was able to mount a VSS without errors.
Therefore, latest libcdata seems to have a bug.

Thx for the report. I'll have a look when time permits.

Looks like a functional bug was introduced in 7f285b4.

Should be addressed in 9baf4b6, closing issue, reopen if issue still persists.