Taking a look at the 2.0 source code from the sleuthkit repo, we can see a small issue with that version:
It looks like it uses PASCAL-style prefix-length strings to store patterns, which prevents to use patterns larger than 256 bytes. Why on earth not using a struct to keep the size in an explicit field !? ----- Mail original ----- > De: ydir...@free.fr > À: 632...@bugs.debian.org > Envoyé: Dimanche 7 Août 2016 11:36:17 > Objet: scalpel: upstream changed > > Looking for 2.0 source, one rapidly notices that the upstream > Homepage > is not valid any more. > > Digging a bit: > * Fedora seems to have an upstream tarball at > > http://pkgs.fedoraproject.org/lookaside/pkgs/scalpel/scalpel-2.0.tar.gz/b0da813bf34941e79209d7fafe86a6e6/ > * http://fossies.org/linux/misc/scalpel-2.0.tar.gz/ points to > https://github.com/sleuthkit/scalpel, which appears to be 2.0 + > some patches, but > was last changed in 2014 > > _______________________________________________ forensics-devel mailing list forensics-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel
