Public bug reported: tsk_recover segfaults (SIGSEGV, exit 139) immediately when opening valid filesystem images with tsk_recover -i raw -a on Ubuntu 26.10. The same TSK version (4.14.0) built from pristine upstream source, and Debian's packaged sleuthkit, process the exact same images successfully. This breaks extracting all filesystem images with tsk_recover on 26.10.
Steps to reproduce: cd /tmp && mkdir segcheck && cd segcheck # (3 small ext4/fat/ntfs fs images, ~1-2 MB each; for example https://github.com/binwalk-ng/binwalk-ng-samples/blob/main/samples/ext4.image) tsk_recover -i raw -a ./ext4.image rootfs echo $? Observed (Ubuntu 26.10, sleuthkit 4.14.0+dfsg-1 amd64): Segmentation fault (core dumped), exit code 139, no files recovered. Same for the fat and ext4 images. Expected: Files Recovered: 3, exit code 0, files written under rootfs/. ** Affects: sleuthkit (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2172654 Title: sleuthkit 4.14.0+dfsg-1 (26.10): tsk_recover segfaults on valid ext4/fat/ntfs images To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sleuthkit/+bug/2172654/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
