aff4 / aff4-java

AFF4 Java Reader Library

AFF4 Java v1.0.3

An AFF4 Standard v1.0 compliant reader library.

Copyright (c) Schatz Forensic Pty Ltd, 2017-2019

Main source released under the LGPL v3.0+ Tests released under the Apache licence.

aff4-java's Issues

Resource License Request

Could you please specify a different license for the tests (or at the very least the files in src/test/resources)? I would like to use them in tests for my reader to keep the tests consistent across implementations, but LGPL isn't going to work for me, as that license doesn't make much sense with Go, which pretty much requires static linking for all the things.

A way to identify sparse regions up front so those can be skipped?

Hi,

This is my first time looking at reading AFF4 file format via this library so please bear with me if my question is stupid and maybe what I wanted to do is already available through existing version.

I'm using the 9EB file from https://github.com/aff4/ReferenceImages/tree/master/Errata

Is there a way to identify the sparse regions from the library? so once we read/carve into the regions we can then skip to the end of it. If it's not available, is it feasible to create such feature?

Thank you for your time in advance.

Sample image from Google's AFF4 library doesn't open

I was looking for some extra samples, and found that the one in the Google AFF4 repo doesn't open up properly:
https://github.com/google/aff4/blob/3251f4e02ae6d5f93c4793b2b822a7084e040a5b/samples/FAT16.VHD.zip

Caused by: java.io.IOException: File does not appear to be an AFF4 File.
	at com.evimetry.aff4.container.AFF4ZipContainer.loadVersionInformation(AFF4ZipContainer.java:157)
	at com.evimetry.aff4.container.AFF4ZipContainer.<init>(AFF4ZipContainer.java:117)
	at com.evimetry.aff4.Containers.openContainer(Containers.java:96)
	at com.evimetry.aff4.Containers.open(Containers.java:54)

Is that file just out of date? Or is this an actual problem.

invalid LOC header (bad signature)

Hello
When I run examples (Digest, Export or Information) on aff4 images created by tool: winpmem (https://github.com/Velocidex/c-aff4/releases) i get this error:

[ERROR] 00:04.393(Containers.java:getResourceID:136) invalid LOC header (bad signature)
java.util.zip.ZipException: invalid LOC header (bad signature)
at java.util.zip.ZipFile.read(Native Method)
at java.util.zip.ZipFile.access$1400(ZipFile.java:60)
at java.util.zip.ZipFile$ZipFileInputStream.read(ZipFile.java:734)
at sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:284)
at sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:326)
at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:178)
at java.io.InputStreamReader.read(InputStreamReader.java:184)
at java.io.Reader.read(Reader.java:140)
at org.apache.commons.io.IOUtils.copyLarge(IOUtils.java:2369)
at org.apache.commons.io.IOUtils.copyLarge(IOUtils.java:2348)
at org.apache.commons.io.IOUtils.copy(IOUtils.java:2325)
at org.apache.commons.io.IOUtils.copy(IOUtils.java:2273)
at org.apache.commons.io.IOUtils.toString(IOUtils.java:1041)
at com.evimetry.aff4.Containers.getResourceID(Containers.java:132)
at com.evimetry.aff4.Containers.openContainer(Containers.java:91)
at com.evimetry.aff4.Containers.open(Containers.java:54)
at com.evimetry.aff4.examples.Information.main(Information.java:58)
[ERROR] 00:05.377(Information.java:main:95) org.apache.jena.atlas.RuntimeIOException: java.nio.channels.ClosedChannelException

Help!