mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-12 16:06:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2999 from APriestman/2819_preventEmptyCaseOrDatasource

Browse Source 
Prevent empty case or datasource when tagging artifacts as bad
This commit is contained in:
Richard Cordovano 2017-08-14 13:39:58 -04:00 committed by GitHub
commit 71c145fd3d
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
Core/src/org/sleuthkit/autopsy/centralrepository/datamodel/AbstractSqlEamDb.java
View File

@ -1095,6 +1095,20 @@ public abstract class AbstractSqlEamDb implements EamDb {
preparedUpdate.executeUpdate(); preparedUpdate.executeUpdate();
} else { } else {
// In this case, the user is tagging something that isn't in the database,
// which means the case and/or datasource may also not be in the database.
// We could improve effiency by keeping a list of all datasources and cases
// in the database, but we don't expect the user to be tagging large numbers
// of items (that didn't have the CE ingest module run on them) at once.
if(null == getCaseDetails(eamInstance.getEamCase().getCaseUUID())){
newCase(eamInstance.getEamCase());
}
if (null == getDataSourceDetails(eamInstance.getEamDataSource().getDeviceID())) {
newDataSource(eamInstance.getEamDataSource());
}
eamArtifact.getInstances().get(0).setKnownStatus(TskData.FileKnown.BAD); eamArtifact.getInstances().get(0).setKnownStatus(TskData.FileKnown.BAD);
addArtifact(eamArtifact); addArtifact(eamArtifact);
} }