mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-06 21:00:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

4879 keep invalid Path ID as the ID such as -1

Browse Source
This commit is contained in:
William Schaefer 2019-03-28 11:26:06 -04:00
parent e5e0ddbc41
commit b4472684fa
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
test/script/tskdbdiff.py
View File

@ -256,7 +256,7 @@ class TskDbDiff(object):
attr_value_as_string = str(attr["value_int32"]) attr_value_as_string = str(attr["value_int32"])
elif attr["value_type"] == 2: elif attr["value_type"] == 2:
attr_value_as_string = str(attr["value_int64"]) attr_value_as_string = str(attr["value_int64"])
if attr["attribute_type_id"] == 36 and id_obj_path_table != -1: #normalize TSK_PATH_IDs from being object id to a path if the obj_id_path_table was generated if attr["attribute_type_id"] == 36 and id_obj_path_table != -1 and int(attr_value_as_string) > 0: #normalize positive TSK_PATH_IDs from being object id to a path if the obj_id_path_table was generated
attr_value_as_string = id_obj_path_table[int(attr_value_as_string)] attr_value_as_string = id_obj_path_table[int(attr_value_as_string)]
elif attr["value_type"] == 3: elif attr["value_type"] == 3:
attr_value_as_string = "%20.10f" % float((attr["value_double"])) #use exact format from db schema to avoid python auto format double value to (0E-10) scientific style attr_value_as_string = "%20.10f" % float((attr["value_double"])) #use exact format from db schema to avoid python auto format double value to (0E-10) scientific style