mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-06 21:00:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

First pass at id/path swapping.

Browse Source
This commit is contained in:
alexjacks92 2014-04-28 16:43:53 -04:00
parent 1facc62c3e
commit cbb8cc1a3f
1 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
test/script/tskdbdiff.py
View File

@ -268,6 +268,7 @@ class TskDbDiff(object):
class TskDbDiffException(Exception): class TskDbDiffException(Exception):
pass pass
def replace_id(line, table): def replace_id(line, table):
"""Remove the object id from a line. """Remove the object id from a line.
@ -275,15 +276,19 @@ def replace_id(line, table):
line: a String, the line to remove the object id from. line: a String, the line to remove the object id from.
table: a map from object ids to file paths. table: a map from object ids to file paths.
""" """
index = line.find('INSERT INTO "tsk_files"') files_index = line.find('INSERT INTO "tsk_files"')
if (index != -1): path_index = line.find('INSERT INTO "tsk_files_path"')
# take the portion of the string between the open parenthesis and the comma (ie, the object id) # take the portion of the string between the open parenthesis and the comma (ie, the object id)
obj_id = line[line.find('(') + 1 : line.find(',')] obj_id = line[line.find('(') + 1 : line.find(',')]
if files_index != -1:
# takes everything from the beginning of the string up to the opening # takes everything from the beginning of the string up to the opening
# parenthesis, the path associated with the object id, and everything after # parenthesis, the path associated with the object id, and everything after
# the first comma, and concactenate it # the first comma, and concactenate it
newLine = (line[:line.find('('):] + '(' + table[int(obj_id)] + line[line.find(','):]) newLine = (line[:line.find('('):] + '(' + table[int(obj_id)] + line[line.find(','):])
return newLine return newLine
elif path_index != -1:
newLine = (line[:line.find('('):] + '(' + table[int(obj_id)] + line[line.find(','):])
return newLine
else: else:
return line return line