Replies: 3 comments
-
@ormojo23 this looks like a usage issue on your side. Or at best an issue in RHEL9 (unlikely). I don't think EWF here matters - you run into issues before you even go into application specific part. |
Beta Was this translation helpful? Give feedback.
-
Converted to discussion, up to now I don't think this is a libfuse issue. |
Beta Was this translation helpful? Give feedback.
-
I'm just an end user of ewfmount, not a developer. I guess I should forward your comment to the libewf developers. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
https://github.com/libyal/libewf is part of the Google Libyal set of forensic parsing utilities, and builds several tools, including ewfinfo and ewfmount. As the name implies, ewfinfo displays information about an Expert Witness Format (EWF) file, which have a .E01 extenstion. Ewfmount is used to fuse mount the E01 image.
Fuse 3.10 on RHEL9 is throwing the following error:
lt-ewfmount: ../lib/fuse_opt.c:60: fuse_opt_add_arg: Assertion `!args->argv || args->allocated' failed.
Other libyal tools that attempt to fuse mount (vshadowmount, fshfsmount, bdemount) also throw this same error.
The E01 file used for testing: https://corp.digitalcorpora.org/corpora/drives/nps-2014-usb-non-deterministic/linux-dc3dd-first.E01
test system:
$ uname -a
Linux rhel 5.14.0-503.23.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jan 20 10:19:28 EST 2025 x86_64 x86_64 x86_64 GNU/Linux
$ dnf list installed | grep fuse3
fuse3.x86_64 3.10.2-9.el9 @rhel-9-for-x86_64-appstream-rpms
fuse3-devel.x86_64 3.10.2-9.el9 @rhel-9-for-x86_64-appstream-rpms
fuse3-libs.x86_64 3.10.2-9.el9 @rhel-9-for-x86_64-appstream-rpms
$ ./ewfinfo ~/linux-dc3dd-first.E01
ewfinfo 20240827
Acquiry information:
Acquisition date: Tue May 27 14:53:25 2014
System date: Tue May 27 14:53:25 2014
Operating system used: Darwin
Software version used: 20131230
Password: N/A
EWF information:
File format: EnCase 6
Sectors per chunk: 64
Error granularity: 64
Compression method: deflate
Compression level: best compression
Set identifier: 09d6c7c1-3dec-714b-9b38-81606520597f
Media information:
Media type: fixed disk
Is physical: yes
Bytes per sector: 512
Number of sectors: 1972224
Media size: 963 MiB (1009778688 bytes)
Digest hash information:
MD5: 8296431a2ed42e32db84fa653c2122ca
[test@rhel ewftools]$ sudo ./ewfmount -X allow_other ~/linux-dc3dd-first.E01 /win
[sudo] password for test:
ewfmount 20240827
lt-ewfmount: ../lib/fuse_opt.c:60: fuse_opt_add_arg: Assertion `!args->argv || args->allocated' failed.
Aborted
[test@rhel ewftools]$ dnf list installed | grep fuse3
fuse3.x86_64 3.10.2-9.el9 @rhel-9-for-x86_64-appstream-rpms
fuse3-devel.x86_64 3.10.2-9.el9 @rhel-9-for-x86_64-appstream-rpms
fuse3-libs.x86_64 3.10.2-9.el9 @rhel-9-for-x86_64-appstream-rpms
[test@rhel ewftools]$ uname -a
Linux rhel 5.14.0-503.23.1.el9_5.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jan 20 10:19:28 EST 2025 x86_64 x86_64 x86_64 GNU/Linux
Beta Was this translation helpful? Give feedback.
All reactions