Thu Mar 13 23:41:31 2014 UTC ()
(Trimmed down commit message, but it's still huge to be able
 to cover all releases in this update...)

---------------- VERSION 4.1.3 --------------
- fixed bug that could crash UFS/ExtX in inode_lookup.
- More bounds checking in ISO9660 code
- Image layer bounds checking
- Update version of SQLITE-JDBC
- Config file for YAFFS2 spare area
- New method in image layer to return names
- Yaffs2 cleanup.
- Escape all strings in SQLite database
- SQlite code uses NTTFS sequence number to match parent IDs

---------------- VERSION 4.1.2 --------------
Core:
- TskAutoDB considers not finding a VS/FS a critical error.

---------------- VERSION 4.1.1 --------------
Core:
- Added FILE_SHARE_WRITE to all windows open calls.
- removed unused methods in CRC code that caused compile errors.
- Added NTFS FNAME times to time2 struct in TSK_FS_META to make them
  easier to access -- should have done this a long time ago!
- fls -m and tsk_gettimes output NTFS FNAME times to output for timelines.
- hfind with EnCase hashsets works when DB is specified (and not only index)
- TskAuto now goes into UNALLOC partitions by default too.
- Added support to automatically find all Cellebrite raw dump files given
  the name of the first image.
- Added NTFS sequence to parent address in directory and directory itself.
- Updated SQLite code to use sequence when finding parent object ID.

---------------- VERSION 4.1.0 --------------
Core:
- Added YAFFS2 support (patch from viaForensics).
- Added Ext4 support (patch from kfairbanks)
- changed all include paths to be 'tsk' instead of 'tsk3'
-- IMPORTANT FOR ALL DEVELOPERS!

---------------- VERSION 4.0.2 --------------
New Features:
- Added fiwalk tool from Simson.  Not supported in Visual Studio yet.

---------------- VERSION 4.0.1 --------------
New Features:
- Can open raw Windows devices with write mode sharing.
- More DOS partition types are displayed.
- Added fcat tool that takes in file name and exports content (equivalent to using ifind and icat together).
- Added new API to TskImgDB that returns hash value associated with carved files.
- performance improvements with FAT code (maps and dir_add)
- performance improvements with NTFS code (maps)
- added AONLY flag to block_walk
- Updated blkls and blkcalc to use AONLY flag -- MUCH faster.

---------------- VERSION 4.0.0 --------------
New Features:
- Added multithreaded support
- Added C++ wrapper classes
- Added JNI bindings / Java data model classes
- 3314047: Added utf8-specific versions of 'toid' methods for img,vs,fs types
- 3184429: More consistent printing of unset times (all zerso instead of 1970)
- New database design that allows for multiple images in the same database
- GPT volume system tries other sector sizes if first attempt fails.
- Added hash calculation and lookup to AutoDB and JNI.
- Upgraded SQLite to 3.7.9.
- EnCase hash support
- Libewf v2 support (it is now non-beta)
- First file in a raw split or E01 can be specified and the rest of the files
  are found.
- mactime displays times as 0 if the time is not set (isntead of 1970)
- Changed behavior of 'mactime -y' to use ISO8601 format.
- Updated HFS+ code from ATC-NY.
- FAT orphan file improvements to reduce false positives.
- TskAuto better reports errors.


(pettai)
diff -r1.2 -r1.3 pkgsrc/security/sleuthkit/Makefile
diff -r1.2 -r1.3 pkgsrc/security/sleuthkit/distinfo
diff -r1.1 -r1.2 pkgsrc/security/sleuthkit/PLIST
diff -r0 -r1.1 pkgsrc/security/sleuthkit/patches/patch-configure
diff -r1.1 -r1.2 pkgsrc/security/sleuthkit/patches/patch-tools_autotools_tsk__recover.cpp

cvs diff -r1.2 -r1.3 pkgsrc/security/sleuthkit/Makefile (expand / switch to unified diff)

--- pkgsrc/security/sleuthkit/Makefile 2013/10/30 15:22:36 1.2
+++ pkgsrc/security/sleuthkit/Makefile 2014/03/13 23:41:31 1.3
@@ -1,20 +1,18 @@ @@ -1,20 +1,18 @@
1# $NetBSD: Makefile,v 1.2 2013/10/30 15:22:36 pettai Exp $ 1# $NetBSD: Makefile,v 1.3 2014/03/13 23:41:31 pettai Exp $
2 2
3DISTNAME= sleuthkit-3.2.3 3DISTNAME= sleuthkit-4.1.3
4CATEGORIES= security sysutils 4CATEGORIES= security sysutils
5MASTER_SITES= ${MASTER_SITE_SOURCEFORGE:=sleuthkit/} 5MASTER_SITES= ${MASTER_SITE_SOURCEFORGE:=sleuthkit/}
6 6
7MAINTAINER= pettai@NetBSD.org 7MAINTAINER= pettai@NetBSD.org
8HOMEPAGE= http://www.sleuthkit.org/ 8HOMEPAGE= http://www.sleuthkit.org/
9COMMENT= The Sleuth Kit (TSK) opensource forensic toolkit 9COMMENT= The Sleuth Kit (TSK) opensource forensic toolkit
10LICENSE= cpl-1.0 AND gnu-gpl-v2 10LICENSE= cpl-1.0 AND gnu-gpl-v2
11 11
12GNU_CONFIGURE= yes 12GNU_CONFIGURE= yes
13USE_LANGUAGES= c c++ 13USE_LANGUAGES= c c++
14USE_LIBTOOL= yes 14USE_LIBTOOL= yes
15USE_TOOLS+= gmake file perl:run 15USE_TOOLS+= gmake file perl:run
16 16
17REPLACE_PERL= tools/timeline/mactime tools/sorter/sorter 
18 
19.include "../../sysutils/file/buildlink3.mk" 17.include "../../sysutils/file/buildlink3.mk"
20.include "../../mk/bsd.pkg.mk" 18.include "../../mk/bsd.pkg.mk"

cvs diff -r1.2 -r1.3 pkgsrc/security/sleuthkit/distinfo (expand / switch to unified diff)

--- pkgsrc/security/sleuthkit/distinfo 2014/02/24 13:10:12 1.2
+++ pkgsrc/security/sleuthkit/distinfo 2014/03/13 23:41:31 1.3
@@ -1,6 +1,7 @@ @@ -1,6 +1,7 @@
1$NetBSD: distinfo,v 1.2 2014/02/24 13:10:12 wiedi Exp $ 1$NetBSD: distinfo,v 1.3 2014/03/13 23:41:31 pettai Exp $
2 2
3SHA1 (sleuthkit-3.2.3.tar.gz) = 85d100ffde54f051916a4ea9452563ff85fad4ac 3SHA1 (sleuthkit-4.1.3.tar.gz) = 9350bb59bb5fbe41d6e29a8d0494460b937749ef
4RMD160 (sleuthkit-3.2.3.tar.gz) = ee9849ff34bd7d1ce90819f22f1e09a71e4d0e8c 4RMD160 (sleuthkit-4.1.3.tar.gz) = 223c6ffe22259ca057b6d9634813536e7ccd9dba
5Size (sleuthkit-3.2.3.tar.gz) = 2039699 bytes 5Size (sleuthkit-4.1.3.tar.gz) = 7952733 bytes
6SHA1 (patch-tools_autotools_tsk__recover.cpp) = 1541241ddbc66d4cdd9f63d97715e576ad36f194 6SHA1 (patch-configure) = 3ecfeb1af019fc7b365374c06e82aeb4b9900e6d
 7SHA1 (patch-tools_autotools_tsk__recover.cpp) = c82f8c366ae2675ee6c0c948c466b40f27bc1163

cvs diff -r1.1 -r1.2 pkgsrc/security/sleuthkit/PLIST (expand / switch to unified diff)

--- pkgsrc/security/sleuthkit/PLIST 2013/10/29 23:33:02 1.1
+++ pkgsrc/security/sleuthkit/PLIST 2014/03/13 23:41:31 1.2
@@ -1,82 +1,86 @@ @@ -1,82 +1,86 @@
1@comment $NetBSD: PLIST,v 1.1 2013/10/29 23:33:02 pettai Exp $ 1@comment $NetBSD: PLIST,v 1.2 2014/03/13 23:41:31 pettai Exp $
2bin/blkcalc 2bin/blkcalc
3bin/blkcat 3bin/blkcat
4bin/blkls 4bin/blkls
5bin/blkstat 5bin/blkstat
 6bin/fcat
6bin/ffind 7bin/ffind
 8bin/fiwalk
7bin/fls 9bin/fls
8bin/fsstat 10bin/fsstat
9bin/hfind 11bin/hfind
10bin/icat 12bin/icat
11bin/ifind 13bin/ifind
12bin/ils 14bin/ils
13bin/img_cat 15bin/img_cat
14bin/img_stat 16bin/img_stat
15bin/istat 17bin/istat
16bin/jcat 18bin/jcat
17bin/jls 19bin/jls
 20bin/jpeg_extract
18bin/mactime 21bin/mactime
19bin/mmcat 22bin/mmcat
20bin/mmls 23bin/mmls
21bin/mmstat 24bin/mmstat
22bin/sigfind 25bin/sigfind
23bin/sorter 26bin/sorter
24bin/srch_strings 27bin/srch_strings
25bin/tsk_comparedir 28bin/tsk_comparedir
26bin/tsk_gettimes 29bin/tsk_gettimes
27bin/tsk_loaddb 30bin/tsk_loaddb
28bin/tsk_recover 31bin/tsk_recover
29include/tsk3/auto/tsk_auto.h 32include/tsk/auto/tsk_auto.h
30include/tsk3/base/tsk_base.h 33include/tsk/base/tsk_base.h
31include/tsk3/base/tsk_os.h 34include/tsk/base/tsk_os.h
32include/tsk3/fs/tsk_ext2fs.h 35include/tsk/fs/tsk_ext2fs.h
33include/tsk3/fs/tsk_fatfs.h 36include/tsk/fs/tsk_fatfs.h
34include/tsk3/fs/tsk_ffs.h 37include/tsk/fs/tsk_ffs.h
35include/tsk3/fs/tsk_fs.h 38include/tsk/fs/tsk_fs.h
36include/tsk3/fs/tsk_hfs.h 39include/tsk/fs/tsk_hfs.h
37include/tsk3/fs/tsk_iso9660.h 40include/tsk/fs/tsk_iso9660.h
38include/tsk3/fs/tsk_ntfs.h 41include/tsk/fs/tsk_ntfs.h
39include/tsk3/hashdb/tsk_hashdb.h 42include/tsk/fs/tsk_yaffs.h
40include/tsk3/img/tsk_img.h 43include/tsk/hashdb/tsk_hashdb.h
41include/tsk3/libtsk.h 44include/tsk/img/tsk_img.h
42include/tsk3/tsk_incs.h 45include/tsk/libtsk.h
43include/tsk3/vs/tsk_bsd.h 46include/tsk/tsk_incs.h
44include/tsk3/vs/tsk_dos.h 47include/tsk/vs/tsk_bsd.h
45include/tsk3/vs/tsk_gpt.h 48include/tsk/vs/tsk_dos.h
46include/tsk3/vs/tsk_mac.h 49include/tsk/vs/tsk_gpt.h
47include/tsk3/vs/tsk_sun.h 50include/tsk/vs/tsk_mac.h
48include/tsk3/vs/tsk_vs.h 51include/tsk/vs/tsk_sun.h
49lib/libtsk3.la 52include/tsk/vs/tsk_vs.h
 53lib/libtsk.la
50man/man1/blkcalc.1 54man/man1/blkcalc.1
51man/man1/blkcat.1 55man/man1/blkcat.1
52man/man1/blkls.1 56man/man1/blkls.1
53man/man1/blkstat.1 57man/man1/blkstat.1
54man/man1/ffind.1 58man/man1/ffind.1
55man/man1/fls.1 59man/man1/fls.1
56man/man1/fsstat.1 60man/man1/fsstat.1
57man/man1/hfind.1 61man/man1/hfind.1
58man/man1/icat.1 62man/man1/icat.1
59man/man1/ifind.1 63man/man1/ifind.1
60man/man1/ils.1 64man/man1/ils.1
61man/man1/img_cat.1 65man/man1/img_cat.1
62man/man1/img_stat.1 66man/man1/img_stat.1
63man/man1/istat.1 67man/man1/istat.1
64man/man1/jcat.1 68man/man1/jcat.1
65man/man1/jls.1 69man/man1/jls.1
66man/man1/mactime.1 70man/man1/mactime.1
67man/man1/mmcat.1 71man/man1/mmcat.1
68man/man1/mmls.1 72man/man1/mmls.1
69man/man1/mmstat.1 73man/man1/mmstat.1
70man/man1/sigfind.1 74man/man1/sigfind.1
71man/man1/sorter.1 75man/man1/sorter.1
72man/man1/tsk_comparedir.1 76man/man1/tsk_comparedir.1
73man/man1/tsk_gettimes.1 77man/man1/tsk_gettimes.1
74man/man1/tsk_loaddb.1 78man/man1/tsk_loaddb.1
75man/man1/tsk_recover.1 79man/man1/tsk_recover.1
76share/tsk3/sorter/default.sort 80share/tsk/sorter/default.sort
77share/tsk3/sorter/freebsd.sort 81share/tsk/sorter/freebsd.sort
78share/tsk3/sorter/images.sort 82share/tsk/sorter/images.sort
79share/tsk3/sorter/linux.sort 83share/tsk/sorter/linux.sort
80share/tsk3/sorter/openbsd.sort 84share/tsk/sorter/openbsd.sort
81share/tsk3/sorter/solaris.sort 85share/tsk/sorter/solaris.sort
82share/tsk3/sorter/windows.sort 86share/tsk/sorter/windows.sort

File Added: pkgsrc/security/sleuthkit/patches/patch-configure
$NetBSD: patch-configure,v 1.1 2014/03/13 23:41:31 pettai Exp $

--- configure.orig	2014-03-13 22:51:42.000000000 +0000
+++ configure
@@ -21983,7 +21983,7 @@ else
   ax_java_support=no
 fi
 
- if test "x$ax_java_support" == "xyes"; then
+ if test "x$ax_java_support" = "xyes"; then
   X_JNI_TRUE=
   X_JNI_FALSE='#'
 else

cvs diff -r1.1 -r1.2 pkgsrc/security/sleuthkit/patches/patch-tools_autotools_tsk__recover.cpp (expand / switch to unified diff)

--- pkgsrc/security/sleuthkit/patches/patch-tools_autotools_tsk__recover.cpp 2014/02/24 13:10:12 1.1
+++ pkgsrc/security/sleuthkit/patches/patch-tools_autotools_tsk__recover.cpp 2014/03/13 23:41:31 1.2
@@ -1,13 +1,14 @@ @@ -1,13 +1,14 @@
1$NetBSD: patch-tools_autotools_tsk__recover.cpp,v 1.1 2014/02/24 13:10:12 wiedi Exp $ 1$NetBSD: patch-tools_autotools_tsk__recover.cpp,v 1.2 2014/03/13 23:41:31 pettai Exp $
2 2
3needs limits.h for PATH_MAX 3needs limits.h for PATH_MAX
4--- tools/autotools/tsk_recover.cpp.orig 2011-10-07 19:12:29.000000000 +0000 4
 5--- tools/autotools/tsk_recover.cpp.orig 2014-03-13 23:04:47.000000000 +0000
5+++ tools/autotools/tsk_recover.cpp 6+++ tools/autotools/tsk_recover.cpp
6@@ -9,6 +9,7 @@ 7@@ -9,6 +9,7 @@
7 ** 8 **
8 */ 9 */
9  10
10+#include <limits.h> 11+#include "limits.h"
11 #include "tsk3/tsk_tools_i.h" 12 #include "tsk/tsk_tools_i.h"
12 #include <locale.h> 13 #include <locale.h>
13 #include <sys/stat.h> 14 #include <sys/stat.h>