From fd2990d2535ecc967bdcb5883c3f6b0dac2e8ba1 Mon Sep 17 00:00:00 2001
From: "U-BASIS\\zhaohui" <zhaohui@win-zhaoh-3257.basistech.net>
Date: Wed, 9 Aug 2017 11:35:55 -0400
Subject: [PATCH] 2918: update tsk_objects table dump file to take care of the
derived/artifact type.
---
test/script/tskdbdiff.py | 2 ++
1 file changed, 2 insertions(+)
diff --git a/test/script/tskdbdiff.py b/test/script/tskdbdiff.py
index 1ad2a40dfb..d985c9b4e3 100755
--- a/test/script/tskdbdiff.py
+++ b/test/script/tskdbdiff.py
@@ -427,6 +427,8 @@ def normalize_db_entry(line, table, vs_parts_table, vs_info_table, fs_info_table
if path and parent_path:
return newLine + path + ', ' + parent_path + ', ' + ', '.join(fields_list[2:]) + ');'
+ elif objects_table[int(par_obj_id)][1] == 5 and table[int(obj_id)][1] == 2:
+ return newLine + path + ', ' + path + ', ' + ', '.join(fields_list[2:]) + ');'
else:
return line
# remove time-based information, ie Test_6/11/14 -> Test
--
GitLab