diff --git a/tsk/fs/fs_attrlist.c b/tsk/fs/fs_attrlist.c index 40a262a3c65e4dfb77e58d48f5e25a33e1a7eaed..bac61579daf149340edd748bc87f833a42666ea5 100644 --- a/tsk/fs/fs_attrlist.c +++ b/tsk/fs/fs_attrlist.c @@ -342,7 +342,7 @@ tsk_fs_attrlist_get_name_type(const TSK_FS_ATTRLIST * a_fs_attrlist, fs_attr_ok = fs_attr_cur; } - else if ((name) && (fs_attr_cur->name) && fs_attr_cur->type == TSK_FS_ATTR_TYPE_NTFS_DATA && !stricmp(fs_attr_cur->name, name)) { + else if ((name) && (fs_attr_cur->name) && fs_attr_cur->type == TSK_FS_ATTR_TYPE_NTFS_DATA && !strcasecmp(fs_attr_cur->name, name)) { // NTFS data streams should do case insensitive compare // make sure we return the lowest if multiple exist if ((fs_attr_ok == NULL) || (fs_attr_ok->id > fs_attr_cur->id))