From cf191a1aebedfc9395ee97caa9b085318d91b1d3 Mon Sep 17 00:00:00 2001
From: Brian Carrier <carrier@sleuthkit.org>
Date: Mon, 27 Apr 2009 13:27:33 +0000
Subject: [PATCH] Added support for comments in body timeline file
---
CHANGES.txt | 3 +++
tools/timeline/mactime.base | 2 ++
2 files changed, 5 insertions(+)
diff --git a/CHANGES.txt b/CHANGES.txt
index fd7fdf6f8..b2c183212 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -83,6 +83,9 @@ permissions and type. Patch by Rob Joyce.
4/26/09: Update: Removed disk_stat and disk_sreset because they were out
of date and hdparm now has the same functionality.
+4/27/09: Update: Added support in mactime to read body files with comment
+lines. Suggested by Simson Garfinkel.
+
---------------- VERSION 3.0.0 --------------
0/00/00: Update: Many, many, many API changes.
diff --git a/tools/timeline/mactime.base b/tools/timeline/mactime.base
index 0a7d03462..8638f353c 100644
--- a/tools/timeline/mactime.base
+++ b/tools/timeline/mactime.base
@@ -285,6 +285,8 @@ sub read_body {
}
while (<BODY>) {
+ next if ((/^\#/) || (/^\s+$/));
+
chomp;
my (
--
GitLab