Bug0011
- Description
- Error loading a second disk image into a case
Loading a second disk image into a case results in the following error:
Error occured during analysis stage
pyflag.DB.DBError: (1061, "Duplicate key name 'block'")
File "/home/tmc/pyflag-beta-bin3/lib/python2.4/site-packages/pyflag/FlagFramework.py",
line 382, in run_analysis
result = report.analyse(query)
File "/home/tmc/pyflag-beta-bin3/lib/python2.4/site-packages/pyflag/plugins/LoadData.py",
line 492, in analyse
fsobj.load(mount_point, query['iosource'])
File "/home/tmc/pyflag-beta-bin3/lib/python2.4/site-packages/pyflag/plugins/DiskForensics/FileSystems/Sleuthkit.py",
line 309, in load
dbh_unalloc.execute("alter table block add index block(block asc)")
File "/home/tmc/pyflag-beta-bin3/lib/python2.4/site-packages/pyflag/DB.py",
line 380, in execute
raise DBError(e)
- Logged
- 2007-03-02
- Logged By
- Assigned to
- Michael
- Status
- Closed
Get back to the BugIndex
This is because an index was left over from the first image loaded. We now clear the blocks table for each image. The table is never really used anyway so we also delete all the entries from it.
We need to add a capability to ask a VFS node about its block allocation - this will be delegated to skfile to do on the fly. It could also be useful for many different drivers too.
