fox-it · twiggler · Sep 18, 2025 · Sep 8, 2025 · Sep 10, 2025 · Sep 15, 2025
diff --git a/.gitmodules b/.gitmodules
@@ -122,3 +122,6 @@
 	path = submodules/dissect.qnxfs
 	url = https://github.com/fox-it/dissect.qnxfs.git
 	branch = main
+[submodule "submodules/dissect.cramfs"]
+	path = submodules/dissect.cramfs
+	url = https://github.com/fox-it/dissect.cramfs.git
diff --git a/docs/Makefile b/docs/Makefile
@@ -3,7 +3,7 @@
 
 # You can set these variables from the command line, and also
 # from the environment for the first two.
-SPHINXOPTS    ?= -jauto -w $(BUILDDIR)/warnings.log --fail-on-warning
+SPHINXOPTS    ?= -jauto -w $(BUILDDIR)/warnings.log
 SPHINXBUILD   ?= sphinx-build
 SPHINXWATCH   ?= sphinx-autobuild
 SOURCEDIR     = source

diff --git a/submodules/acquire b/submodules/acquire
diff --git a/submodules/dissect.archive b/submodules/dissect.archive
diff --git a/submodules/dissect.btrfs b/submodules/dissect.btrfs
diff --git a/submodules/dissect.cramfs b/submodules/dissect.cramfs
diff --git a/submodules/dissect.cstruct b/submodules/dissect.cstruct
diff --git a/submodules/dissect.esedb b/submodules/dissect.esedb
diff --git a/submodules/dissect.etl b/submodules/dissect.etl
diff --git a/submodules/dissect.executable b/submodules/dissect.executable
diff --git a/submodules/dissect.extfs b/submodules/dissect.extfs
diff --git a/submodules/dissect.fve b/submodules/dissect.fve
diff --git a/submodules/dissect.hypervisor b/submodules/dissect.hypervisor
diff --git a/submodules/dissect.qnxfs b/submodules/dissect.qnxfs
diff --git a/submodules/dissect.shellitem b/submodules/dissect.shellitem
diff --git a/submodules/dissect.sql b/submodules/dissect.sql
diff --git a/submodules/dissect.squashfs b/submodules/dissect.squashfs
diff --git a/submodules/dissect.target b/submodules/dissect.target
diff --git a/submodules/dissect.util b/submodules/dissect.util
diff --git a/submodules/dissect.vmfs b/submodules/dissect.vmfs
diff --git a/submodules/dissect.volume b/submodules/dissect.volume
diff --git a/submodules/flow.record b/submodules/flow.record
+191 −58		acquire/acquire.py
+3 −3		pyproject.toml
+36 −0		tests/test_acquire_profiles.py
+1 −1		tests/test_volatile.py
+4 −11		README.md
+1 −1		dissect/btrfs/btrfs.py
+2 −7		pyproject.toml
+54 −0		CHANGELOG.md
+5 −7		dissect/cstruct/compiler.py
+8 −4		dissect/cstruct/cstruct.py
+6 −7		dissect/cstruct/expression.py
+101 −14		dissect/cstruct/parser.py
+3 −0		dissect/cstruct/tools/stubgen.py
+1 −1		dissect/cstruct/types/base.py
+104 −24		dissect/cstruct/types/structure.py
+4 −5		dissect/cstruct/utils.py
+3 −2		pyproject.toml
+1 −1		tests/test_align.py
+1 −1		tests/test_annotations.py
+46 −2		tests/test_basic.py
+3 −23		tests/test_compiler.py
+3 −3		tests/test_expression.py
+170 −5		tests/test_parser.py
+20 −0		tests/test_tools_stubgen.py
+69 −1		tests/test_types_structure.py
+4 −2		tox.ini
+2 −2		dissect/esedb/c_esedb.py
+9 −6		dissect/esedb/record.py
+ −		tests/_data/Windows.edb.gz
+5 −0		tests/conftest.py
+16 −0		tests/test_record.py
+2 −2		dissect/etl/c_etl.py
+15 −23		dissect/etl/headers/event.py
+2 −2		pyproject.toml
+3 −1		dissect/executable/__init__.py
+45 −40		dissect/executable/elf/elf.py
+5 −0		dissect/executable/pe/__init__.py
+2,234 −0		dissect/executable/pe/c_pe.py
+3,112 −0		dissect/executable/pe/c_pe.pyi
+41 −0		dissect/executable/pe/directory/__init__.py
+18 −0		dissect/executable/pe/directory/base.py
+64 −0		dissect/executable/pe/directory/basereloc.py
+114 −0		dissect/executable/pe/directory/bound_import.py
+83 −0		dissect/executable/pe/directory/com_descriptor.py
+244 −0		dissect/executable/pe/directory/debug.py
+176 −0		dissect/executable/pe/directory/delay_import.py
+89 −0		dissect/executable/pe/directory/exception.py
+128 −0		dissect/executable/pe/directory/export.py
+33 −0		dissect/executable/pe/directory/iat.py
+151 −0		dissect/executable/pe/directory/imports.py
+58 −0		dissect/executable/pe/directory/load_config.py
+589 −0		dissect/executable/pe/directory/resource.py
+76 −0		dissect/executable/pe/directory/security.py
+46 −0		dissect/executable/pe/directory/tls.py
+609 −0		dissect/executable/pe/locale_id.py
+448 −0		dissect/executable/pe/pe.py
+7 −9		pyproject.toml
+ −		tests/_data/elf/hello_world.out
+ −		tests/_data/elf/hello_world.stripped.out
+ −		tests/_data/pe/16/DPMIRES.EXE
+ −		tests/_data/pe/32/Dummy.dll
+ −		tests/_data/pe/32/Microsoft.Windows.SoftwareLogo.Binscope.resources.dll
+ −		tests/_data/pe/32/NetDbgTLLoc.dll
+ −		tests/_data/pe/32/OLEACCHOOKS.DLL
+ −		tests/_data/pe/32/PUNZIP.EXE
+ −		tests/_data/pe/32/TpmCertResources.dll
+ −		tests/_data/pe/32/UWPEnum.dll
+ −		tests/_data/pe/32/aborttest.exe
+ −		tests/_data/pe/32/mingwm10.dll
+ −		tests/_data/pe/64/comres.dll
+ −		tests/_data/pe/64/test.exe
+0 −0		tests/_docs/Makefile
+2 −0		tests/_docs/conf.py
+0 −0		tests/_docs/index.rst
+7 −0		tests/_utils.py
+0 −0		tests/elf/__init__.py
+8 −6		tests/elf/test_dump.py
+1 −1		tests/elf/test_elf.py
+0 −0		tests/elf/test_section.py
+1 −1		tests/elf/test_segment.py
+0 −0		tests/elf/test_segment_table.py
+0 −0		tests/pe/__init__.py
+0 −0		tests/pe/directory/__init__.py
+19 −0		tests/pe/directory/test_basereloc.py
+25 −0		tests/pe/directory/test_bound_import.py
+17 −0		tests/pe/directory/test_com_descriptor.py
+78 −0		tests/pe/directory/test_debug.py
+29 −0		tests/pe/directory/test_delay_import.py
+18 −0		tests/pe/directory/test_exception.py
+26 −0		tests/pe/directory/test_export.py
+40 −0		tests/pe/directory/test_iat.py
+25 −0		tests/pe/directory/test_import.py
+19 −0		tests/pe/directory/test_load_config.py
+86 −0		tests/pe/directory/test_resource.py
+20 −0		tests/pe/directory/test_security.py
+15 −0		tests/pe/directory/test_tls.py
+56 −0		tests/pe/test_pe.py
+0 −5		tests/util.py
+6 −6		tox.ini
+41 −89		dissect/extfs/extfs.py
+4 −0		tests/conftest.py
+ −		tests/data/ext4_symlink_test.bin.gz
+0 −3		tests/data/ext4_symlink_test1.bin.gz
+0 −3		tests/data/ext4_symlink_test2.bin.gz
+0 −3		tests/data/ext4_symlink_test3.bin.gz
+4 −21		tests/test_ext4.py
+5 −18		dissect/fve/crypto/__init__.py
+17 −10		dissect/fve/crypto/_pycryptodome.py
+6 −4		dissect/fve/crypto/elephant.py
+7 −10		pyproject.toml
+3 −3		tox.ini
+2 −5		dissect/hypervisor/disk/c_qcow2.py
+190 −0		dissect/hypervisor/disk/c_qcow2.pyi
+198 −124		dissect/hypervisor/disk/qcow2.py
+1 −0		pyproject.toml
+ −		tests/_data/disk/qcow2/backing-chain-1.qcow2.gz
+ −		tests/_data/disk/qcow2/backing-chain-2.qcow2.gz
+ −		tests/_data/disk/qcow2/backing-chain-3.qcow2.gz
+ −		tests/_data/disk/qcow2/basic.qcow2.gz
+ −		tests/_data/disk/qcow2/data-file.bin.gz
+ −		tests/_data/disk/qcow2/data-file.qcow2.gz
+ −		tests/_data/disk/qcow2/snapshot.qcow2.gz
+27 −3		tests/conftest.py
+10 −10		tests/disk/test_hdd.py
+147 −0		tests/disk/test_qcow2.py
+6 −6		dissect/qnxfs/qnx4.py
+6 −6		dissect/qnxfs/qnx6.py
+1 −1		tests/_docs/Makefile
+5 −0		tests/_docs/conf.py