-
Notifications
You must be signed in to change notification settings - Fork 9
Open
Description
In dissect/hypervisor/disk/c_asif.py
struct asif_meta_header {
uint32 header_signature;
uint32 header_version;
uint32 header_size;
uint64 data_size;
uint64 unk_14;
};
I suspect data_size should be uint32 there, with a uint32 header_flags inserted before. As it currently is, the uint64 is not aligned correctly, which is unlikely to be designed by Apple like this.
Does not make a difference currently as the flags are all zero, but still..
Metadata
Metadata
Assignees
Labels
No labels