Skip to content

Correct the README's claim that split raw sets are supported - #20

Merged
switch-nz merged 1 commit into
mainfrom
readme-split-raw
Sep 17, 2026
Merged

switch-nz merged 1 commit into
mainfrom
readme-split-raw

Conversation

@switch-nz

Copy link
Copy Markdown
Owner

Refs #19.

The README's image formats table said raw/dd images are read "including split raw sets". They aren't:

  • open_image (engine/ewf.py) passes a .001 file to RawImage
  • RawImage opens that one file (segment_paths = [path]) and records no finding
  • so a split set loads as a partial disk, silently

tests/test_ewf.py::test_split_raw_set, an expected failure since #13, confirms it.

Change

  • The table row now reads "single-file images; split raw sets are not yet supported".
  • Not implemented gains a short paragraph saying what actually happens and the workaround (join the segments first). A plain "not supported" would undersell it: the failure is silent, so an examiner needs to know to look.

When split raw support lands, both lines should go and the test's @expectedFailure with them.

README only; no code changes.

🤖 Generated with Claude Code

The image formats table said raw images were read "including split raw
sets". They are not: open_image hands a .001 file to RawImage, which
opens that single file and records no finding, so a split set loads as
a partial disk with nothing to say the rest is missing. The expected-
failure test added in #13 (test_split_raw_set) confirms it.

The table now says split sets are not yet supported, and the Not
implemented section says what actually happens and how to work around
it, since the failure is silent rather than an error.

Refs #19.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@switch-nz
switch-nz merged commit 0b677fc into main Sep 17, 2026
25 checks passed
@switch-nz
switch-nz deleted the readme-split-raw branch September 17, 2026 02:29
switch-nz added a commit to deadp/strata that referenced this pull request Sep 17, 2026
Known issues pointed only at switch-nz#15, which covers crashes and hangs. The
bugs that matter more to an examiner reading release notes are the ones
that return wrong or missing results with no finding, tracked in switch-nz#19:
exFAT timestamps labelled UTC without applying the offset, sparse ext4
files at the wrong offsets, misread ext4 inline data, scrambled deleted
FAT names and misplaced FAT slack, a truncated EWF chunk returned short,
and split raw sets loading as a partial disk. Each is still an expected
failure on main, so each is listed individually rather than behind a
link.

0.1.0 is not tagged yet, so what has merged since this changelog was
written ships in it: the EWF read bounds (switch-nz#14), the exFAT contiguous
run clamp (switch-nz#17) and the parser tests, fuzzing and CodeQL (#13) are
added. Raw/dd is described as single-file and split raw sets move to
Not implemented, matching the README correction in switch-nz#20.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant