Reading get_appleWalletPasses artifact had errors! - 'charmap' codec can't decode byte 0x90 in position 1943: character maps to <undefined> + problem segregating values in report
- Lingua principale
- Python
- Stelle
- 1.2k
- Fork
- 303
- Merge medio
- 4h 32m
- PR unite (30g)
- 216
Descrizione
Hi,
I tried to parse an iTunes backup on Windows, and the appleWalletPasses.py module crashes with this error:
```
Reading get_appleWalletPasses artifact had errors!
Error was 'charmap' codec can't decode byte 0x90 in position 1943: character maps to
Exception Traceback: Traceback (most recent call last):
File "ileapp.py", line 426, in crunch_artifacts
File "C:\Users\DFIR\AppData\Local\Temp\_MEI94322\scripts\artifacts\appleWalletPasses.py", line 37, in get_appleWalletPasses
data = json.load(f)
^^^^^^^^^^^^
File "json\__init__.py", line 293, in load
File "encodings\cp1252.py", line 23, in decode
UnicodeDecodeError: 'charmap' codec can't decode byte 0x90 in position 1943: character maps to
```
I think it is related with the `open` statement in line 36 where it is missing the encoding parameter (`encoding="utf8"` seems working).
Also, there is a problem with segregating values in the HTML report, because I found that values that come from a card related to airline are present in a card related to a sporting goods retailer.
I reviewed the code, and I think that we have a problem when multiple cards are present with the same description. Because instead of creating multiple entries in the left bar in the HTML report, it brings all the content to one entry, leading to a messy situation.
If you need anonymized sample values of anything, let me know!
Thanks!
Guida per i contributori
Nessuna guida per i contributori indicizzata per questo repository
Valutazione
Questa issue non è ancora stata valutata.