abrignoni / abrignoni/iLEAPP

Reading get_appleWalletPasses artifact had errors! - 'charmap' codec can't decode byte 0x90 in position 1943: character maps to <undefined> + problem segregating values in report

Aperta
#1,095 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
Python
Stelle
1.2k
Fork
303
Merge medio
4h 32m
PR unite (30g)
216

Descrizione

Hi,

I tried to parse an iTunes backup on Windows, and the appleWalletPasses.py module crashes with this error:

```
Reading get_appleWalletPasses artifact had errors!
Error was 'charmap' codec can't decode byte 0x90 in position 1943: character maps to
Exception Traceback: Traceback (most recent call last):
File "ileapp.py", line 426, in crunch_artifacts
File "C:\Users\DFIR\AppData\Local\Temp\_MEI94322\scripts\artifacts\appleWalletPasses.py", line 37, in get_appleWalletPasses
data = json.load(f)
^^^^^^^^^^^^
File "json\__init__.py", line 293, in load
File "encodings\cp1252.py", line 23, in decode
UnicodeDecodeError: 'charmap' codec can't decode byte 0x90 in position 1943: character maps to
```

I think it is related with the `open` statement in line 36 where it is missing the encoding parameter (`encoding="utf8"` seems working).

Also, there is a problem with segregating values in the HTML report, because I found that values that come from a card related to airline are present in a card related to a sporting goods retailer.

I reviewed the code, and I think that we have a problem when multiple cards are present with the same description. Because instead of creating multiple entries in the left bar in the HTML report, it brings all the content to one entry, leading to a messy situation.

If you need anonymized sample values of anything, let me know!

Thanks!

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.