debian/0000755000000000000000000000000012265175603007175 5ustar debian/copyright0000644000000000000000000001113412171761062011124 0ustar Format: http://dep.debian.net/deps/dep5 Upstream-Name: dff Source: http://www.digital-forensic.org/ Files: * Copyright: 2008-2011 ArxSys S.A.S. License: GPL-2.0 Files: debian/* Copyright: 2011 Pierre Chifflier License: GPL-2.0 Files: ui/gui/resources/icons/* Copyright: 2003-2011 Yellowicon Studio and Everaldo Coelho License: LGPL-2.1 Files: cmake/FindPyQt.py cmake/FindLibPython.py cmake/SIPMacros.cmake cmake/PythonMacros.cmake cmake/FindSIP.cmake cmake/FindSIP.py cmake/FindPythonLibrary.cmake Copyright: 2007 Simon Edwards License: BSD Files: cmake/FindPyQt4.cmake Copyright: 2007-2008 Simon Edwards License: BSD Files: cmake/PythonCompile.cmake Copyright: 2007-2008 Simon Edwards License: Public Domain Files: modules/metadata/metaexif/EXIF.py Copyright: 2002-2007 Gene Cash 2007-2008 Ianaré Sévi License: BSD Files: modules/mem/Volatility-1.3_Beta/* Copyright: 2007-2008 Volatile Systems 2007 Komoku, Inc License: GPL-2.0 Files: modules/mem/Volatility-1.3_Beta/forensics/win32/* Copyright: 2007-2008 Volatile Systems 2008 Brendan Dolan-Gavitt License: GPL-2.0 Files: modules/mem/Volatility-1.3_Beta/forensics/win32/crash_addrspace.py Copyright: 2007-2008 Volatile Systems 2005,2006,2007 4tphi Research License: GPL-2.0 Files: modules/mem/Volatility-1.3_Beta/forensics/object2.py Copyright: 2007,2008 Volatile Systems 2005,2006 4tphi Research License: GPL-2.0 Files: modules/mem/Volatility-1.3_Beta/forensics/addrspace.py modules/mem/Volatility-1.3_Beta/forensics/x86.py Copyright: 2007,2008 Volatile Systems 2004,2005,2006 4tphi Research License: GPL-2.0 Files: modules/mem/Volatility-1.3_Beta/forensics/commands.py modules/mem/Volatility-1.3_Beta/memory_plugins/example3.py modules/mem/Volatility-1.3_Beta/memory_plugins/example2.py modules/mem/Volatility-1.3_Beta/memory_plugins/example1.py Copyright: 2008 Volatile Systems License: GPL-2.0 Files: api/include/wstdint.h Copyright: 2006-2008 Alexander Chemeris License: BSD Files: api/magic/py_magic.c api/magic/py_magic.h Copyright: 2003 Brett Funderburg, Deepfile Corp. Austin, TX License: BSD Files: api/magic/magic.h Copyright: 2003 Christos Zoulas License: BSD License: GPL-2.0 This package is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License. . This package is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. . You should have received a copy of the GNU General Public License along with this program. If not, see . On Debian systems, the complete text of the GNU General Public License version 2 can be found in "/usr/share/common-licenses/GPL-2". License: LGPL-2.1 This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. . This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. . You should have received a copy of the GNU Lesser General Public License along with this library; if not, see . On Debian systems, the complete text of the GNU Lesser General Public License version 2 can be found in "/usr/share/common-licenses/LGPL-2". License: BSD Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. Neither the name of the University nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. License: Public Domain No license required for any purpose; the work is not subject to copyright in any jurisdiction. debian/compat0000644000000000000000000000000212171761062010367 0ustar 9 debian/patches/0000755000000000000000000000000012265173236010624 5ustar debian/patches/02-do-not-rebuild-translation-files.patch0000644000000000000000000000121312171761062020335 0ustar Index: dff/dff/ui/gui/i18n/CMakeLists.txt =================================================================== --- dff.orig/dff/ui/gui/i18n/CMakeLists.txt 2013-07-08 13:08:49.000000000 +0200 +++ dff/dff/ui/gui/i18n/CMakeLists.txt 2013-07-08 13:08:57.000000000 +0200 @@ -19,7 +19,7 @@ # Please also take care of dff.pro file ! # Configure step -execute_process(COMMAND ${PYTHON_QT4_LANGUAGE} -verbose "${CMAKE_CURRENT_SOURCE_DIR}/dff.pro") +#execute_process(COMMAND ${PYTHON_QT4_LANGUAGE} -verbose "${CMAKE_CURRENT_SOURCE_DIR}/dff.pro") foreach(LANGUAGE ${DFF_SUPPORTED_LANGUAGES}) set(QM_OUTPUT_FILES ${QM_OUTPUT_FILES} "Dff_${LANGUAGE}.qm") debian/patches/04-fix-swig-detection.patch0000644000000000000000000000121212265173235015572 0ustar Index: dff/CMakeLists.txt =================================================================== --- dff.orig/CMakeLists.txt 2013-07-25 17:27:44.692360502 +0200 +++ dff/CMakeLists.txt 2014-01-13 23:58:43.137066661 +0100 @@ -23,11 +23,9 @@ find_package(SWIG REQUIRED) include(${SWIG_USE_FILE}) -STRING (COMPARE LESS "${SWIG_VERSION}" "2.0.7" SWIGOK) - -if (${SWIGOK}) +if ("${SWIG_VERSION}" VERSION_LESS "2.0.7") MESSAGE(FATAL_ERROR "Need SWIG version >= 2.0.7 (current version is ${SWIG_VERSION})") -endif (${SWIGOK}) +endif ("${SWIG_VERSION}" VERSION_LESS "2.0.7") set(CMAKE_INCLUDE_PATH "${INCLUDEDIR}") set(CMAKE_LIBRARY_PATH "${LIBDIR}") debian/patches/01-fix-pythonpath.patch0000644000000000000000000000101412171761062015035 0ustar Index: dff-1.2.0/dff.py =================================================================== --- dff-1.2.0.orig/dff.py 2011-10-11 14:14:49.000000000 +0200 +++ dff-1.2.0/dff.py 2011-10-11 14:17:51.000000000 +0200 @@ -19,6 +19,11 @@ """ import os, sys, getopt +# ensure dist-packages will be loaded be pyshared on Debian +# else private modules won't be found +from distutils.sysconfig import get_python_lib +sys.path.insert(0, os.path.join(get_python_lib(),"dff")) + if os.name == "posix": try : import dl debian/patches/03-fix-ftbfs-libav9.patch0000644000000000000000000000146112207612070015131 0ustar Index: dff/dff/api/gui/video/video.cpp =================================================================== --- dff.orig/dff/api/gui/video/video.cpp 2013-07-08 13:03:30.372074867 +0200 +++ dff/dff/api/gui/video/video.cpp 2013-08-29 11:28:17.314265471 +0200 @@ -124,7 +124,7 @@ this->_clear(); throw std::string("can't open input stream"); } - if (av_find_stream_info(this->_formatContext) < 0) + if (avformat_find_stream_info(this->_formatContext, NULL) < 0) { this->_clear(); throw std::string("can't find video info"); @@ -419,7 +419,7 @@ } this->_codecContext->workaround_bugs = 1; - if (avcodec_open(this->_codecContext, this->_codec) < 0) + if (avcodec_open2(this->_codecContext, this->_codec, NULL) < 0) { this->_clear(); throw std::string("Could not open video"); debian/patches/series0000644000000000000000000000014012265173235012033 0ustar 02-do-not-rebuild-translation-files.patch 03-fix-ftbfs-libav9.patch 04-fix-swig-detection.patch debian/control0000644000000000000000000000317312265174377010613 0ustar Source: dff Section: admin Priority: optional Maintainer: Pierre Chifflier Build-Depends: debhelper (>= 9.0), cmake, python-all-dev (>= 2.6.6-3~), python-qt4, pyqt4-dev-tools, qt4-dev-tools, qt4-linguist-tools, python-magic, swig (>= 2.0.7), libfuse-dev, libmagic-dev, libicu-dev, libfuse-dev, libavformat-dev, libavdevice-dev, libavutil-dev, libswscale-dev, libpff-dev, libbfio-dev, libafflib-dev, libewf-dev, libtre-dev, flex, bison X-Python-Version: >= 2.7 Standards-Version: 3.9.5 Homepage: http://www.digital-forensic.org/ #Vcs-Git: git://git.debian.org/collab-maint/dff.git #Vcs-Browser: http://git.debian.org/?p=collab-maint/dff.git;a=summary Package: dff Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends}, ${python:Depends}, python-qt4, python-magic, python-dbus Recommends: libfuse2, libqt4-sql-sqlite, hal, dbus, python-qt4-phonon Description: Powerful, efficient and modular digital forensic framework DFF is a powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc. . The modules allows you to examine the layout of disk images, devices and other media, to identify partitions, search for files using name, attributes, files magic etc. Files can also be analyzed or extracted using file analysis modules. . The source code is written in C++ and Python, allowing performances and great extensibility, and provides both graphical and command line interface. debian/rules0000755000000000000000000000353312171762066010262 0ustar #!/usr/bin/make -f # -*- makefile -*- # debian/rules file for dff # Written by Pierre Chifflier # for DFF (Digital Forensic Framework) # . # This file was originally written by Joey Hess and Craig Small. # As a special exception, when this file is copied by dh-make into a # dh-make output file, you may use that output file without restriction. # This special exception was added by Craig Small in version 0.37 of dh-make. # Uncomment this to turn on verbose mode. #export DH_VERBOSE=1 DEB_CMAKE_EXTRA_FLAGS = "-DINSTALL=ON" DEFAULTPY=$(shell pyversions -v -d) PYVERSIONS=$(shell pyversions -v -r) ALLPY=$(PYVERSIONS) # disable the tests override_dh_auto_test: override_dh_installdocs: dh_installdocs -XLICENSE rm -rf debian/dff/usr/share/doc/dff-1.2.0 override_dh_auto_configure-%: mkdir build-$* set -e -x; cd build-$* ; cmake .. -DCMAKE_INSTALL_PREFIX=/usr -DCMAKE_VERBOSE_MAKEFILE=ON $(DEB_CMAKE_EXTRA_FLAGS) -DPYTHON_EXECUTABLE=/usr/bin/python$* -DPYTHON_LIBRARY=/usr/lib/${DEB_HOST_MULTIARCH}/libpython$*.so override_dh_auto_configure: $(ALLPY:%=override_dh_auto_configure-%) override_dh_auto_build-$(DEFAULTPY): dh_auto_build -B build-$(DEFAULTPY) #make --no-print-directory -C build-$(DEFAULTPY) manual-html #rm -rf build-$(DEFAULTPY)/docs/manual/html/.doctrees override_dh_auto_build-%: dh_auto_build -B build-$* override_dh_auto_build: $(ALLPY:%=override_dh_auto_build-%) override_dh_auto_install-%: dh_auto_install -B build-$* override_dh_auto_install: $(ALLPY:%=override_dh_auto_install-%) install -m755 -o root -g root dff.py debian/dff/usr/bin/dff; \ sed -i -e 's,$${PYTHON_BIN_PATH},/usr/bin,' debian/dff/usr/bin/dff chmod a-x debian/dff/usr/share/pixmaps/dff.* override_dh_auto_clean: rm -rf build-* rm -f dff/api/filters/parser.cpp dff/api/filters/parser.hpp dff/api/filters/parser.output %: dh $@ --with=python2 debian/changelog0000644000000000000000000000226712265175270011056 0ustar dff (1.3.0+dfsg.1-4) unstable; urgency=high * Fix broken swig detection (Closes: #731743) Urgency high, fix an RC bug * Bump Standards Version to 3.9.5 -- Pierre Chifflier Tue, 14 Jan 2014 09:51:19 +0100 dff (1.3.0+dfsg.1-3) unstable; urgency=low * Fix FTBFS with newer libav (Closes: #720727). Thanks to Moritz Muehlenhoff for the patch. -- Pierre Chifflier Thu, 29 Aug 2013 11:39:33 +0200 dff (1.3.0+dfsg.1-2) unstable; urgency=low * Move python-dbus to Depends (Closes: #718935) -- Pierre Chifflier Fri, 16 Aug 2013 14:31:07 +0200 dff (1.3.0+dfsg.1-1) unstable; urgency=low * Imported Upstream version 1.3.0 - Upstream fixed the PyQT checks (Closes: #702716) * Switch to DH 9: enable all hardening flags, and enable multiarch * Fix detection of PYTHON_LIBRARY (Closes: #713521) * Add note about hal and dbus (Closes: #697672) * Reword description (Closes: #647997) -- Pierre Chifflier Thu, 18 Jul 2013 14:35:51 +0200 dff (1.2.0+dfsg.1-1) unstable; urgency=low * Initial release (Closes: #644928) -- Pierre Chifflier Mon, 17 Oct 2011 23:38:08 +0200 debian/menu0000644000000000000000000000022012171761062010052 0ustar ?package(dff):needs="X11" section="Applications/System/Security"\ title="DFF" command="/usr/bin/dff -g" \ icon="/usr/share/pixmaps/dff.xpm" debian/README.Debian0000644000000000000000000000035012171761062011230 0ustar DFF for Debian ============== To analyse local devices (besides disk image files), dff needs the following packages: hal, dbus, python-dbus. Those packages are only recommended, but you need to install them to enable this feature. debian/README.source0000644000000000000000000000071712171761062011355 0ustar DFF for Debian -------------- The following files have been removed from the original archive to comply with the Debian policy. Reason: does not provide source dff-1.2.0/api/magic/magic1.dll dff-1.2.0/api/magic/magic1.lib dff-1.2.0/api/magic/regex2.dll dff-1.2.0/api/magic/zlib1.dll Reason: GPLv3, incompatible with package (GPLv2) dff-1.2.0/api/filter/lexer.cpp dff-1.2.0/api/filter/lexer.hpp dff-1.2.0/api/filter/parser.cpp dff-1.2.0/api/filter/parser.hpp debian/dff.manpages0000644000000000000000000000001612171761062011442 0ustar doc/man/dff.1 debian/docs0000644000000000000000000000002712171761062010043 0ustar README CHANGES.current debian/dff.dirs0000644000000000000000000000001012171761062010602 0ustar usr/bin debian/source/0000755000000000000000000000000012171761062010471 5ustar debian/source/format0000644000000000000000000000001412171761062011677 0ustar 3.0 (quilt)