Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

P61 unblob delivers correct filesystem, but is not used #392

Closed
jblu42 opened this issue Nov 14, 2022 · 4 comments · Fixed by #421
Closed

P61 unblob delivers correct filesystem, but is not used #392

jblu42 opened this issue Nov 14, 2022 · 4 comments · Fixed by #421
Assignees
Labels
enhancement New feature or request Extractor (Pxx) some extractor thing (Pxx modules) question Further information is requested

Comments

@jblu42
Copy link
Contributor

jblu42 commented Nov 14, 2022

I am tried to analyse an Android QFIL file, which contains one partition of the Android system. The binwalk extractor does not deliver a usable output or extraction of the filesystem, but I was happy to see that the p61_ublob eval actually could extract the filesystem correctly. Problem is, that in the continued analysis steps, the results from the binwalk extractor are used and not the filesystem in the p16 directory.

Any ideas how to fix this?

(Probably Android is out of scope, but due to its similarities with Linux it does deliver quite a good output)

@m-1-k-3 m-1-k-3 added enhancement New feature or request question Further information is requested Extractor (Pxx) some extractor thing (Pxx modules) labels Nov 14, 2022
@m-1-k-3
Copy link
Member

m-1-k-3 commented Nov 14, 2022

The unblob module is currently not completely integrated and the results are not further used. It is an evaluation module to see where unblob performs better. Could you provide the firmware for further evaluation? If you need to analyse the results from unblob you can point EMBA in a second run to the p61 directory as temp solution.

@jlucius
Copy link
Contributor

jlucius commented Nov 18, 2022

While working on the rootfs detection, would that not be a fitting idea? Run rootfs detection on the binwalk directory, if no rootfs found, try rootfs detection on unblob directory, if rootfs found use this one, if not found, still use the binwalk directory with RTOS mode.

@m-1-k-3
Copy link
Member

m-1-k-3 commented Nov 18, 2022

In the future we will integrate Unblob better into the deep extraction mode. Then it will automatically detect root filesystems in the unblob extraction.

@m-1-k-3 m-1-k-3 self-assigned this Dec 4, 2022
@m-1-k-3
Copy link
Member

m-1-k-3 commented Dec 4, 2022

last tests are running ...
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request Extractor (Pxx) some extractor thing (Pxx modules) question Further information is requested
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants