reverse-engineering - Binwalk - 压缩数据已损坏

Question

root@kali:~/ROUTER# binwalk new-firmware.bin 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
84            0x54            uImage header, header size: 64 bytes, header CRC: 0xE52A7F50, created: 2012-02-10 07:27:12, image size: 819799 bytes, Data Address: 0x80002000, Entry Point: 0x801AC9F0, data CRC: 0x6A10D412, OS: Linux, CPU: MIPS, image type: OS Kernel Image, compression type: lzma, image name: "Linux Kernel Image"
148           0x94            LZMA compressed data, properties: 0x5D, dictionary size: 8388608 bytes, uncompressed size: 2386252 bytes
917588        0xE0054         Squashfs filesystem, little endian, version 4.0, compression:lzma, size: 2588426 bytes, 375 inodes, blocksize: 16384 bytes, created: 2016-02-05 02:05:56

root@kali:~/ROUTER# dd if=new-firmware.bin of=uboot.lzma skip=148 bs=1
3735488+0 records in
3735488+0 records out
3735488 bytes (3.7 MB, 3.6 MiB) copied, 4.16712 s, 896 kB/s

root@kali:~/ROUTER# dd if=new-firmware.bin of=kernel.squash skip=917588 bs=1
2818048+0 records in
2818048+0 records out
2818048 bytes (2.8 MB, 2.7 MiB) copied, 3.46517 s, 813 kB/s

到目前为止，所有看起来都有效，但后来我尝试了以下操作:

root@kali:~/ROUTER# lzma -d uboot.lzma 
lzma: uboot.lzma: Compressed data is corrupt

root@kali:~/ROUTER# unsquashfs kernel.squash 
Parallel unsquashfs: Using 4 processors
lzma uncompress failed with error code 0
read_block: failed to read block @0x277af0
read_fragment_table: failed to read fragment table index
FATAL ERROR:failed to read fragment table

知道为什么会发生吗？正如提示所说，我在 Kali Linux 上。也得到这个

jj@ubuntu:~/Firmware$ binwalk -e new-firmware.bin 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
84            0x54            uImage header, header size: 64 bytes, header CRC: 0xE52A7F50, created: 2012-02-10 07:27:12, image size: 819799 bytes, Data Address: 0x80002000, Entry Point: 0x801AC9F0, data CRC: 0x6A10D412, OS: Linux, CPU: MIPS, image type: OS Kernel Image, compression type: lzma, image name: "Linux Kernel Image"
148           0x94            LZMA compressed data, properties: 0x5D, dictionary size: 8388608 bytes, uncompressed size: 2386252 bytes

WARNING: Extractor.execute failed to run external extractor 'sasquatch -p 1 -le -d '%%squashfs-root%%' '%e'': [Errno 2] No such file or directory

WARNING: Extractor.execute failed to run external extractor 'sasquatch -p 1 -be -d '%%squashfs-root%%' '%e'': [Errno 2] No such file or directory
917588        0xE0054         Squashfs filesystem, little endian, version 4.0, compression:lzma, size: 2588426 bytes, 375 inodes, blocksize: 16384 bytes, created: 2016-02-05 02:05:56

Answer 1

尝试

lzma -d < uboot.lzma > uboot

您发现的错误是由于 LZMA Utils 已被 XV Utils 取代，XV Utils 不会忽略尾随垃圾。如果您将它用作流(就像我给您的)，您最终仍然会收到损坏的错误消息，但您的文件会好起来的。

Source (搜索“corrupt”，你会发现其他相关评论)