Running Autopsy 4.22.1 installed with SNAP on Ubuntu 20.04 (SANS Sift Workstation).
Ingesting an EWF Full Disk Image (256GB NVME) created with efwacquire.
Image is from a Windows 11 Enterprise system with BitLocker enabled.
I do have the BitLocker Key (and entered it when prompted).
after analyzing the disk for a while fails with the following message:
A fatal error has been detected by the Java Runtime Environment:
SIGSEGV (0xb) at pc=0x00007b112408dc1d, pid=83518, tid=83586
JRE version: OpenJDK Runtime Environment (17.0.14+7) (build 17.0.14+7-Ubuntu-122.04.1)
Java VM: OpenJDK 64-Bit Server VM (17.0.14+7-Ubuntu-122.04.1, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, linux-amd64)
Problematic frame:
C [libc.so.6+0x44c1d] getenv+0xad
Core dump will be written. Default location: core.83518 (may not exist)
An error report file with more information is saved as:
/home/tbernhar/hs_err_pid83518.log
[thread 83585 also had an error]
If you would like to submit a bug report, please visit:
Bugs : openjdk-17 package : Ubuntu
The crash happened outside the Java Virtual Machine in native code.
See problematic frame for where to report the bug.
/snap/autopsy/4/autopsy/bin/../platform/lib/nbexec: line 434: 83518 Aborted (core dumped) “/snap/autopsy/4/usr/lib/jvm/java-17-openjdk-amd64/bin/java” -Djdk.home=“/snap/autopsy/4/usr/lib/jvm/java-17-openjdk-amd64” -classpath “/snap/autopsy/4/autopsy/platform/lib/boot.jar:/snap/autopsy/4/autopsy/platform/lib/org-openide-modules.jar:/snap/autopsy/4/autopsy/platform/lib/org-openide-util-lookup.jar:/snap/autopsy/4/autopsy/platform/lib/org-openide-util-ui.jar:/snap/autopsy/4/autopsy/platform/lib/org-openide-util.jar” -Dnetbeans.running.environment=gnome -Dnetbeans.dirs=“/snap/autopsy/4/autopsy/autopsy:/snap/autopsy/4/autopsy/CoreTestLibs:/snap/autopsy/4/autopsy/harness:/snap/autopsy/4/autopsy/java:” ‘-Djdk.gtk.version=3’ ‘-Duser.home=/home/tbernhar/snap/autopsy/common’ ‘-Djava.io.tmpdir=/home/tbernhar/snap/autopsy/common/tmp’ ‘-Djna.library.path=/snap/autopsy/4/gnome-platform/usr/lib/x86_64-linux-gnu:/snap/autopsy/4/usr/local/lib’ -Dnetbeans.home=“/snap/autopsy/4/autopsy/platform” ‘-Xms24m’ ‘-Xmx4G’ ‘-XX:+UseStringDeduplication’ ‘-Dprism.order=sw’ ‘–add-opens=java.base/java.lang=ALL-UNNAMED’ ‘–add-opens=java.base/java.net=ALL-UNNAMED’ ‘–add-opens=java.desktop/javax.swing=ALL-UNNAMED’ ‘–add-opens=javafx.controls/javafx.scene.control.skin=ALL-UNNAMED’ ‘–add-exports=java.desktop/sun.awt=ALL-UNNAMED’ ‘–add-exports=javafx.controls/com.sun.javafx.scene.control.inputmap=ALL-UNNAMED’ ‘–add-exports=javafx.base/com.sun.javafx.event=ALL-UNNAMED’ -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=“/home/tbernhar/snap/autopsy/common/.autopsy/dev/var/log/heapdump.hprof” -Djava.security.manager=allow org.netbeans.Main --cachedir “/home/tbernhar/snap/autopsy/common/.cache/autopsy/dev” --userdir “/home/tbernhar/snap/autopsy/common/.autopsy/dev” “–branding” “autopsy” --nosplash 0<&0
Initially I tried increasing the Default Xmx from 4GB to 8GB but it had no effect.
Any ideas would be appreciated.