# Autopsy 4.22.1 SIGSEGV attempting to ingest bitlocker image

**URL:** <https://sleuthkit.discourse.group/t/autopsy-4-22-1-sigsegv-attempting-to-ingest-bitlocker-image/5475>\
**Category:** Autopsy Help\
**Created:** [June 6, 2025, 12:45pm UTC](https://sleuthkit.discourse.group/t/autopsy-4-22-1-sigsegv-attempting-to-ingest-bitlocker-image/5475 "2025-06-06T12:45:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tbernhar](https://avatars.discourse-cdn.com/v4/letter/t/ed8c4c/32.png) [@tbernhar](https://sleuthkit.discourse.group/u/tbernhar)\
**Post date:** [June 6, 2025, 12:45pm UTC](https://sleuthkit.discourse.group/t/autopsy-4-22-1-sigsegv-attempting-to-ingest-bitlocker-image/5475/1 "2025-06-06T12:45:21Z")

</div>

Running Autopsy 4.22.1 installed with SNAP on Ubuntu 20.04 (SANS Sift Workstation).  
Ingesting an EWF Full Disk Image (256GB NVME) created with efwacquire.  
Image is from a Windows 11 Enterprise system with BitLocker enabled.  
I do have the BitLocker Key (and entered it when prompted).  
after analyzing the disk for a while fails with the following message:

# 

# A fatal error has been detected by the Java Runtime Environment:

# 

# SIGSEGV (0xb) at pc=0x00007b112408dc1d, pid=83518, tid=83586

# 

# JRE version: OpenJDK Runtime Environment (17.0.14+7) (build 17.0.14+7-Ubuntu-122.04.1)

# Java VM: OpenJDK 64-Bit Server VM (17.0.14+7-Ubuntu-122.04.1, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, linux-amd64)

# Problematic frame:

# C [libc.so.6+0x44c1d] getenv+0xad

# 

# Core dump will be written. Default location: core.83518 (may not exist)

# 

# An error report file with more information is saved as:

# /home/tbernhar/hs\_err\_pid83518.log

[thread 83585 also had an error]

# 

# If you would like to submit a bug report, please visit:

# [Bugs : openjdk-17 package : Ubuntu](https://bugs.launchpad.net/ubuntu/+source/openjdk-17)

# The crash happened outside the Java Virtual Machine in native code.

# See problematic frame for where to report the bug.

# 

/snap/autopsy/4/autopsy/bin/../platform/lib/nbexec: line 434: 83518 Aborted (core dumped) “/snap/autopsy/4/usr/lib/jvm/java-17-openjdk-amd64/bin/java” -Djdk.home=“/snap/autopsy/4/usr/lib/jvm/java-17-openjdk-amd64” -classpath “/snap/autopsy/4/autopsy/platform/lib/boot.jar:/snap/autopsy/4/autopsy/platform/lib/org-openide-modules.jar:/snap/autopsy/4/autopsy/platform/lib/org-openide-util-lookup.jar:/snap/autopsy/4/autopsy/platform/lib/org-openide-util-ui.jar:/snap/autopsy/4/autopsy/platform/lib/org-openide-util.jar” -Dnetbeans.running.environment=gnome -Dnetbeans.dirs=“/snap/autopsy/4/autopsy/autopsy:/snap/autopsy/4/autopsy/CoreTestLibs:/snap/autopsy/4/autopsy/harness:/snap/autopsy/4/autopsy/java:” ‘-Djdk.gtk.version=3’ ‘-Duser.home=/home/tbernhar/snap/autopsy/common’ ‘-Djava.io.tmpdir=/home/tbernhar/snap/autopsy/common/tmp’ ‘-Djna.library.path=/snap/autopsy/4/gnome-platform/usr/lib/x86\_64-linux-gnu:/snap/autopsy/4/usr/local/lib’ -Dnetbeans.home=“/snap/autopsy/4/autopsy/platform” ‘-Xms24m’ ‘-Xmx4G’ ‘-XX:+UseStringDeduplication’ ‘-Dprism.order=sw’ ‘–add-opens=java.base/java.lang=ALL-UNNAMED’ ‘–add-opens=java.base/java.net=ALL-UNNAMED’ ‘–add-opens=java.desktop/javax.swing=ALL-UNNAMED’ ‘–add-opens=javafx.controls/javafx.scene.control.skin=ALL-UNNAMED’ ‘–add-exports=java.desktop/sun.awt=ALL-UNNAMED’ ‘–add-exports=javafx.controls/com.sun.javafx.scene.control.inputmap=ALL-UNNAMED’ ‘–add-exports=javafx.base/com.sun.javafx.event=ALL-UNNAMED’ -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=“/home/tbernhar/snap/autopsy/common/.autopsy/dev/var/log/heapdump.hprof” -Djava.security.manager=allow org.netbeans.Main --cachedir “/home/tbernhar/snap/autopsy/common/.cache/autopsy/dev” --userdir “/home/tbernhar/snap/autopsy/common/.autopsy/dev” “–branding” “autopsy” --nosplash 0\<&0

Initially I tried increasing the Default Xmx from 4GB to 8GB but it had no effect.

Any ideas would be appreciated.

---

<div class="post-metadata">

**Author:** ![Mark\_McKinnon](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/mark_mckinnon/32/42_2.png) [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Post date:** [June 6, 2025, 1:43pm UTC](https://sleuthkit.discourse.group/t/autopsy-4-22-1-sigsegv-attempting-to-ingest-bitlocker-image/5475/2 "2025-06-06T13:43:30Z")

</div>

Bitlocker is only supported when running Autopsy on Windows not Linux.