ReFirmLabs / binwalk

Firmware Analysis Tool

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Binwalk stuck when extracting .xz archive

ManuelNeuer opened this issue · comments

Binwalk gets stuck, when I try to extract files from an firmware image. The firmware image used is based on the Raspberry Pi OS Lite (64-bit), which has been booted, and then being extracted from the boot medium using the "dd" command. This image has a size of 2.5 GB.

The binwalk command used is : binwalk -Mer /home/user/image.img

The last output displayed is:

2023324728 0x78997C38 Intel x86 or x64 microcode, sig 0x001206b4, pf_mask 0x314194c, 194C-03-14, size 9736
2023326696 0x789983E8 Intel x86 or x64 microcode, sig 0x0011f070, pf_mask 0x3141e20, 1E20-03-14, rev 0x319a4b, size 9736
2023507300 0x789C4564 Unix path: /var/lib/dpkg/status
2023507346 0x789C4592 LZMA compressed data, properties: 0x65, dictionary size: 50331648 bytes, uncompressed size: 2003791360 bytes
2023752324 0x78A00284 xz compressed data

In my files i can see that also the file "78A01E00.xz" got created but even manually extracting did not work. All .xz archives before could be extracted (both automatically by binwalk and manually). I cannot append the firmware image to this issue as the ".img" file type is not allowed for upload.

The python version installed in this system is 3.11.3
The binwalk version used is 2.3.3
Binwalk was installed by using "pip install binwalk @ https://github.com/ReFirmLabs/binwalk/archive/refs/heads/master.zip" , which deploys version 2.3.3

Additional question: Is there a way for binwalk to skip extraction of one specific file at a specific offset?

Information regarding the base of the firmware image:
Raspberry Pi OS Lite

Release date: May 3rd 2023
System: 64-bit
Kernel version: 6.1
Debian version: 11 (bullseye)
Size: 308MB

Show SHA256 file integrity hash:bf982e56b0374712d93e185780d121e3f5c3d5e33052a95f72f9aed468d58fa7