Error when converting timestamps in OLE metadata

Issue #12 resolved
Philippe Lagadec
repo owner created an issue

Bug reported by David Nides:

I keep running accross this error:

Traceback (most recent call last):
  File "build\bdist.win32\egg\plaso\lib\", line 188, in ParseFile
    for evt in parsing_object.Parse(filehandle):
  File "build\bdist.win32\egg\plaso\parsers\", line 58, in Parse
    metadata = loader.get_metadata()
  File "C:\Python27\lib\site-packages\", line 1711, in get_metada
  File "C:\Python27\lib\site-packages\", line 507, in parse_prope
  File "C:\Python27\lib\site-packages\", line 1680, in getpropert
    value = _FILETIME_null_date + datetime.timedelta(microseconds=value/10)
OverflowError: date value out of range

I suspect this error is raised when attempting to convert one of the standard props (editing time) which is actually a duration and not a proper date/time.

Comments (3)

  1. Log in to comment