UFDR parsing failed with email name

[rafaelcsch]

I have a Google Warrant Return in UFDR format. When I try to process it IPED fail with the error below. I didn't find any configuration to mitigate this error.

java.lang.Exception: Worker-48 Error while processing Google.ufdr/_DecodedData/Email/Email_dd4b1afa-6f6d-45d6-9fb2-22447751464f (nullbytes)
at iped.engine.core.Worker.process(Worker.java:188)
at iped.engine.core.Worker.run(Worker.java:267)
Caused by: java.lang.IllegalArgumentException: DocValuesField "name" is too large, must be <= 32766
at org.apache.lucene.index.SortedDocValuesWriter.addValue(SortedDocValuesWriter.java:77)
at org.apache.lucene.index.IndexingChain.indexDocValue(IndexingChain.java:977)
at org.apache.lucene.index.IndexingChain.processField(IndexingChain.java:758)
at org.apache.lucene.index.IndexingChain.processDocument(IndexingChain.java:620)
at org.apache.lucene.index.DocumentsWriterPerThread.updateDocuments(DocumentsWriterPerThread.java:241)
at org.apache.lucene.index.DocumentsWriter.updateDocuments(DocumentsWriter.java:432)
at org.apache.lucene.index.IndexWriter.updateDocuments(IndexWriter.java:1532)
at org.apache.lucene.index.IndexWriter.addDocuments(IndexWriter.java:1503)
at iped.engine.task.index.IndexTask.process(IndexTask.java:149)...

[wladimirleite]

I had similar issues in the past. As far as I remember, the cause was related to a malformed field in report.xml (inside the UFDR). I had to edit it manually.

[lfcnassif]

Hi @rafaelcsch, could you please share the report.xml file located in the UFDR root folder? Use 7zip to open the UFDR.

[lfcnassif]

Closing as can't reproduce. If you can share the report.xml file, please reopen.