diff -urN sleuthkit-4.5.0.orig/tsk/img/ewf.c sleuthkit-4.5.0/tsk/img/ewf.c --- sleuthkit-4.5.0.orig/tsk/img/ewf.c 2017-10-16 02:27:06.000000000 +0800 +++ sleuthkit-4.5.0/tsk/img/ewf.c 2017-12-01 02:07:15.546871972 +0800 @@ -64,7 +64,7 @@ tsk_take_lock(&(ewf_info->read_lock)); #if defined( HAVE_LIBEWF_V2_API ) - cnt = libewf_handle_read_random(ewf_info->handle, + cnt = libewf_handle_read_buffer_at_offset(ewf_info->handle, buf, len, offset, &ewf_error); if (cnt < 0) { char *errmsg = NULL;