--- tsk/img/ewf.c.orig 2014-01-27 11:27:03.000000000 +0800 +++ tsk/img/ewf.c 2017-08-01 17:02:28.556100549 +0800 @@ -66,7 +66,7 @@ tsk_take_lock(&(ewf_info->read_lock)); #if defined( HAVE_LIBEWF_V2_API ) - cnt = libewf_handle_read_random(ewf_info->handle, + cnt = libewf_handle_read_buffer_at_offset(ewf_info->handle, buf, len, offset, &ewf_error); if (cnt < 0) { char *errmsg = NULL;