pytsk/libtsk does not correctly/fully handle HFS+/HFSX

[joachimmetz]

• HFS+: istat replaces U+2400 with ^ (likely because it assumes it is U+0) sleuthkit/sleuthkit#2057 The behavior of how U+2400 is handled for HFS+ by native Mac OS and pytsk/libtsk differs.
• HFS+/HFSX: istat errors with misleading/incorrect message for kHFSPlusAttrForkData attribute record sleuthkit/sleuthkit#2494 kHFSPlusAttrForkData attribute record is not handled and instead assumes corruption
• HFS+/HFSX: istat yields "Error reading file data fork" for block or character device and FIFO file entry sleuthkit/sleuthkit#2720 certain types of file entry types are not handled correctly