[Libguestfs] [PATCH 0/7] hivex + hivexml: Add byte runs for nodes and values
Alex Nelson
ajnelson at cs.ucsc.edu
Fri Sep 2 16:24:11 UTC 2011
Hi all,
The image repository problem is resolved. The particular disk image I referenced is here:
https://domex.nps.edu/corp/scenarios/2009-m57/drives/charlie-2009-12-11.aff
via https://domex.nps.edu/corp/scenarios/2009-m57/drives/
via the link below.
Two hives on which hivexml fails are attached. If it is better to attach them to a bug report, please let me know.
To be clear, this appears to be an error in hivex that my change set reveals, not creates.
--Alex
-------------- next part --------------
A non-text attachment was scrubbed...
Name: SECURITY
Type: application/octet-stream
Size: 262144 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libguestfs/attachments/20110902/5a981750/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: software
Type: application/octet-stream
Size: 262144 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libguestfs/attachments/20110902/5a981750/attachment-0001.obj>
-------------- next part --------------
On Sep 1, 2011, at 18:21 , Alex Nelson wrote:
> Hi all,
>
> I apologize, the disk images' links appear to be broken at the moment. I have informed the maintainer, and he has acknowledged the problem and will fix that soon.
>
> --Alex
>
>
> On Sep 1, 2011, at 18:17 , Alex Nelson wrote:
>
>> This changeset adds byte run reporters for node and value metadata in the
>> hivexml program. This location reporting required several new ABI
>> functions, which required new ABI return types. One benefit to the byte
>> run functions is additional sanity checks, which have revealed new data
>> or parsing errors when run on M57 patents images. An example error:
>> Image: Charlie, 2009-12-11, available at <http://digitalcorpora.org/corpora/scenarios/m57-patents-scenario>.
>> hive: C:/WINDOWS/system32/config/SECURITY
>> Address 12624 is processed as a value, but it has a node signature.
>>
>> Alex Nelson (7):
>> generator: Add new return type to ABI: RSize
>> hivex: Split value_key function into value_key and value_key_len
>> generator: Add new return types to ABI: RLenNode and RLenValue
>> hivex: Add metadata length functions for nodes and values
>> hivex: Add offset-&-length function for long value data
>> hivexml: Report attributes in values instead of text.
>> hivexml: Add byte run reporting functions
>>
>> generator/generator.ml | 169 +++++++++++++++++++++++++++++++++++++++++++++++-
>> lib/hivex.c | 115 +++++++++++++++++++++++++++++---
>> xml/hivexml.c | 127 ++++++++++++++++++++++++++++++++----
>> 3 files changed, 385 insertions(+), 26 deletions(-)
>>
>> --
>> 1.7.6
>>
>>
>>
>> _______________________________________________
>> Libguestfs mailing list
>> Libguestfs at redhat.com
>> https://www.redhat.com/mailman/listinfo/libguestfs
>
More information about the Libguestfs
mailing list