Libguestfs - Jun 2011 - Hivex bug? Cannot access Windows 2003 x64 Software\Classes key

I tried both hivex-1.2.5 and hivex-1.2.7, same result. The same software hive
can be loaded using Windows regedit tool, and had no problem to access the
"Classes" key.
The other keys under Software (like Microsoft,  Wow6432Node, etc.) are OK.

Here is the hivexsh output with HIVEX_DEBUG=1 enabled:
=======================================================================================================hivex_open:
successfully read Windows Registry hive file:
  pages:          5779 [sml: 4096, lge: 16384]
  blocks:         461619 [sml: 8, avg: 51, lge: 13752]
  blocks used:    456044
  bytes used:     23608640

Welcome to hivexsh, the hivex interactive shell for examining
Windows Registry binary hive files.

Type: 'help' for help summary
      'quit' to quit the shell

Software\> cd Classes
hivex_node_children: nr_subkeys_in_nk = 13, nr_subkeys_in_lf = 13
Software\Classes> ls
get_children: returning ENOTSUP because ri-record offset does not point to lf/lh
(0x49020)
ls: Operation not supported
Software\Classes>
============================================================================================
-Michael
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://listman.redhat.com/archives/libguestfs/attachments/20110624/487be4c9/attachment.htm>

On Fri, Jun 24, 2011 at 08:15:37PM +0000, Michael Huang
wrote:
> I tried both hivex-1.2.5 and hivex-1.2.7, same result. The same software
hive can be loaded using Windows regedit tool, and had no problem to access the
"Classes" key.
> The other keys under Software (like Microsoft,  Wow6432Node, etc.) are OK.
[...]
> Software\Classes> ls
> get_children: returning ENOTSUP because ri-record offset does not point to
lf/lh (0x49020)
> ls: Operation not supported
It certainly looks like a bug.  Is there any way you could share this
hive with us / just me?

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
virt-top is 'top' for virtual machines.  Tiny program with many
powerful monitoring features, net stats, disk stats, logging, etc.
http://et.redhat.com/~rjones/virt-top