Todd Mummert
2013-Jun-03 22:19 UTC
[Libguestfs] Problem inspecting Windows images with large registry hives
Encountered the following problem and would like to know if this is a known
issue, whether there's a fix, or workaround:
Using libguestfs and the python bindings to inspect VMs. Fairly
successfully for the most part, but had one Windows image today that fails
in the following manner.
File "/usr/lib/python2.7/site-packages/guestfs.py", line 910, in
inspect_os
r = libguestfsmod.inspect_os (self._o)
RuntimeError: size of /Windows/System32/config/SOFTWARE is unreasonably
large (141819904 bytes)
Reproduced it with guestfish:
[root@cagedbird images]# guestfish --ro -i -a
windows-2008-r2-base+updates-20120518.img
libguestfs: error: size of /Windows/System32/config/SOFTWARE is
unreasonably large (141819904 bytes)
[root@cagedbird images]# guestfish --version
guestfish 1.18.12fedora=17,release=3.fc17
Unfortunately, because of this bounds check, preliminary inspection fails.
Bug, or as designed?
Thanks,
Todd
Richard W.M. Jones
2013-Jun-04 07:51 UTC
Re: [Libguestfs] Problem inspecting Windows images with large registry hives
On Mon, Jun 03, 2013 at 06:19:01PM -0400, Todd Mummert wrote:> Encountered the following problem and would like to know if this is a known > issue, whether there's a fix, or workaround: > > Using libguestfs and the python bindings to inspect VMs. Fairly > successfully for the most part, but had one Windows image today that fails > in the following manner. > > File "/usr/lib/python2.7/site-packages/guestfs.py", line 910, in > inspect_os > r = libguestfsmod.inspect_os (self._o) > RuntimeError: size of /Windows/System32/config/SOFTWARE is unreasonably > large (141819904 bytes) > > Reproduced it with guestfish: > > [root@cagedbird images]# guestfish --ro -i -a > windows-2008-r2-base+updates-20120518.img > libguestfs: error: size of /Windows/System32/config/SOFTWARE is > unreasonably large (141819904 bytes) > [root@cagedbird images]# guestfish --version > guestfish 1.18.12fedora=17,release=3.fc17 > > > Unfortunately, because of this bounds check, preliminary inspection fails. > Bug, or as designed?This is fixed in libguestfs >= 1.20 (Fedora 18+) so that inspection can now handle unlimited size registry hives. http://libguestfs.org/guestfs-release-notes.1.html#inspection Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-top is 'top' for virtual machines. Tiny program with many powerful monitoring features, net stats, disk stats, logging, etc. http://people.redhat.com/~rjones/virt-top
Maybe Matching Threads
- ANNOUNCE: hivex - read and write Windows Registry hives - version 1.3.15 released
- Re: [libhivex] Undefined behavior when accessing invalid (too small) registry hives
- [PATCH 0/2] Tool to merge regedit files into Windows Registry hives
- Re: [libhivex] Undefined behavior when accessing invalid (too small) registry hives
- [libhivex] Undefined behavior when accessing invalid (too small) registry hives