Todd Mummert
2013-Jun-03 22:19 UTC
[Libguestfs] Problem inspecting Windows images with large registry hives
Encountered the following problem and would like to know if this is a known issue, whether there's a fix, or workaround: Using libguestfs and the python bindings to inspect VMs. Fairly successfully for the most part, but had one Windows image today that fails in the following manner. File "/usr/lib/python2.7/site-packages/guestfs.py", line 910, in inspect_os r = libguestfsmod.inspect_os (self._o) RuntimeError: size of /Windows/System32/config/SOFTWARE is unreasonably large (141819904 bytes) Reproduced it with guestfish: [root@cagedbird images]# guestfish --ro -i -a windows-2008-r2-base+updates-20120518.img libguestfs: error: size of /Windows/System32/config/SOFTWARE is unreasonably large (141819904 bytes) [root@cagedbird images]# guestfish --version guestfish 1.18.12fedora=17,release=3.fc17 Unfortunately, because of this bounds check, preliminary inspection fails. Bug, or as designed? Thanks, Todd
Richard W.M. Jones
2013-Jun-04 07:51 UTC
Re: [Libguestfs] Problem inspecting Windows images with large registry hives
On Mon, Jun 03, 2013 at 06:19:01PM -0400, Todd Mummert wrote:> Encountered the following problem and would like to know if this is a known > issue, whether there's a fix, or workaround: > > Using libguestfs and the python bindings to inspect VMs. Fairly > successfully for the most part, but had one Windows image today that fails > in the following manner. > > File "/usr/lib/python2.7/site-packages/guestfs.py", line 910, in > inspect_os > r = libguestfsmod.inspect_os (self._o) > RuntimeError: size of /Windows/System32/config/SOFTWARE is unreasonably > large (141819904 bytes) > > Reproduced it with guestfish: > > [root@cagedbird images]# guestfish --ro -i -a > windows-2008-r2-base+updates-20120518.img > libguestfs: error: size of /Windows/System32/config/SOFTWARE is > unreasonably large (141819904 bytes) > [root@cagedbird images]# guestfish --version > guestfish 1.18.12fedora=17,release=3.fc17 > > > Unfortunately, because of this bounds check, preliminary inspection fails. > Bug, or as designed?This is fixed in libguestfs >= 1.20 (Fedora 18+) so that inspection can now handle unlimited size registry hives. http://libguestfs.org/guestfs-release-notes.1.html#inspection Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-top is 'top' for virtual machines. Tiny program with many powerful monitoring features, net stats, disk stats, logging, etc. http://people.redhat.com/~rjones/virt-top
Possibly Parallel Threads
- ANNOUNCE: hivex - read and write Windows Registry hives - version 1.3.15 released
- Re: [libhivex] Undefined behavior when accessing invalid (too small) registry hives
- [PATCH 0/2] Tool to merge regedit files into Windows Registry hives
- Re: [libhivex] Undefined behavior when accessing invalid (too small) registry hives
- [libhivex] Undefined behavior when accessing invalid (too small) registry hives