search for: 040b1e7

* Richard W.M. Jones: > diff --git a/lib/hivex.c b/lib/hivex.c > index e3c1e05..9351ac5 100644 > --- a/lib/hivex.c > +++ b/lib/hivex.c > @@ -1471,7 +1471,7 @@ hivex_value_value (hive_h *h, hive_value_h value, > if (h->msglvl >= 2) > fprintf (stderr, "hivex_value_value: warning: big data block is not " > "valid

...5 +0200 > Subject: [PATCH] hivex: Add O_BINARY flag to open calls for platforms where > this isn't the default (such as Win32) > > --- > lib/hivex.c | 6 +++--- > 1 file changed, 3 insertions(+), 3 deletions(-) > > diff --git a/lib/hivex.c b/lib/hivex.c > index 040b1e7..86e5959 100644 > --- a/lib/hivex.c > +++ b/lib/hivex.c > @@ -265,9 +265,9 @@ hivex_open (const char *filename, int flags) > goto error; > > #ifdef O_CLOEXEC > - h->fd = open (filename, O_RDONLY | O_CLOEXEC); > + h->fd = open (filename, O_RDONLY | O_CLOEXEC |...

Hi As my cross platform registry editor (FRED available from https://www.pinguin.lu (sorry for advertising but I couldn't resist ;-))) is evolving, I recently added write support to it. While under Linux everything worked nice, the Windblows build didn't. It seems that Windows opens files by default in text mode (O_TEXT) which is a problem. The attached patch adds the O_BINARY flag to

...a 0x28b9b60, data len 115347, block len 16) "EncodedCtl"=hex(3):64,62,08,00,70,8b,8b,02,00,b2,00,00 --- lib/hivex.c | 91 +++++++++++++++++++++++++++++++++++++++++++++++++++---------- 1 file changed, 76 insertions(+), 15 deletions(-) diff --git a/lib/hivex.c b/lib/hivex.c index efc27f8..040b1e7 100644 --- a/lib/hivex.c +++ b/lib/hivex.c @@ -208,6 +208,19 @@ struct ntreg_sk_record { char sec_desc[1]; /* security info follows */ } __attribute__((__packed__)); +struct ntreg_db_record { + int32_t seg_len; /* length (always -ve because used) */ + char id[2];...