Displaying 5 results from an estimated 5 matches for "blocklist_offset".
2013 Jun 23
3
[PATCH] Add read support for "big data" blocks to hivex
...ntreg_sk_record {
char sec_desc[1]; /* security info follows */
} __attribute__((__packed__));
+struct ntreg_db_record {
+ int32_t seg_len; /* length (always -ve because used) */
+ char id[2]; /* "db" */
+ uint16_t nr_blocks;
+ uint32_t blocklist_offset;
+ uint32_t unknown1;
+} __attribute__((__packed__));
+
+struct ntreg_db_block {
+ int32_t seg_len;
+ char data[1];
+} __attribute__((__packed__));
+
static uint32_t
header_checksum (const hive_h *h)
{
@@ -1418,22 +1431,60 @@ hivex_value_value (hive_h *h, hive_value_h value,
* instead....
2013 Jun 25
2
Re: [PATCH] Add read support for "big data" blocks to hivex
...ue (hive_h *h, hive_value_h value,
> if (h->msglvl >= 2)
> fprintf (stderr, "hivex_value_value: warning: big data block is not "
> "valid (db block 0x%zx, block list 0x%zx, data block 0x%zx)\
> - data_offset, blocklist_offset, subblock_offset);
> + data_offset, blocklist_offset, (size_t) subblock_offset);
> }
> int32_t seg_len = block_len(h, subblock_offset, NULL);
> struct ntreg_db_block *subblock =
>
> to make it compile without warnings.
Yeah, so I'll just...
2013 Jun 25
0
Re: [PATCH] Add read support for "big data" blocks to hivex
...1]; /* security info follows */
> } __attribute__((__packed__));
>
> +struct ntreg_db_record {
> + int32_t seg_len; /* length (always -ve because used) */
> + char id[2]; /* "db" */
> + uint16_t nr_blocks;
> + uint32_t blocklist_offset;
> + uint32_t unknown1;
> +} __attribute__((__packed__));
> +
> +struct ntreg_db_block {
> + int32_t seg_len;
> + char data[1];
> +} __attribute__((__packed__));
> +
> static uint32_t
> header_checksum (const hive_h *h)
> {
> @@ -1418,22 +1431,60 @@ hivex_v...
2013 Jun 25
0
[PATCH] Add read support for "big data" blocks to hivex
...ntreg_sk_record {
char sec_desc[1]; /* security info follows */
} __attribute__((__packed__));
+struct ntreg_db_record {
+ int32_t seg_len; /* length (always -ve because used) */
+ char id[2]; /* "db" */
+ uint16_t nr_blocks;
+ uint32_t blocklist_offset;
+ uint32_t unknown1;
+} __attribute__((__packed__));
+
+struct ntreg_db_block {
+ int32_t seg_len;
+ char data[1];
+} __attribute__((__packed__));
+
static uint32_t
header_checksum (const hive_h *h)
{
@@ -1418,22 +1431,70 @@ hivex_value_value (hive_h *h, hive_value_h value,
* instead....
2013 Jul 25
19
[PATCH hivex 00/19] Fix read/write handling of li-records.
This is, hopefully, a full fix for handling of li-records.
See:
https://bugzilla.redhat.com/show_bug.cgi?id=717583
https://bugzilla.redhat.com/show_bug.cgi?id=987463
Rich.