search for: endblock

Hello Richard As discussed in the IRC channel, when merging a moderately large reg file (~35MB) to a hiv file (~118 MB); hivex generates a huge hiv file (~580 MB). These changes address that by creating a list of unallocated blocks and reassigning unused blocks. I used https://github.com/msuhanov/regf/blob/master/Windows%20registry%20file%20format%20specification.md as a reference for the

...fprintf (stderr, "allocate_block: refusing large allocation (%zu)," + " returning ERANGE\n", seg_len); errno = ERANGE; return 0; } @@ -1917,8 +1955,8 @@ allocate_block (hive_h *h, size_t seg_len, const char id[2]) ssize_t rem = h->endpages - h->endblocks; if (rem > 0) { if (h->msglvl >= 2) - fprintf (stderr, "allocate_block: marking remainder of page free starting at 0x%zx, size %zd\n", - h->endblocks, rem); + fprintf (stderr, "allocate_block: marking remainder of page free" +...

...Fields from the header, extracted from little-endianness hell. */ + size_t rootoffs; /* Root key offset (always an nk-block). */ + size_t endpages; /* Offset of end of pages. */ + char *last_modified; /* mtime of base block. */ + + /* For writing. */ + size_t endblocks; /* Offset to next block allocation (0 + if not allocated anything yet). */ +}; + typedef struct hive_h hive_h; /* Nodes and values. */ @@ -761,7 +801,7 @@ typedef struct hive_set_value hive_set_value; * languages make it much simpler to iterate...

Dear R-list, I have a partly comma separated partly underscore separated string that I am trying to parse into R. Furthermore I have a bunch of them, and they are quite long. I have now spent most of my Sunday trying to figure this out and thought I would try the list to see if someone here would be able to get me started. My data structure looks like this, (in a example.txt file) Subject

This is, hopefully, a full fix for handling of li-records. See: https://bugzilla.redhat.com/show_bug.cgi?id=717583 https://bugzilla.redhat.com/show_bug.cgi?id=987463 Rich.

...Fields from the header, extracted from little-endianness hell. */ size_t rootoffs; /* Root key offset (always an nk-block). */ size_t endpages; /* Offset of end of pages. */ + int64_t last_modified; /* mtime of base block. */ /* For writing. */ size_t endblocks; /* Offset to next block allocation (0 @@ -104,7 +105,7 @@ struct ntreg_header { char magic[4]; /* "regf" */ uint32_t sequence1; uint32_t sequence2; - char last_modified[8]; + int64_t last_modified; uint32_t major_ver; /* 1 */ uint32_...

...2758,timeout=300,minproto=5,maxproto=5,indirect 00 -hosts /net autofsrw,fd=11,pgrp=2758,timeout=300,minproto=5,maxproto=5,indirect 00 fdisk -l Disk /dev/sda: 500.1 GB, 500107862016bytes 255 heads, 63 sectors/track, 60801 cylinders Units =cylinders of 16065 * 512 = 8225280 bytes Device Boot Start EndBlocks Id System /dev/sda1 * 1 13 104391 83 Linux /dev/sda2 1460801 488279610 8e Linux LVM Disk /dev/sdb: 500.1 GB,500107862016 bytes 255 heads, 63 sectors/track, 60801cylinders Units = cylinders of 16065 * 512 = 8225280 bytes DeviceBoot Start End Blocks Id System /dev/sdb1 * 1 60801 488384001 8eLinux...

...2758,timeout=300,minproto=5,maxproto=5,indirect 00 -hosts /net autofsrw,fd=11,pgrp=2758,timeout=300,minproto=5,maxproto=5,indirect 00 fdisk -l Disk /dev/sda: 500.1 GB, 500107862016bytes 255 heads, 63 sectors/track, 60801 cylinders Units =cylinders of 16065 * 512 = 8225280 bytes Device Boot Start EndBlocks Id System /dev/sda1 * 1 13 104391 83 Linux /dev/sda2 1460801 488279610 8e Linux LVM Disk /dev/sdb: 500.1 GB,500107862016 bytes 255 heads, 63 sectors/track, 60801cylinders Units = cylinders of 16065 * 512 = 8225280 bytes DeviceBoot Start End Blocks Id System /dev/sdb1 * 1 60801 488384001 8eLinux...

...Fields from the header, extracted from little-endianness hell. */ size_t rootoffs; /* Root key offset (always an nk-block). */ size_t endpages; /* Offset of end of pages. */ + char *last_modified; /* mtime of base block. */ /* For writing. */ size_t endblocks; /* Offset to next block allocation (0 @@ -104,7 +106,7 @@ struct ntreg_header { char magic[4]; /* "regf" */ uint32_t sequence1; uint32_t sequence2; - char last_modified[8]; + uint64_t last_modified; uint32_t major_ver; /* 1 */ uint32...

On Tue, Apr 4, 2017 at 12:36 PM, Duncan P. N. Exon Smith < dexonsmith at apple.com> wrote: > > On 2017-Apr-04, at 12:12, Peter Collingbourne <peter at pcc.me.uk> wrote: > > On Mon, Apr 3, 2017 at 8:13 PM, Mehdi Amini <mehdi.amini at apple.com> wrote: > >> >> On Apr 3, 2017, at 7:08 PM, Peter Collingbourne <peter at pcc.me.uk> wrote: >>

--- hivex/hivexsh.pod | 9 ++++++++- 1 files changed, 8 insertions(+), 1 deletions(-) diff --git a/hivex/hivexsh.pod b/hivex/hivexsh.pod index 277e3ae..9336798 100644 --- a/hivex/hivexsh.pod +++ b/hivex/hivexsh.pod @@ -100,7 +100,14 @@ or even: Path elements (node names) are matched case insensitively, and characters like space, C<*>, and C<?> have I<no> special