Displaying 8 results from an estimated 8 matches for "hivex_max_subkeys".
2016 Dec 02
3
increasing HIVEX_MAX_SUBKEYS and HIVEX_MAX_VALUES
...d a maximum of 2393689 subkeys and 74324 values.
I feel a conservative approach would be to increase the limits to approximately 1.5 times the largest observed counts:
• If we decide to go with the values observed from just the 'Microsoft\Windows NT\CurrentVersion' key in our cloud, then HIVEX_MAX_SUBKEYS would become 70000 and HIVEX_MAX_VALUES would become 55000. These are the initial values I was going to base my patch on, since (selfishly) that's all my code cares about, but I figured it makes more sense to account for all regions of the hive.
• If we decide to go with the values from the w...
2016 Dec 03
0
Re: increasing HIVEX_MAX_SUBKEYS and HIVEX_MAX_VALUES
> /* These limits are in place to stop really stupid stuff and/or exploits. */
> -#define HIVEX_MAX_SUBKEYS 25000
> -#define HIVEX_MAX_VALUES 10000
> +#define HIVEX_MAX_SUBKEYS 3600000
> +#define HIVEX_MAX_VALUES 110000
> #define HIVEX_MAX_VALUE_LEN 8000000
> #define HIVEX_MAX_ALLOCATION 1000000
Do you have the alternate patch that just increases the limits to...
2016 Dec 03
1
Re: increasing HIVEX_MAX_SUBKEYS and HIVEX_MAX_VALUES
> Do you have the alternate patch that just increases the limits to 1.5x what you need?
I've attached an updated patch that increases the limits based on the counts observed in the Microsoft\Windows NT\CurrentVersion subkey of the software hive.
> We're building a list of (up to) HIVEX_MAX_SUBKEYS * 4 bytes (not counting intermediate blocks) in the _get_children function. While it's not a massive amount of memory in a modern system, I think if we're going to increase them substantially we should make these limits configurable which makes everyone happy.
Sounds good. I'll start...
2014 Feb 06
3
[PATCH 1/2] hivex: Use correct constant in diagnostic error message
...alue.c
+++ b/lib/value.c
@@ -334,7 +334,7 @@ hivex_value_value (hive_h *h, hive_value_h value,
/* Arbitrarily limit the length that we will read. */
if (len > HIVEX_MAX_VALUE_LEN) {
SET_ERRNO (ERANGE, "data length > HIVEX_MAX_VALUE_LEN (%zu > %d)",
- len, HIVEX_MAX_SUBKEYS);
+ len, HIVEX_MAX_VALUE_LEN);
return NULL;
}
--
1.9.rc1
2011 Apr 13
1
[PATCH hivex] maint: split long lines
...e node name"
+ " is too long (%zu, %zu)\n",
len, seg_len);
errno = EFAULT;
return NULL;
@@ -733,7 +736,8 @@ get_children (hive_h *h, hive_node_h node,
/* Arbitrarily limit the number of subkeys we will ever deal with. */
if (nr_subkeys_in_nk > HIVEX_MAX_SUBKEYS) {
if (h->msglvl >= 2)
- fprintf (stderr, "hivex: get_children: returning ERANGE because nr_subkeys_in_nk > HIVEX_MAX_SUBKEYS (%zu > %d)\n",
+ fprintf (stderr, "hivex: get_children: returning ERANGE because "
+ "nr_subkeys_in_nk > HIVEX_...
2014 Feb 06
0
[PATCH 2/2] hivex: Bump value size limit
...al.h b/lib/hivex-internal.h
index 7f4cc3c..bfd24c8 100644
--- a/lib/hivex-internal.h
+++ b/lib/hivex-internal.h
@@ -321,7 +321,7 @@ extern int _hivex_get_values (hive_h *h, hive_node_h node, hive_value_h **values
/* These limits are in place to stop really stupid stuff and/or exploits. */
#define HIVEX_MAX_SUBKEYS 15000
#define HIVEX_MAX_VALUES 10000
-#define HIVEX_MAX_VALUE_LEN 1000000
+#define HIVEX_MAX_VALUE_LEN 2000000
#define HIVEX_MAX_ALLOCATION 1000000
#endif /* HIVEX_INTERNAL_H_ */
--
1.9.rc1
2013 Jul 25
19
[PATCH hivex 00/19] Fix read/write handling of li-records.
This is, hopefully, a full fix for handling of li-records.
See:
https://bugzilla.redhat.com/show_bug.cgi?id=717583
https://bugzilla.redhat.com/show_bug.cgi?id=987463
Rich.
2010 Feb 05
13
[PATCH 01/14] hivexsh: Document some peculiarities of the "cd" command.
---
hivex/hivexsh.pod | 9 ++++++++-
1 files changed, 8 insertions(+), 1 deletions(-)
diff --git a/hivex/hivexsh.pod b/hivex/hivexsh.pod
index 277e3ae..9336798 100644
--- a/hivex/hivexsh.pod
+++ b/hivex/hivexsh.pod
@@ -100,7 +100,14 @@ or even:
Path elements (node names) are matched case insensitively, and
characters like space, C<*>, and C<?> have I<no> special