[Libguestfs] [PATCH 8/13] hivex: Clarify some more fields.

Jim Meyering jim at meyering.net
Thu Jan 28 14:48:44 UTC 2010


Richard W.M. Jones wrote:

> On Thu, Jan 28, 2010 at 03:26:19PM +0100, Jim Meyering wrote:
>> Richard W.M. Jones wrote:
>> > Subject: [PATCH 08/13] hivex: Clarify some more fields.
>> >
>> > Taken from sentinelchicken.com documentation.
>> > ---
>> >  hivex/hivex.c |    5 +++--
>> >  1 files changed, 3 insertions(+), 2 deletions(-)
>> >
>> > diff --git a/hivex/hivex.c b/hivex/hivex.c
>> > index dfac896..1f5c08b 100644
>> > --- a/hivex/hivex.c
>> > +++ b/hivex/hivex.c
>> > @@ -203,7 +203,8 @@ struct ntreg_nk_record {
>> >    int32_t seg_len;              /* length (always -ve because used) */
>> >    char id[2];                   /* "nk" */
>> >    uint16_t flags;
>> > -  char timestamp[12];
>> > +  char timestamp[8];
>> > +  char unknown0[4];
>>
>> I wonder if it's nanoseconds...
>
> No it's much stranger than that.  Tenths of microseconds since Jan 1 1601.

I meant the "unknown0" member.




More information about the Libguestfs mailing list