[Libguestfs] [PATCH 0/7] hivex + hivexml: Add byte runs for nodes and values

[Alex Nelson]

Hi all,

The image repository problem is resolved.  The particular disk image I referenced is here:
https://domex.nps.edu/corp/scenarios/2009-m57/drives/charlie-2009-12-11.aff
via https://domex.nps.edu/corp/scenarios/2009-m57/drives/
via the link below.

Two hives on which hivexml fails are attached.  If it is better to attach them to a bug report, please let me know.

To be clear, this appears to be an error in hivex that my change set reveals, not creates.

--Alex

-------------- next part --------------
A non-text attachment was scrubbed...
Name: SECURITY
Type: application/octet-stream
Size: 262144 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libguestfs/attachments/20110902/5a981750/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: software
Type: application/octet-stream
Size: 262144 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libguestfs/attachments/20110902/5a981750/attachment-0001.obj>
-------------- next part --------------



On Sep 1, 2011, at 18:21 , Alex Nelson wrote:

> Hi all,
> 
> I apologize, the disk images' links appear to be broken at the moment.  I have informed the maintainer, and he has acknowledged the problem and will fix that soon.
> 
> --Alex
> 
> 
> On Sep 1, 2011, at 18:17 , Alex Nelson wrote:
> 
>> This changeset adds byte run reporters for node and value metadata in the
>> hivexml program.    This location reporting required several new ABI
>> functions, which required new ABI return types.  One benefit to the byte
>> run functions is additional sanity checks, which have revealed new data
>> or parsing errors when run on M57 patents images.  An example error:
>> Image:  Charlie, 2009-12-11, available at <http://digitalcorpora.org/corpora/scenarios/m57-patents-scenario>.
>> hive:  C:/WINDOWS/system32/config/SECURITY
>> Address 12624 is processed as a value, but it has a node signature.
>> 
>> Alex Nelson (7):
>> generator: Add new return type to ABI: RSize
>> hivex: Split value_key function into value_key and value_key_len
>> generator: Add new return types to ABI: RLenNode and RLenValue
>> hivex: Add metadata length functions for nodes and values
>> hivex: Add offset-&-length function for long value data
>> hivexml: Report attributes in values instead of text.
>> hivexml: Add byte run reporting functions
>> 
>> generator/generator.ml |  169 +++++++++++++++++++++++++++++++++++++++++++++++-
>> lib/hivex.c            |  115 +++++++++++++++++++++++++++++---
>> xml/hivexml.c          |  127 ++++++++++++++++++++++++++++++++----
>> 3 files changed, 385 insertions(+), 26 deletions(-)
>> 
>> -- 
>> 1.7.6
>> 
>> 
>> 
>> _______________________________________________
>> Libguestfs mailing list
>> Libguestfs at redhat.com
>> https://www.redhat.com/mailman/listinfo/libguestfs
>