From: Richard Jones Date: Wed, 3 Feb 2010 17:45:20 +0000 (+0000) Subject: Document that this flag is clear for default keys. X-Git-Tag: 1.1.0~38 X-Git-Url: http://git.annexia.org/?a=commitdiff_plain;h=6727622780d60baa2c50850c4e9ba8ad8b84dfa0;p=hivex.git Document that this flag is clear for default keys. --- diff --git a/hivex/hivex.c b/hivex/hivex.c index 4cf3ad9..e0118af 100644 --- a/hivex/hivex.c +++ b/hivex/hivex.c @@ -218,7 +218,8 @@ struct ntreg_vk_record { uint32_t data_type; /* type of the data */ uint16_t flags; /* bit 0 set => key name ASCII, bit 0 clr => key name UTF-16. - Only seen ASCII here in the wild. */ + Only seen ASCII here in the wild. + NB: this is CLEAR for default key. */ uint16_t unknown2; char name[1]; /* key name follows here */ } __attribute__((__packed__));