hivex.git
13 years agoVersion 1.2.5. 1.2.5
Richard W.M. Jones [Wed, 13 Apr 2011 14:06:43 +0000 (15:06 +0100)]
Version 1.2.5.

Updated PO files.

13 years agoRemove no longer used internal function utf16_string_len_in_bytes.
Richard W.M. Jones [Wed, 13 Apr 2011 13:04:16 +0000 (14:04 +0100)]
Remove no longer used internal function utf16_string_len_in_bytes.

13 years agohivex_value_multiple_strings: Don't read uninitialized data.
Richard W.M. Jones [Wed, 13 Apr 2011 13:01:03 +0000 (14:01 +0100)]
hivex_value_multiple_strings: Don't read uninitialized data.

If hivex_value_multiple_strings was given a value which had an odd
length or if the data in the value was unterminated,
hivex_value_multiple_strings could read uninitialized data.

Potentially (although very unlikely) this could cause a
non-exploitable segfault in the calling program.

13 years agoHandle odd-length "UTF16" strings.
Richard W.M. Jones [Wed, 13 Apr 2011 13:03:21 +0000 (14:03 +0100)]
Handle odd-length "UTF16" strings.

If the length of the buffer is not even, then this would read a byte
of uninitialized data.  Fix the length check to avoid this.

13 years agoReturn real length of buffer from hivex_value_value.
Richard W.M. Jones [Wed, 13 Apr 2011 12:55:49 +0000 (13:55 +0100)]
Return real length of buffer from hivex_value_value.

In real registries, often the length declared in the header does not
match the length of the block.  In this case hivex_value_value would
only allocate a value with a size which is the shorter of the two
length values, which is correct and safe.

However user code could do:

  buf = hivex_value_value (h, v, &t, &len);
  memcpy (somewhere, buf, len);

which would copy uninitialized data.

If hivex_value_value truncates a value like this, we also need to
return the shorter length to the user as well.

13 years agoReally fix the case where a UTF-16 string contains junk after the string.
Richard W.M. Jones [Wed, 13 Apr 2011 12:54:05 +0000 (13:54 +0100)]
Really fix the case where a UTF-16 string contains junk after the string.

The previous commit b71b88f588f8660935a7d462e97b84aa2d669249 attempted
to fix this, but got the test the wrong way round so the length would
never be shorter.

13 years agoFix use-after-free in hivex_close.
Richard W.M. Jones [Tue, 12 Apr 2011 16:59:47 +0000 (17:59 +0100)]
Fix use-after-free in hivex_close.

Found using valgrind.

13 years agoPull translations from Transifex.
Richard W.M. Jones [Sat, 2 Apr 2011 07:53:01 +0000 (08:53 +0100)]
Pull translations from Transifex.

13 years agodebian: Fix python test script for bash.
Richard W.M. Jones [Fri, 1 Apr 2011 21:46:07 +0000 (22:46 +0100)]
debian: Fix python test script for bash.

13 years agoImport hivex into transifex.
Richard W.M. Jones [Mon, 7 Mar 2011 10:53:52 +0000 (10:53 +0000)]
Import hivex into transifex.

http://www.transifex.net/projects/p/hivex/

13 years agoRefresh documentation.
Richard W.M. Jones [Thu, 23 Dec 2010 19:46:05 +0000 (19:46 +0000)]
Refresh documentation.

13 years agoocaml: Fix segfault in Hivex.value_value binding.
Richard W.M. Jones [Thu, 16 Dec 2010 13:41:59 +0000 (13:41 +0000)]
ocaml: Fix segfault in Hivex.value_value binding.

13 years agoVersion 1.2.4. 1.2.4
Richard W.M. Jones [Thu, 2 Dec 2010 15:29:38 +0000 (15:29 +0000)]
Version 1.2.4.

14 years agoPython bindings.
Richard W.M. Jones [Sun, 28 Nov 2010 11:14:11 +0000 (11:14 +0000)]
Python bindings.

14 years agoVersion 1.2.3. 1.2.3
Richard Jones [Fri, 27 Aug 2010 08:48:34 +0000 (09:48 +0100)]
Version 1.2.3.

14 years agobuild: Don't warn about 'long long'.
Richard Jones [Fri, 27 Aug 2010 07:51:37 +0000 (08:51 +0100)]
build: Don't warn about 'long long'.

We have to allow this, even though it's a GCC extension.

This is a port of libguestfs commit 0c0976496dafda4d172c5a7fc787d6a87d5bce8d.

14 years agoAdd Dutch translations (RHBZ#624455).
Geert Warrink [Fri, 27 Aug 2010 07:49:33 +0000 (08:49 +0100)]
Add Dutch translations (RHBZ#624455).

14 years agoAdd debug output to hivex_close.
Matthew Booth [Fri, 13 Aug 2010 16:44:28 +0000 (17:44 +0100)]
Add debug output to hivex_close.

14 years agoDon't try to process junk after a string value as UTF-16.
Richard Jones [Mon, 12 Jul 2010 14:06:35 +0000 (15:06 +0100)]
Don't try to process junk after a string value as UTF-16.

Thanks to Hilko Bengen for characterizing the issue and
providing an initial version of this patch.

14 years agoCall iconv_close along error path out of function.
Hilko Bengen [Mon, 12 Jul 2010 13:50:31 +0000 (14:50 +0100)]
Call iconv_close along error path out of function.

14 years agoperl: Fix generated XS code for value_dword binding.
Richard Jones [Sun, 11 Jul 2010 22:32:14 +0000 (23:32 +0100)]
perl: Fix generated XS code for value_dword binding.

Thanks to Hilko Bengen for spotting the problem.

14 years agoAdd hivex_set_value API call, and ocaml and perl bindings, and tests.
Conrad Meyer [Thu, 8 Jul 2010 10:12:42 +0000 (11:12 +0100)]
Add hivex_set_value API call, and ocaml and perl bindings, and tests.

14 years agohivex_value_type: Returns -1 on error. Fix documentation.
Richard Jones [Sun, 13 Jun 2010 18:38:09 +0000 (19:38 +0100)]
hivex_value_type: Returns -1 on error.  Fix documentation.

14 years agoInclude a test for regimport of values containing backslash chars.
Richard Jones [Thu, 13 May 2010 10:23:50 +0000 (11:23 +0100)]
Include a test for regimport of values containing backslash chars.

14 years agoregedit: Fix documentation for CurrentControlSet (thanks Yuval Kashtan).
Richard Jones [Fri, 30 Apr 2010 08:47:16 +0000 (09:47 +0100)]
regedit: Fix documentation for CurrentControlSet (thanks Yuval Kashtan).

14 years agoVersion 1.2.2. 1.2.2
Richard Jones [Wed, 28 Apr 2010 14:13:41 +0000 (15:13 +0100)]
Version 1.2.2.

14 years agoregedit: Add implicit nul-termination when importing strings.
Richard Jones [Wed, 28 Apr 2010 13:28:27 +0000 (14:28 +0100)]
regedit: Add implicit nul-termination when importing strings.

When you import a string value like:
  "Foo"="Bar"
using Windows regedit program, implicit nul-termination is added
to the value (not the key), so what is stored in the value would
be something like:
  hex(1):42,00,61,00,72,00,00,00
where two of the trailing zero bytes come from the implicit
terminator.  This corrects the reg_import function so it works
the same way.

14 years agoRemove checks for Test::Pod and Test::Pod::Coverage.
Richard Jones [Tue, 20 Apr 2010 17:45:19 +0000 (18:45 +0100)]
Remove checks for Test::Pod and Test::Pod::Coverage.

Although these modules are optionally used by the Perl tests,
they aren't necessary and won't break the build if they are not
there.  These modules aren't available in RHEL 5.  Therefore
remove these checks.

14 years agoAdd a linker script to limit visibility to exported symbols.
Richard Jones [Sat, 3 Apr 2010 15:06:58 +0000 (16:06 +0100)]
Add a linker script to limit visibility to exported symbols.

14 years agoRemove explicit dependency on ncurses.
TJ [Sat, 3 Apr 2010 09:50:48 +0000 (10:50 +0100)]
Remove explicit dependency on ncurses.

14 years agoSpelling: reencode -> re-encode.
TJ [Sat, 3 Apr 2010 08:23:43 +0000 (09:23 +0100)]
Spelling: reencode -> re-encode.

14 years agoAdd CLEANFILES rules.
TJ [Fri, 2 Apr 2010 15:51:40 +0000 (16:51 +0100)]
Add CLEANFILES rules.

14 years agoNew Russian translation (RHBZ#578347).
Yulia [Thu, 1 Apr 2010 07:30:38 +0000 (08:30 +0100)]
New Russian translation (RHBZ#578347).

14 years agoUpdate PO files. 1.2.1
Richard Jones [Tue, 30 Mar 2010 15:57:31 +0000 (16:57 +0100)]
Update PO files.

14 years agoAdd maintainer rule for updating the website.
Richard Jones [Tue, 30 Mar 2010 15:57:18 +0000 (16:57 +0100)]
Add maintainer rule for updating the website.

14 years agohivexml: Fix path so HTML documentation is generated correctly.
Richard Jones [Tue, 30 Mar 2010 15:57:00 +0000 (16:57 +0100)]
hivexml: Fix path so HTML documentation is generated correctly.

14 years agoPrepare for version 1.2.1.
Richard Jones [Tue, 30 Mar 2010 15:42:50 +0000 (16:42 +0100)]
Prepare for version 1.2.1.

14 years agohivexregedit: Low-level tool for merging and export in regedit format.
Richard Jones [Fri, 26 Mar 2010 11:46:44 +0000 (11:46 +0000)]
hivexregedit: Low-level tool for merging and export in regedit format.

14 years agoWin::Hivex::Regedit module for importing and exporting regedit format files.
Richard Jones [Thu, 25 Mar 2010 12:03:36 +0000 (12:03 +0000)]
Win::Hivex::Regedit module for importing and exporting regedit format files.

14 years agohivexsh: '-f' option takes an argument (found by Marko Myllynen).
Richard Jones [Tue, 30 Mar 2010 10:56:29 +0000 (11:56 +0100)]
hivexsh: '-f' option takes an argument (found by Marko Myllynen).

14 years agoZero all new block allocations.
Richard Jones [Mon, 29 Mar 2010 21:51:12 +0000 (22:51 +0100)]
Zero all new block allocations.

Make sure all new block allocations (from allocate_block)
are zeroed.  It can happen that junk from previous hive pages
can end up in new block allocations, if the hive previously
shrank.

(Thanks to Marko Myllynen for finding an example where this
happened).

14 years agoIncrease HIVEX_MAX_VALUES from 1000 to 10000.
Richard Jones [Mon, 29 Mar 2010 21:23:25 +0000 (22:23 +0100)]
Increase HIVEX_MAX_VALUES from 1000 to 10000.

I was sent a genuine Windows XP hive by Marko Myllynen which
had a key with > 1000 values attached.

14 years agoIncrease HIVEX_MAX_SUBKEYS to 15000.
Richard Jones [Fri, 26 Mar 2010 13:49:25 +0000 (13:49 +0000)]
Increase HIVEX_MAX_SUBKEYS to 15000.

Windows 7 registry has a hive key which contains 11908 subkeys,
larger than the existing limit (10000).  The key is:
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Winners

14 years agohivex: Add debugging message when returning ERANGE error.
Richard Jones [Fri, 26 Mar 2010 13:48:24 +0000 (13:48 +0000)]
hivex: Add debugging message when returning ERANGE error.

14 years agohivexsh: Fix building of HTML-format manpages.
Richard Jones [Fri, 26 Mar 2010 11:47:20 +0000 (11:47 +0000)]
hivexsh: Fix building of HTML-format manpages.

14 years agoperl: Fix $h->value_value method when returning an empty value.
Richard Jones [Thu, 25 Mar 2010 19:39:07 +0000 (19:39 +0000)]
perl: Fix $h->value_value method when returning an empty value.

Previously this didn't correctly return an empty registry
value.  In this case the length argument to newSVpv would
be 0 which tells Perl to try to calculate the length (we
want newSVpvn instead).

14 years agoFix generation of po/POTFILES.in.
Richard Jones [Thu, 25 Mar 2010 12:02:42 +0000 (12:02 +0000)]
Fix generation of po/POTFILES.in.

Contains some obsolete code copied in from libguestfs, and we
need to exclude Perl 'blib' files.

14 years agoperl: Small fix to 006-pod-coverage test.
Richard Jones [Thu, 25 Mar 2010 12:01:34 +0000 (12:01 +0000)]
perl: Small fix to 006-pod-coverage test.

Some code copied over from libguestfs, fixed.

14 years agoperl: Fix $h->value_type and $h->value_value methods.
Richard Jones [Thu, 25 Mar 2010 11:57:35 +0000 (11:57 +0000)]
perl: Fix $h->value_type and $h->value_value methods.

These were passing the type & len arguments the wrong way round
to the C function, resulting in data corruption in the returned
values.

14 years agoFix documentation for Win::Hivex->open
Richard Jones [Mon, 8 Mar 2010 17:44:43 +0000 (17:44 +0000)]
Fix documentation for Win::Hivex->open

14 years agoRHEL 5: Fixes for old version of OCaml in EPEL 5.
Richard Jones [Mon, 1 Mar 2010 17:44:00 +0000 (17:44 +0000)]
RHEL 5: Fixes for old version of OCaml in EPEL 5.

14 years agoPrepare for version 1.2.0. 1.2.0
Richard Jones [Mon, 1 Mar 2010 13:50:33 +0000 (13:50 +0000)]
Prepare for version 1.2.0.

Fix hivexsh_SOURCES.

Update PO files.

14 years agoUpdate Spanish translations (RHBZ#569178).
Daniel Cabrera [Mon, 1 Mar 2010 09:39:54 +0000 (09:39 +0000)]
Update Spanish translations (RHBZ#569178).

14 years agoUpdate PO files.
Richard Jones [Mon, 1 Mar 2010 09:37:22 +0000 (09:37 +0000)]
Update PO files.

14 years agoUpdate Polish translations (RHBZ#502533).
Piotr Drąg [Mon, 1 Mar 2010 09:36:37 +0000 (09:36 +0000)]
Update Polish translations (RHBZ#502533).

14 years agoNO Python bindings - ran out of time.
Richard W.M. Jones [Fri, 26 Feb 2010 21:56:09 +0000 (21:56 +0000)]
NO Python bindings - ran out of time.

This commit disables parts of the build related to Python
and notes in the README that we didn't have time to finish
Python bindings.

14 years agogenerator: Perl bindings.
Richard W.M. Jones [Fri, 26 Feb 2010 11:29:09 +0000 (11:29 +0000)]
generator: Perl bindings.

This also adds a small test suite for the Perl bindings.

14 years agogenerator: Clarify LGPLv2 boilerplate.
Richard W.M. Jones [Thu, 25 Feb 2010 22:14:10 +0000 (22:14 +0000)]
generator: Clarify LGPLv2 boilerplate.

14 years agoMore documentation in README file.
Richard W.M. Jones [Thu, 25 Feb 2010 22:05:51 +0000 (22:05 +0000)]
More documentation in README file.

14 years agohivexsh: Fix compilation on 32 bit machines.
Richard W.M. Jones [Fri, 26 Feb 2010 11:50:35 +0000 (11:50 +0000)]
hivexsh: Fix compilation on 32 bit machines.

14 years agoRemove bogus msgstr from kn.po.
Richard Jones [Thu, 25 Feb 2010 20:02:57 +0000 (20:02 +0000)]
Remove bogus msgstr from kn.po.

14 years agogenerator: Add OCaml bindings.
Richard Jones [Tue, 23 Feb 2010 12:27:19 +0000 (12:27 +0000)]
generator: Add OCaml bindings.

Also we tighten up the definition of hivex_close (it disposes of handles)
and hivex_node_get_child (unusual "not found" non-error condition).

This also adds tests of the OCaml bindings.

14 years agoAdd build framework for OCaml, Perl, Python bindings.
Richard Jones [Tue, 23 Feb 2010 10:36:51 +0000 (10:36 +0000)]
Add build framework for OCaml, Perl, Python bindings.

(No bindings are actually built, this just adds the build, test
and generator framework for them).

14 years agoconfigure: Comment out Ruby, Java, Haskell detection.
Richard Jones [Tue, 23 Feb 2010 10:28:14 +0000 (10:28 +0000)]
configure: Comment out Ruby, Java, Haskell detection.

We will not be implementing bindings for Ruby, Java or Haskell
unless someone pitches in to do the work.  Therefore comment out
the code which detects these languages in the configure script.

(This leaves OCaml, Perl, Python, which we will be writing
bindings for).

14 years agoCreate separate toplevel directories for hivexsh and hivexml.
Richard Jones [Wed, 24 Feb 2010 18:20:49 +0000 (18:20 +0000)]
Create separate toplevel directories for hivexsh and hivexml.

14 years agoRename hivex/ -> lib/
Richard Jones [Wed, 24 Feb 2010 17:57:01 +0000 (17:57 +0000)]
Rename hivex/ -> lib/

14 years agoMove test images to images/ and add a large, generated test image.
Richard Jones [Wed, 24 Feb 2010 17:30:37 +0000 (17:30 +0000)]
Move test images to images/ and add a large, generated test image.

Previously we had one minimal test image.  This was located in
hivex/t (a subdirectory of the main library).

This adds a large, procedurally generated test image.  Because
this needs to be built using hivex code, and because subdirectories
are built before the parent directory by automake, we have to
also move the directory location to a top-level directory called
images/.

14 years agoAdded Kannada translation (RHBZ#567860).
Shankar Prasad [Wed, 24 Feb 2010 10:35:24 +0000 (10:35 +0000)]
Added Kannada translation (RHBZ#567860).

14 years agohivex: Fix allocations that may move C heap buffer.
Richard Jones [Tue, 23 Feb 2010 19:08:41 +0000 (19:08 +0000)]
hivex: Fix allocations that may move C heap buffer.

When heavily extending existing hive files, the malloc-allocated
in-memory copy of the hive may be moved when we reallocate it
(to increase its size).  However we didn't adjust existing
pointers to cope with this, so sometimes you could get a segfault.

This patch fixes the issue by adjusting pointers as necessary
after calling (directly or indirectly) to the allocate_block
function.

With this patch I was able to allocate 10,000's of blocks in
a deeply nested hive structure without any problems being reported
by valgrind.

14 years agoLink gnulib in to the hivex library, not end-user programs.
Richard Jones [Tue, 23 Feb 2010 11:32:53 +0000 (11:32 +0000)]
Link gnulib in to the hivex library, not end-user programs.

Gnulib should be statically linked into the hivex library, so
it gets included into end-user programs automatically.  Otherwise
end-user programs would have to link explicitly with gnulib.

14 years agogenerator: More minor formatting adjustments to POD documentation.
Richard Jones [Mon, 22 Feb 2010 22:42:24 +0000 (22:42 +0000)]
generator: More minor formatting adjustments to POD documentation.

14 years agogenerator: Minor adjustments to the C POD documentation.
Richard Jones [Mon, 22 Feb 2010 22:38:36 +0000 (22:38 +0000)]
generator: Minor adjustments to the C POD documentation.

14 years agoAdd a generator for generating bindings to other languages.
Richard Jones [Mon, 22 Feb 2010 16:30:12 +0000 (16:30 +0000)]
Add a generator for generating bindings to other languages.

At the moment the generator just generates the C header file
and C POD documentation.  This just so we can compare the existing
hand-written code with the generated code to make sure that our
description of the API within the generator is correct.

14 years agoRemove bogus reference to src/ directory which no longer exists.
Richard Jones [Mon, 22 Feb 2010 17:17:16 +0000 (17:17 +0000)]
Remove bogus reference to src/ directory which no longer exists.

14 years agoUpdate copyright notice and change libguestfs to hivex.
Richard Jones [Mon, 22 Feb 2010 17:16:44 +0000 (17:16 +0000)]
Update copyright notice and change libguestfs to hivex.

14 years agoVersion 1.1.2 1.1.2
Richard Jones [Mon, 22 Feb 2010 11:52:01 +0000 (11:52 +0000)]
Version 1.1.2

14 years agoInstall hivex.h in $includedir.
Richard Jones [Mon, 22 Feb 2010 11:28:57 +0000 (11:28 +0000)]
Install hivex.h in $includedir.

14 years agoVersion 1.1.1. 1.1.1
Richard Jones [Mon, 22 Feb 2010 10:43:20 +0000 (10:43 +0000)]
Version 1.1.1.

Also some minor fixes to the build system.

14 years agoMove README, LICENSE files to the toplevel directory.
Richard Jones [Fri, 19 Feb 2010 17:34:45 +0000 (17:34 +0000)]
Move README, LICENSE files to the toplevel directory.

14 years agognulib: Remove some unused modules.
Richard Jones [Fri, 19 Feb 2010 17:30:05 +0000 (17:30 +0000)]
gnulib: Remove some unused modules.

14 years agoVersion 1.1.0 1.1.0
Richard Jones [Fri, 19 Feb 2010 16:41:05 +0000 (16:41 +0000)]
Version 1.1.0

14 years agopo: Import pofiles and various build fixes.
Richard Jones [Fri, 19 Feb 2010 16:50:39 +0000 (16:50 +0000)]
po: Import pofiles and various build fixes.

14 years agoSort and complete m4/.gitignore file.
Richard Jones [Fri, 19 Feb 2010 16:40:32 +0000 (16:40 +0000)]
Sort and complete m4/.gitignore file.

14 years agoAdd gettext.h, omitted from earlier import.
Richard Jones [Fri, 19 Feb 2010 16:36:36 +0000 (16:36 +0000)]
Add gettext.h, omitted from earlier import.

14 years agognulib: Include xstrtol, xstrtoll modules.
Richard Jones [Fri, 19 Feb 2010 16:35:25 +0000 (16:35 +0000)]
gnulib: Include xstrtol, xstrtoll modules.

These were omitted from the earlier code import from libguestfs.

14 years agoAdd html/ directory, include POD CSS.
Richard Jones [Fri, 19 Feb 2010 16:35:04 +0000 (16:35 +0000)]
Add html/ directory, include POD CSS.

14 years agohivexsh: Print hex bytes >= 0x80 correctly.
Richard Jones [Fri, 19 Feb 2010 13:51:07 +0000 (13:51 +0000)]
hivexsh: Print hex bytes >= 0x80 correctly.

These were being interpreted as signed chars, and thus printed
as "ffffff80" etc.

14 years agoRemove some unused variables.
Richard Jones [Mon, 15 Feb 2010 15:55:38 +0000 (15:55 +0000)]
Remove some unused variables.

Since we have to compile with -Wno-unused-variables, we don't
spot unused variables in code.  I found these by compiling the
code in Ubuntu.

14 years agoAdd scripts to EXTRA_DIST.
Richard Jones [Fri, 5 Feb 2010 18:01:18 +0000 (18:01 +0000)]
Add scripts to EXTRA_DIST.

14 years agohivex: example6: Don't double backslashes.
Richard Jones [Fri, 5 Feb 2010 15:12:09 +0000 (15:12 +0000)]
hivex: example6: Don't double backslashes.

14 years agohivex: example6: Hypothetical addition of keys for viostor.
Richard Jones [Fri, 5 Feb 2010 15:05:36 +0000 (15:05 +0000)]
hivex: example6: Hypothetical addition of keys for viostor.

14 years agohivex: Fix handling of inline VKs.
Richard Jones [Fri, 5 Feb 2010 14:50:19 +0000 (14:50 +0000)]
hivex: Fix handling of inline VKs.

14 years agohivexsh: Set correct type for 'expandstring' values.
Richard Jones [Fri, 5 Feb 2010 13:47:32 +0000 (13:47 +0000)]
hivexsh: Set correct type for 'expandstring' values.

14 years agohivex: Documentation and cleanups.
Richard Jones [Fri, 5 Feb 2010 12:59:43 +0000 (12:59 +0000)]
hivex: Documentation and cleanups.

14 years agohivex: Make limits into macros.
Richard Jones [Fri, 5 Feb 2010 12:59:18 +0000 (12:59 +0000)]
hivex: Make limits into macros.

14 years agohivexsh: Remove unused variable.
Richard Jones [Fri, 5 Feb 2010 12:57:53 +0000 (12:57 +0000)]
hivexsh: Remove unused variable.

This removes an unused variable left over by
commit ab608f3948d903af64e814b2e67949a1a71d93a4.

14 years agohivex: Complete the implementation of adding child nodes.
Richard Jones [Thu, 4 Feb 2010 16:33:18 +0000 (16:33 +0000)]
hivex: Complete the implementation of adding child nodes.

14 years agohivex: More debugging around nk 'unknown2' field.
Richard Jones [Thu, 4 Feb 2010 18:42:58 +0000 (18:42 +0000)]
hivex: More debugging around nk 'unknown2' field.

14 years agohivex: Check hash fields in lf/lh records.
Richard Jones [Thu, 4 Feb 2010 17:59:11 +0000 (17:59 +0000)]
hivex: Check hash fields in lf/lh records.

14 years agohivexsh: del command: Fix error message.
Richard Jones [Thu, 4 Feb 2010 16:32:22 +0000 (16:32 +0000)]
hivexsh: del command: Fix error message.