git.annexia.org / hivex.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1f91b89) | patch
hivex: page 'offset_next' field is really 'page_size'.
authorRichard Jones <rjones@redhat.com>
Mon, 18 Jan 2010 15:24:16 +0000 (15:24 +0000)
committerRichard Jones <rjones@redhat.com>
Fri, 19 Feb 2010 14:54:28 +0000 (14:54 +0000)
commitb6bd8392f65a430ef451794a824921c81683aa64
tree1902f4cb63b18b41aae8c8bc484bec77e6431582tree | snapshot
parent1f91b895b853b5e5ead2e797d785ffae63e3f33ccommit | diff
hivex: page 'offset_next' field is really 'page_size'.

The documentation, as usual, is contradictory.  However this
field is definitely the page size in all observed registries.
Furthermore the following field marked 'unknown' is always
zero, although this contradicts what the sentinelchicken.com
paper says.
hivex/hivex.c diff | blob | history
[MOVED TO GITHUB] Read and write Windows Registry Hive files.