diff options
| author | Richard Jones <rjones@redhat.com> | 2010-01-19 15:20:36 +0000 |
|---|---|---|
| committer | Richard Jones <rjones@redhat.com> | 2010-01-28 11:25:30 +0000 |
| commit | a1b72fd0ba5b2fb0a198247b00f9e7230ca8796d (patch) | |
| tree | ecdab02c1b55b52afdaab4d6fbebd1400bd15310 /hivex | |
| parent | 09d988e8f1cfa42ef9a5abe5c9c151962aa1d2cc (diff) | |
| download | libguestfs-a1b72fd0ba5b2fb0a198247b00f9e7230ca8796d.tar.gz libguestfs-a1b72fd0ba5b2fb0a198247b00f9e7230ca8796d.tar.xz libguestfs-a1b72fd0ba5b2fb0a198247b00f9e7230ca8796d.zip | |
hivex: Clarify some more fields.
Taken from sentinelchicken.com documentation.
Diffstat (limited to 'hivex')
| -rw-r--r-- | hivex/hivex.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/hivex/hivex.c b/hivex/hivex.c index e1df96a5..7efea9a6 100644 --- a/hivex/hivex.c +++ b/hivex/hivex.c @@ -196,7 +196,8 @@ struct ntreg_nk_record { int32_t seg_len; /* length (always -ve because used) */ char id[2]; /* "nk" */ uint16_t flags; - char timestamp[12]; + char timestamp[8]; + char unknown0[4]; uint32_t parent; /* offset of owner/parent */ uint32_t nr_subkeys; /* number of subkeys */ uint32_t unknown1; @@ -219,7 +220,7 @@ struct ntreg_lf_record { uint16_t nr_keys; /* number of keys in this record */ struct { uint32_t offset; /* offset of nk-record for this subkey */ - char name[4]; /* first 4 characters of subkey name */ + char hash[4]; /* hash of subkey name */ } keys[1]; } __attribute__((__packed__)); |