Changeset 102 for trunk/include

Timestamp:

04/02/08 22:30:26 (17 years ago)

Author:

tim

Message:

simplified root key search routines

rewrote sk record parsing

fixed nasty bug in parsing data-in-offset

File:

• trunk/include/regfi.h (modified) (3 diffs)

trunk/include/regfi.h

@@ -86 +86 @@
 #define REGFI_NK_MIN_LENGTH     0x4C
 #define REGFI_VK_MIN_LENGTH     0x14
+#define REGFI_SK_MIN_LENGTH     0x14
 
 /* Flags for the vk records */
@@ -188 +189 @@
   uint32 hbin_off;      /* offset from beginning of this hbin block */
   uint32 cell_size;     /* ((start_offset - end_offset) & 0xfffffff8) */
+  uint32 offset;        /* Real file offset of this record */
   
   uint32 sk_off;        /* offset parsed from NK record used as a key
@@ -196 +198 @@
   uint32 next_sk_off;
   uint32 ref_count;
-  uint32 size;
-  uint8  header[REC_HDR_SIZE];
+  uint32 desc_size;     /* size of security descriptor */
+  uint16 unknown_tag;
+  uint8  magic[REC_HDR_SIZE];
 } REGF_SK_REC;