Changeset 90 for trunk

Timestamp:

03/28/07 15:22:38 (18 years ago)

Author:

tim

Message:

minor changes to Makefiles

Added one warning on an unlikely condition in reglookup

Added the -H option to reglookup-timeline for ommiting the header

Location:

trunk

Files:

• bin/Makefile (modified) (1 diff)
• bin/reglookup-timeline (modified) (3 diffs)
• src/Makefile (modified) (1 diff)
• src/reglookup.c (modified) (1 diff)

trunk/bin/Makefile

@@ -12 +12 @@
 
 install:
-        cp -r $(FILES) $(BIN_PREFIX)
+        install -m 0755 $(FILES) $(BIN_PREFIX)
 
 clean:

trunk/bin/reglookup-timeline

@@ -5 +5 @@
 # timelines for investigations.
 #
-# Copyright (C) 2005-2006 Timothy D. Morgan
+# Copyright (C) 2005-2007 Timothy D. Morgan
 #
 # This program is free software; you can redistribute it and/or modify
@@ -25 +25 @@
 usage()
 {
-  echo "Usage: $0 <REGISTRY_FILE> [<REGISTRY_FILE> ...]" 1>&2
+  echo "Usage: $0 [-H] <REGISTRY_FILE> [<REGISTRY_FILE> ...]" 1>&2
 }
 
@@ -34 +34 @@
 fi
 
-echo "MTIME,FILE,PATH"
+PRINT_HEADER=true
+if [ "$1" = "-H" ]; then
+  PRINT_HEADER=false
+  shift
+fi
+
+if [ "$PRINT_HEADER" = "true" ]; then
+  echo "MTIME,FILE,PATH"
+fi
+
 for F in $@; do
   reglookup -t KEY -H "$F" | awk -F',' '{ printf "%s,'"$F"',%s\n",$4,$1; }'

trunk/src/Makefile

@@ -16 +16 @@
 
 install:
-        cp -r $(FILES) $(BIN_PREFIX)
+        install -m 0755 $(FILES) $(BIN_PREFIX)
 
 clean:

trunk/src/reglookup.c

@@ -546 +546 @@
     tmp_buf[3] = (uint8)(vk->data_off & 0xFF);
     if(size > 4)
-      /* XXX: should we kick out a warning here?  If it is in the 
-       *      offset and longer than four, file could be corrupt 
-       *      or malicious... */
+    {
+      fprintf(stderr, "WARNING: value stored in offset larger than 4. "
+              "Truncating...\n");
       size = 4;
+    }
     quoted_value = data_to_ascii(tmp_buf, 4, vk->type, &conv_error);
   }