- Timestamp:
- 03/28/07 15:22:38 (17 years ago)
- Location:
- trunk
- Files:
-
- 4 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/bin/Makefile
r65 r90 12 12 13 13 install: 14 cp -r$(FILES) $(BIN_PREFIX)14 install -m 0755 $(FILES) $(BIN_PREFIX) 15 15 16 16 clean: -
trunk/bin/reglookup-timeline
r68 r90 5 5 # timelines for investigations. 6 6 # 7 # Copyright (C) 2005-200 6Timothy D. Morgan7 # Copyright (C) 2005-2007 Timothy D. Morgan 8 8 # 9 9 # This program is free software; you can redistribute it and/or modify … … 25 25 usage() 26 26 { 27 echo "Usage: $0 <REGISTRY_FILE> [<REGISTRY_FILE> ...]" 1>&227 echo "Usage: $0 [-H] <REGISTRY_FILE> [<REGISTRY_FILE> ...]" 1>&2 28 28 } 29 29 … … 34 34 fi 35 35 36 echo "MTIME,FILE,PATH" 36 PRINT_HEADER=true 37 if [ "$1" = "-H" ]; then 38 PRINT_HEADER=false 39 shift 40 fi 41 42 if [ "$PRINT_HEADER" = "true" ]; then 43 echo "MTIME,FILE,PATH" 44 fi 45 37 46 for F in $@; do 38 47 reglookup -t KEY -H "$F" | awk -F',' '{ printf "%s,'"$F"',%s\n",$4,$1; }' -
trunk/src/Makefile
r73 r90 16 16 17 17 install: 18 cp -r$(FILES) $(BIN_PREFIX)18 install -m 0755 $(FILES) $(BIN_PREFIX) 19 19 20 20 clean: -
trunk/src/reglookup.c
r88 r90 546 546 tmp_buf[3] = (uint8)(vk->data_off & 0xFF); 547 547 if(size > 4) 548 /* XXX: should we kick out a warning here? If it is in the549 * offset and longer than four, file could be corrupt550 * or malicious... */ 548 { 549 fprintf(stderr, "WARNING: value stored in offset larger than 4. " 550 "Truncating...\n"); 551 551 size = 4; 552 } 552 553 quoted_value = data_to_ascii(tmp_buf, 4, vk->type, &conv_error); 553 554 }
Note: See TracChangeset
for help on using the changeset viewer.