|
 |
aabef6d |
From 99b613b1c1d326702b2bb527f20d555d7c7e4ee7 Mon Sep 17 00:00:00 2001
|
|
|
aabef6d |
From: "Richard W.M. Jones" <rjones@redhat.com>
|
|
|
aabef6d |
Date: Fri, 14 Nov 2014 15:37:37 +0000
|
|
|
aabef6d |
Subject: [PATCH 2/2] lib: Increase HIVEX_MAX_VALUE_LEN to 8000000.
|
|
|
aabef6d |
|
|
|
aabef6d |
I encountered a hive that contained a key of 3_886_561 bytes length in
|
|
|
aabef6d |
a key called 'HKLM\SYSTEM\ControlSet001\services\mfeavfk' (apparently
|
|
|
aabef6d |
belonging to "McAfee Anti-virus software").
|
|
|
aabef6d |
|
|
|
aabef6d |
The previous limit was set arbitrarily at 2_000_000 bytes. Increase
|
|
|
aabef6d |
it to cope with this larger key.
|
|
|
aabef6d |
---
|
|
|
aabef6d |
lib/hivex-internal.h | 2 +-
|
|
|
aabef6d |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
aabef6d |
|
|
|
aabef6d |
diff --git a/lib/hivex-internal.h b/lib/hivex-internal.h
|
|
|
aabef6d |
index e59084d..1613013 100644
|
|
|
aabef6d |
--- a/lib/hivex-internal.h
|
|
|
aabef6d |
+++ b/lib/hivex-internal.h
|
|
|
aabef6d |
@@ -325,7 +325,7 @@ extern int _hivex_get_values (hive_h *h, hive_node_h node, hive_value_h **values
|
|
|
aabef6d |
/* These limits are in place to stop really stupid stuff and/or exploits. */
|
|
|
aabef6d |
#define HIVEX_MAX_SUBKEYS 15000
|
|
|
aabef6d |
#define HIVEX_MAX_VALUES 10000
|
|
|
aabef6d |
-#define HIVEX_MAX_VALUE_LEN 2000000
|
|
|
aabef6d |
+#define HIVEX_MAX_VALUE_LEN 8000000
|
|
|
aabef6d |
#define HIVEX_MAX_ALLOCATION 1000000
|
|
|
aabef6d |
|
|
|
aabef6d |
#endif /* HIVEX_INTERNAL_H_ */
|
|
|
aabef6d |
--
|
|
|
aabef6d |
2.1.0
|
|
|
aabef6d |
|