From d5ae3045970a815d2bdac768d6924b31f3b8b4ca Mon Sep 17 00:00:00 2001

From: Matt Coleman <matt@datto.com>

Date: Sat, 3 Dec 2016 15:25:43 -0500

Subject: [PATCH 14/16] Increase HIVEX_MAX_SUBKEYS and HIVEX_MAX_VALUES

This increases the defined limits based on counts observed in the

Microsoft\Windows NT\CurrentVersion subkey of the software hive.

(cherry picked from commit 4b024fa031251fbeacb6ecf2821d8d027d59de0d)

---

 lib/hivex-internal.h | 4 ++--

 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/hivex-internal.h b/lib/hivex-internal.h

index 396d8d8..498d64f 100644

--- a/lib/hivex-internal.h

+++ b/lib/hivex-internal.h

@@ -320,8 +320,8 @@ extern int _hivex_get_values (hive_h *h, hive_node_h node, hive_value_h **values

   } while (0)

 /* These limits are in place to stop really stupid stuff and/or exploits. */

-#define HIVEX_MAX_SUBKEYS       25000

-#define HIVEX_MAX_VALUES        10000

+#define HIVEX_MAX_SUBKEYS       70000

+#define HIVEX_MAX_VALUES        55000

 #define HIVEX_MAX_VALUE_LEN   2000000

 #define HIVEX_MAX_ALLOCATION  1000000

-- 

1.8.3.1