Blob Blame History Raw
From d5ae3045970a815d2bdac768d6924b31f3b8b4ca Mon Sep 17 00:00:00 2001
From: Matt Coleman <matt@datto.com>
Date: Sat, 3 Dec 2016 15:25:43 -0500
Subject: [PATCH 14/16] Increase HIVEX_MAX_SUBKEYS and HIVEX_MAX_VALUES

This increases the defined limits based on counts observed in the
Microsoft\Windows NT\CurrentVersion subkey of the software hive.

(cherry picked from commit 4b024fa031251fbeacb6ecf2821d8d027d59de0d)
---
 lib/hivex-internal.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/hivex-internal.h b/lib/hivex-internal.h
index 396d8d8..498d64f 100644
--- a/lib/hivex-internal.h
+++ b/lib/hivex-internal.h
@@ -320,8 +320,8 @@ extern int _hivex_get_values (hive_h *h, hive_node_h node, hive_value_h **values
   } while (0)
 
 /* These limits are in place to stop really stupid stuff and/or exploits. */
-#define HIVEX_MAX_SUBKEYS       25000
-#define HIVEX_MAX_VALUES        10000
+#define HIVEX_MAX_SUBKEYS       70000
+#define HIVEX_MAX_VALUES        55000
 #define HIVEX_MAX_VALUE_LEN   2000000
 #define HIVEX_MAX_ALLOCATION  1000000
 
-- 
1.8.3.1