Bug 1145056 - hivexml generate "Argument list too long" on some Windows Registry
Summary: hivexml generate "Argument list too long" on some Windows Registry
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: hivex
Version: 7.0
Hardware: Unspecified
OS: Unspecified
Target Milestone: rc
: ---
Assignee: Richard W.M. Jones
QA Contact: Virtualization Bugs
Depends On:
TreeView+ depends on / blocked
Reported: 2014-09-22 09:53 UTC by Wei Shi
Modified: 2015-03-05 13:42 UTC (History)
3 users (show)

Fixed In Version: hivex-1.3.10-5.3.el7
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2015-03-05 13:42:12 UTC
Target Upstream Version:

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2015:0301 0 normal SHIPPED_LIVE Moderate: hivex security, bug fix, and enhancement update 2015-03-05 17:34:28 UTC

Description Wei Shi 2014-09-22 09:53:12 UTC
Description of problem:
hivex generate "Argument list too long" on some Windows Registry(XP 32bit, 2003 32bit, 2003 64bit)
It works well on the same hive file with hivex-1.3.8-4.el7.x86_64

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. extract hive file from Windows image
2. dumpxml with hivexml
# hivexml WinXP-32-hvm.software > /dev/null
WinXP-32-hvm.software: Argument list too long

Actual results:
# hivexml WinXP-32-hvm.software > /dev/null
WinXP-32-hvm.software: Argument list too long

Expected results:
No error outputs

Additional info:

Comment 3 Richard W.M. Jones 2014-09-22 14:13:07 UTC
Upstream fix:


The first patch is the required fix.  The second one
cleans up the hokey error handling in hivexml a bit.

Comment 4 Richard W.M. Jones 2014-09-22 14:13:44 UTC
I need PM-ack to commit this.

Comment 6 Wei Shi 2014-11-10 06:57:40 UTC

No error output from
# hivexml software.xp.32 > /dev/null

Comment 7 Richard W.M. Jones 2014-11-20 21:45:29 UTC
A similar case was reported on the mailing list today:


I have fixed it upstream and will include the fix in hivex
in RHEL 7.  The fix seems like it should be completely safe:


It's hard to reproduce unless you have the precise Windows XP
version from the reporter which used a French copy of Citrix.

Comment 9 errata-xmlrpc 2015-03-05 13:42:12 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.