Bug 692545 - inspect-list-applications fails to detect 32 bit apps installed under WOW64 emulator on 64 bit Windows
inspect-list-applications fails to detect 32 bit apps installed under WOW64 e...
Product: Virtualization Tools
Classification: Community
Component: libguestfs (Show other bugs)
Unspecified Unspecified
medium Severity medium
: ---
: ---
Assigned To: Richard W.M. Jones
Depends On:
Blocks: 692394
  Show dependency treegraph
Reported: 2011-03-31 10:17 EDT by Richard W.M. Jones
Modified: 2011-03-31 10:53 EDT (History)
4 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 692394
Last Closed: 2011-03-31 10:53:52 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Richard W.M. Jones 2011-03-31 10:17:47 EDT
+++ This bug was initially created as a clone of Bug #692394 +++

Description of problem:
inspect-list-applications cannot detect applications installed in x64-based Windows image, whereas it works for 32 bit Win.

Taking the xenpv driver as an example, I installed xenpv on a 32 bit Windows 2003 image from inside the guest, and guestfish successfully could detect it:

[2] = {
  app_name: Red Hat Paravirtualized Xen Drivers for Windows(R)
  app_display_name: Red Hat Paravirtualized Xen Drivers for Windows(R) 1.3.4-1
  app_epoch: 0
  app_version: 1.3.4-1
  app_publisher: Red Hat, Inc.
  app_url: http://www.redhat.com

But when we come to the 64 bit Windows, we get nothing from the output.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
Setup a x64-based Windows image. Boot into the guest using KVM or Xen, and install some applications like xenpv driver.

Quit the guest and use guestfish to detect the installed application.

guestfish -a windows-64bit.img
><fs> inspect-os 
><fs> inspect-get-mountpoints /dev/vda1
/: /dev/vda1
><fs> mount /dev/vda1 /
><fs> inspect-list-applications /dev/vda1 

Actual results:
No output.

Expected results:
Descriptions of installed applications.

Additional info:
I think you need to look for some registry key other than HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall for the 64 bit Windows.

This page might help:

--- Additional comment from jzheng@redhat.com on 2011-03-31 04:56:47 EDT ---

OH, I think the xenpv driver is a 32-bit program that run in WOW64 mode. It should be found in HKEY_LOCAL_MACHINE\Software\WOW6432node.

I did not try the native 64-bit program case, which I'll later have a test.

--- Additional comment from rjones@redhat.com on 2011-03-31 05:01:19 EDT ---

Could you attach the HKLM\SOFTWARE hive from this
windows guest to the bug?


$ guestfish --ro -a windows-64bit.img -i \
  download win:/windows/system32/config/software software
$ file software 
software: MS Windows registry file, NT/2000 or above

Those commands should produce a binary file called 'software' in
the current directory which you can just attach.

--- Additional comment from jzheng@redhat.com on 2011-03-31 05:21:22 EDT ---

Created attachment 489012 [details]
Compressed hive file of the Windows image

I compressed the hive file. It's from a Windows 7 x64 image.

Well, I tried the 7zip 64bit version, and it was correct.

><fs> inspect-list-applications /dev/vda1
[0] = {
  app_name: {23170F69-40C1-2702-0920-000001000000}
  app_display_name: 7-Zip 9.20 (x64 edition)
  app_epoch: 0
  app_publisher: Igor Pavlov
  app_url: http://www.7-zip.org/

Then it's a 32bit-on-64bit issue.

--- Additional comment from jzheng@redhat.com on 2011-03-31 05:26:58 EDT ---

Created attachment 489013 [details]
Second version of hive file that contains 64bit 7-zip installed

The hive file on which I performed the test with 64 bit 7-zip.
Comment 1 Richard W.M. Jones 2011-03-31 10:53:52 EDT
Thanks Jinxin; I have pushed a fix for this upstream.  I tested
it using the two software hives and it was able to detect both
applications correctly.


Note You need to log in before you can comment on or make changes to this bug.