mirror of
https://github.com/reactos/reactos.git
synced 2024-06-30 09:50:07 +00:00
f3141fb29e
Sometimes repairing a broken hive with a hive log does not always guarantee the hive in question has fully recovered. In worst cases it could happen the LOG itself is even corrupt too and that would certainly lead to a total unbootable system. This is most likely if the victim hive is the SYSTEM hive. This can be anyhow solved by the help of a mirror hive, or also called an "alternate hive". Alternate hives serve the purpose as backup hives for primary hives of which there is still a risk that is not worth taking. For now only the SYSTEM hive is granted the right to have a backup alternate hive. === NOTE === Currently the SYSTEM hive can only base upon the alternate SYSTEM.ALT hive, which means the corresponding LOG file never gets updated. When time comes the existing code must be adapted to allow the possibility to use .ALT and .LOG hives simultaneously.
362 lines
8.1 KiB
C
362 lines
8.1 KiB
C
/*
|
|
* PROJECT: Registry manipulation library
|
|
* LICENSE: GPL - See COPYING in the top level directory
|
|
* COPYRIGHT: Copyright 2005 Filip Navara <navaraf@reactos.org>
|
|
* Copyright 2001 - 2005 Eric Kohl
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
//
|
|
// Hive operations
|
|
//
|
|
#define HINIT_CREATE 0
|
|
#define HINIT_MEMORY 1
|
|
#define HINIT_FILE 2
|
|
#define HINIT_MEMORY_INPLACE 3
|
|
#define HINIT_FLAT 4
|
|
#define HINIT_MAPFILE 5
|
|
|
|
//
|
|
// Hive flags
|
|
//
|
|
#define HIVE_VOLATILE 1
|
|
#define HIVE_NOLAZYFLUSH 2
|
|
#define HIVE_HAS_BEEN_REPLACED 4
|
|
#define HIVE_HAS_BEEN_FREED 8
|
|
#define HIVE_UNKNOWN 0x10
|
|
#define HIVE_IS_UNLOADING 0x20
|
|
|
|
//
|
|
// Hive types
|
|
//
|
|
#define HFILE_TYPE_PRIMARY 0
|
|
#define HFILE_TYPE_LOG 1
|
|
#define HFILE_TYPE_EXTERNAL 2
|
|
#define HFILE_TYPE_ALTERNATE 3 // Technically a HFILE_TYPE_PRIMARY but for mirror backup hives. ONLY USED for the SYSTEM hive!
|
|
#define HFILE_TYPE_MAX 4
|
|
|
|
//
|
|
// Hive sizes
|
|
//
|
|
#define HBLOCK_SIZE 0x1000
|
|
#define HSECTOR_SIZE 0x200
|
|
#define HSECTOR_COUNT 8
|
|
|
|
#define HV_LOG_HEADER_SIZE FIELD_OFFSET(HBASE_BLOCK, Reserved2)
|
|
|
|
//
|
|
// Clean Block identifier
|
|
//
|
|
#define HV_CLEAN_BLOCK 0U
|
|
|
|
//
|
|
// Hive Log identifiers
|
|
//
|
|
#define HV_LOG_DIRTY_BLOCK 0xFF
|
|
#define HV_LOG_DIRTY_SIGNATURE 0x54524944 // "DIRT"
|
|
|
|
//
|
|
// Hive structure identifiers
|
|
//
|
|
#define HV_HHIVE_SIGNATURE 0xbee0bee0
|
|
#define HV_HBLOCK_SIGNATURE 0x66676572 // "regf"
|
|
#define HV_HBIN_SIGNATURE 0x6e696268 // "hbin"
|
|
|
|
//
|
|
// Hive versions
|
|
//
|
|
#define HSYS_MAJOR 1
|
|
#define HSYS_MINOR 3
|
|
#define HSYS_WHISTLER_BETA1 4
|
|
#define HSYS_WHISTLER 5
|
|
#define HSYS_MINOR_SUPPORTED HSYS_WHISTLER
|
|
|
|
//
|
|
// Hive formats
|
|
//
|
|
#define HBASE_FORMAT_MEMORY 1
|
|
|
|
//
|
|
// Hive storage
|
|
//
|
|
#define HTYPE_COUNT 2
|
|
|
|
//
|
|
// Hive boot types
|
|
//
|
|
#define HBOOT_TYPE_REGULAR 0
|
|
#define HBOOT_TYPE_SELF_HEAL 4
|
|
|
|
//
|
|
// Hive boot recover types
|
|
//
|
|
#define HBOOT_NO_BOOT_RECOVER 0
|
|
#define HBOOT_BOOT_RECOVERED_BY_HIVE_LOG 1
|
|
#define HBOOT_BOOT_RECOVERED_BY_ALTERNATE_HIVE 2
|
|
|
|
/**
|
|
* @name HCELL_INDEX
|
|
*
|
|
* A handle to cell index. The highest bit specifies the cell storage and
|
|
* the other bits specify index into the hive file. The value HCELL_NULL
|
|
* (-1) is reserved for marking invalid cells.
|
|
*/
|
|
typedef ULONG HCELL_INDEX, *PHCELL_INDEX;
|
|
|
|
//
|
|
// Cell Magic Values
|
|
//
|
|
#define HCELL_NIL MAXULONG
|
|
#define HCELL_CACHED 1
|
|
|
|
#define HCELL_TYPE_MASK 0x80000000
|
|
#define HCELL_BLOCK_MASK 0x7ffff000
|
|
#define HCELL_OFFSET_MASK 0x00000fff
|
|
#define HCELL_TYPE_SHIFT 31
|
|
#define HCELL_BLOCK_SHIFT 12
|
|
#define HCELL_OFFSET_SHIFT 0
|
|
|
|
#define HvGetCellType(Cell) \
|
|
((ULONG)(((Cell) & HCELL_TYPE_MASK) >> HCELL_TYPE_SHIFT))
|
|
#define HvGetCellBlock(Cell) \
|
|
((ULONG)(((Cell) & HCELL_BLOCK_MASK) >> HCELL_BLOCK_SHIFT))
|
|
|
|
typedef enum
|
|
{
|
|
Stable = 0,
|
|
Volatile = 1
|
|
} HSTORAGE_TYPE;
|
|
|
|
#include <pshpack1.h>
|
|
|
|
/**
|
|
* @name HBASE_BLOCK
|
|
*
|
|
* On-disk header for registry hive file.
|
|
*/
|
|
|
|
#define HIVE_FILENAME_MAXLEN 31
|
|
|
|
typedef struct _HBASE_BLOCK
|
|
{
|
|
/* Hive base block identifier "regf" (0x66676572) */
|
|
ULONG Signature;
|
|
|
|
/* Update counters */
|
|
ULONG Sequence1;
|
|
ULONG Sequence2;
|
|
|
|
/* When this hive file was last modified */
|
|
LARGE_INTEGER TimeStamp;
|
|
|
|
/* Registry format major version (1) */
|
|
ULONG Major;
|
|
|
|
/* Registry format minor version (3)
|
|
Version 3 added fast indexes, version 5 has large value optimizations */
|
|
ULONG Minor;
|
|
|
|
/* Registry file type (0 - Primary, 1 - Log) */
|
|
ULONG Type;
|
|
|
|
/* Registry format (1 is the only defined value so far) */
|
|
ULONG Format;
|
|
|
|
/* Offset into file from the byte after the end of the base block.
|
|
If the hive is volatile, this is the actual pointer to the CM_KEY_NODE */
|
|
HCELL_INDEX RootCell;
|
|
|
|
/* Size in bytes of the full hive, minus the header, multiple of the block size (4KB) */
|
|
ULONG Length;
|
|
|
|
/* (1?) */
|
|
ULONG Cluster;
|
|
|
|
/* Last 31 UNICODE characters, plus terminating NULL character,
|
|
of the full name of the hive file */
|
|
WCHAR FileName[HIVE_FILENAME_MAXLEN + 1];
|
|
|
|
ULONG Reserved1[99];
|
|
|
|
/* Checksum of first 0x200 bytes */
|
|
ULONG CheckSum;
|
|
|
|
ULONG Reserved2[0x37E];
|
|
ULONG BootType;
|
|
ULONG BootRecover;
|
|
} HBASE_BLOCK, *PHBASE_BLOCK;
|
|
|
|
C_ASSERT(sizeof(HBASE_BLOCK) == HBLOCK_SIZE);
|
|
|
|
typedef struct _HBIN
|
|
{
|
|
/* Hive bin identifier "hbin" (0x6E696268) */
|
|
ULONG Signature;
|
|
|
|
/* Block offset of this bin */
|
|
HCELL_INDEX FileOffset;
|
|
|
|
/* Size in bytes of this bin, multiple of the block size (4KB) */
|
|
ULONG Size;
|
|
|
|
ULONG Reserved1[2];
|
|
|
|
/* When this bin was last modified */
|
|
LARGE_INTEGER TimeStamp;
|
|
|
|
/* Unused (In-memory only) */
|
|
ULONG Spare;
|
|
} HBIN, *PHBIN;
|
|
|
|
typedef struct _HCELL
|
|
{
|
|
/* <0 if used, >0 if free */
|
|
LONG Size;
|
|
} HCELL, *PHCELL;
|
|
|
|
#include <poppack.h>
|
|
|
|
struct _HHIVE;
|
|
|
|
typedef struct _CELL_DATA*
|
|
(CMAPI *PGET_CELL_ROUTINE)(
|
|
struct _HHIVE *Hive,
|
|
HCELL_INDEX Cell
|
|
);
|
|
|
|
typedef VOID
|
|
(CMAPI *PRELEASE_CELL_ROUTINE)(
|
|
struct _HHIVE *Hive,
|
|
HCELL_INDEX Cell
|
|
);
|
|
|
|
typedef PVOID
|
|
(CMAPI *PALLOCATE_ROUTINE)(
|
|
SIZE_T Size,
|
|
BOOLEAN Paged,
|
|
ULONG Tag
|
|
);
|
|
|
|
typedef VOID
|
|
(CMAPI *PFREE_ROUTINE)(
|
|
PVOID Ptr,
|
|
ULONG Quota
|
|
);
|
|
|
|
typedef BOOLEAN
|
|
(CMAPI *PFILE_READ_ROUTINE)(
|
|
struct _HHIVE *RegistryHive,
|
|
ULONG FileType,
|
|
PULONG FileOffset,
|
|
PVOID Buffer,
|
|
SIZE_T BufferLength
|
|
);
|
|
|
|
typedef BOOLEAN
|
|
(CMAPI *PFILE_WRITE_ROUTINE)(
|
|
struct _HHIVE *RegistryHive,
|
|
ULONG FileType,
|
|
PULONG FileOffset,
|
|
PVOID Buffer,
|
|
SIZE_T BufferLength
|
|
);
|
|
|
|
typedef BOOLEAN
|
|
(CMAPI *PFILE_SET_SIZE_ROUTINE)(
|
|
struct _HHIVE *RegistryHive,
|
|
ULONG FileType,
|
|
ULONG FileSize,
|
|
ULONG OldfileSize
|
|
);
|
|
|
|
typedef BOOLEAN
|
|
(CMAPI *PFILE_FLUSH_ROUTINE)(
|
|
struct _HHIVE *RegistryHive,
|
|
ULONG FileType,
|
|
PLARGE_INTEGER FileOffset,
|
|
ULONG Length
|
|
);
|
|
|
|
typedef struct _HMAP_ENTRY
|
|
{
|
|
ULONG_PTR BlockAddress;
|
|
ULONG_PTR BinAddress;
|
|
struct _CM_VIEW_OF_FILE *CmView;
|
|
ULONG MemAlloc;
|
|
} HMAP_ENTRY, *PHMAP_ENTRY;
|
|
|
|
typedef struct _HMAP_TABLE
|
|
{
|
|
HMAP_ENTRY Table[512];
|
|
} HMAP_TABLE, *PHMAP_TABLE;
|
|
|
|
typedef struct _HMAP_DIRECTORY
|
|
{
|
|
PHMAP_TABLE Directory[2048];
|
|
} HMAP_DIRECTORY, *PHMAP_DIRECTORY;
|
|
|
|
typedef struct _DUAL
|
|
{
|
|
ULONG Length;
|
|
PHMAP_DIRECTORY Map;
|
|
PHMAP_ENTRY BlockList; // PHMAP_TABLE SmallDir;
|
|
ULONG Guard;
|
|
HCELL_INDEX FreeDisplay[24]; // FREE_DISPLAY FreeDisplay[24];
|
|
ULONG FreeSummary;
|
|
LIST_ENTRY FreeBins;
|
|
} DUAL, *PDUAL;
|
|
|
|
typedef struct _HHIVE
|
|
{
|
|
/* Hive identifier (0xBEE0BEE0) */
|
|
ULONG Signature;
|
|
|
|
/* Callbacks */
|
|
PGET_CELL_ROUTINE GetCellRoutine;
|
|
PRELEASE_CELL_ROUTINE ReleaseCellRoutine;
|
|
PALLOCATE_ROUTINE Allocate;
|
|
PFREE_ROUTINE Free;
|
|
PFILE_SET_SIZE_ROUTINE FileSetSize;
|
|
PFILE_WRITE_ROUTINE FileWrite;
|
|
PFILE_READ_ROUTINE FileRead;
|
|
PFILE_FLUSH_ROUTINE FileFlush;
|
|
|
|
#if (NTDDI_VERSION >= NTDDI_WIN7)
|
|
PVOID HiveLoadFailure; // PHIVE_LOAD_FAILURE
|
|
#endif
|
|
PHBASE_BLOCK BaseBlock;
|
|
RTL_BITMAP DirtyVector;
|
|
ULONG DirtyCount;
|
|
ULONG DirtyAlloc;
|
|
ULONG BaseBlockAlloc;
|
|
ULONG Cluster;
|
|
BOOLEAN Flat;
|
|
BOOLEAN ReadOnly;
|
|
#if (NTDDI_VERSION < NTDDI_VISTA) // NTDDI_LONGHORN
|
|
BOOLEAN Log;
|
|
BOOLEAN Alternate;
|
|
#endif
|
|
BOOLEAN DirtyFlag;
|
|
#if (NTDDI_VERSION >= NTDDI_VISTA) // NTDDI_LONGHORN
|
|
ULONG HvBinHeadersUse;
|
|
ULONG HvFreeCellsUse;
|
|
ULONG HvUsedCellsUse;
|
|
ULONG CmUsedCellsUse;
|
|
#endif
|
|
ULONG HiveFlags;
|
|
#if (NTDDI_VERSION < NTDDI_VISTA) // NTDDI_LONGHORN
|
|
ULONG LogSize;
|
|
#else
|
|
ULONG CurrentLog;
|
|
ULONG LogSize[2];
|
|
#endif
|
|
ULONG RefreshCount;
|
|
ULONG StorageTypeCount;
|
|
ULONG Version;
|
|
DUAL Storage[HTYPE_COUNT];
|
|
} HHIVE, *PHHIVE;
|
|
|
|
#define IsFreeCell(Cell) ((Cell)->Size >= 0)
|
|
#define IsUsedCell(Cell) ((Cell)->Size < 0)
|