diff options
| author | Ronnie Sahlberg <ronnie_sahlberg@ozemail.com.au> | 2007-02-20 09:01:50 +0000 |
|---|---|---|
| committer | Ronnie Sahlberg <ronnie_sahlberg@ozemail.com.au> | 2007-02-20 09:01:50 +0000 |
| commit | 83c66c05e9255959577c73c37f5d9754ef2c72b8 (patch) | |
| tree | e68d2dbd90af7ffb56fac0adec209f8bd0c00438 /epan/dissectors/pidl | |
| parent | 0dfc6a0bf7c20092353760be2a8956ed1894e961 (diff) | |
add a PIDL specific helper for managing dissection of policy handles.
let this helper take a parameter to describe how the policy handle should be
managed (is this an open, close ?) to improve policy handle tracking.
(centralizing to a single function of code makes other changes easier)
create defines to indicate OPEN/CLOSE and use them as a start/test in the winreg conformance file.
svn path=/trunk/; revision=20872
Diffstat (limited to 'epan/dissectors/pidl')
| -rw-r--r-- | epan/dissectors/pidl/winreg.cnf | 30 |
1 files changed, 15 insertions, 15 deletions
diff --git a/epan/dissectors/pidl/winreg.cnf b/epan/dissectors/pidl/winreg.cnf index 276957c261..8b2ad602f4 100644 --- a/epan/dissectors/pidl/winreg.cnf +++ b/epan/dissectors/pidl/winreg.cnf @@ -79,21 +79,21 @@ HF_RENAME hf_winreg_winreg_SetKeySecurity_sd hf_winreg_sd # closed so that policyhandles when dissected contain nice info such as # [opened in xxx] [closed in yyy] # -# Policyhandles are opened in these functions (open==0x0001) -PARAM_VALUE winreg_dissect_element_OpenHKCR_handle_ 0x0001 -PARAM_VALUE winreg_dissect_element_OpenHKCU_handle_ 0x0001 -PARAM_VALUE winreg_dissect_element_OpenHKLM_handle_ 0x0001 -PARAM_VALUE winreg_dissect_element_OpenHKPD_handle_ 0x0001 -PARAM_VALUE winreg_dissect_element_OpenHKU_handle_ 0x0001 -PARAM_VALUE winreg_dissect_element_OpenHKCC_handle_ 0x0001 -PARAM_VALUE winreg_dissect_element_OpenHKDD_handle_ 0x0001 -PARAM_VALUE winreg_dissect_element_OpenHKPT_handle_ 0x0001 -PARAM_VALUE winreg_dissect_element_OpenHKPN_handle_ 0x0001 -PARAM_VALUE winreg_dissect_element_CreateKey_handle_ 0x0001 -PARAM_VALUE winreg_dissect_element_OpenKey_handle_ 0x0001 -# Policyhandles are closed in these functions (close==0x0002) -PARAM_VALUE winreg_dissect_element_CloseKey_handle_ 0x0002 -PARAM_VALUE winreg_dissect_element_DeleteKey_handle_ 0x0002 +# Policyhandles are opened in these functions +PARAM_VALUE winreg_dissect_element_OpenHKCR_handle_ PIDL_POLHND_OPEN +PARAM_VALUE winreg_dissect_element_OpenHKCU_handle_ PIDL_POLHND_OPEN +PARAM_VALUE winreg_dissect_element_OpenHKLM_handle_ PIDL_POLHND_OPEN +PARAM_VALUE winreg_dissect_element_OpenHKPD_handle_ PIDL_POLHND_OPEN +PARAM_VALUE winreg_dissect_element_OpenHKU_handle_ PIDL_POLHND_OPEN +PARAM_VALUE winreg_dissect_element_OpenHKCC_handle_ PIDL_POLHND_OPEN +PARAM_VALUE winreg_dissect_element_OpenHKDD_handle_ PIDL_POLHND_OPEN +PARAM_VALUE winreg_dissect_element_OpenHKPT_handle_ PIDL_POLHND_OPEN +PARAM_VALUE winreg_dissect_element_OpenHKPN_handle_ PIDL_POLHND_OPEN +PARAM_VALUE winreg_dissect_element_CreateKey_handle_ PIDL_POLHND_OPEN +PARAM_VALUE winreg_dissect_element_OpenKey_handle_ PIDL_POLHND_OPEN +# Policyhandles are closed in these functions +PARAM_VALUE winreg_dissect_element_CloseKey_handle_ PIDL_POLHND_CLOSE +PARAM_VALUE winreg_dissect_element_DeleteKey_handle_ PIDL_POLHND_CLOSE |